Author Topic: sip registracion 407 Proxy Authentication Required  (Read 38449 times)

awsswa

  • Newbie
  • *
  • Posts: 4
    • View Profile
sip registracion 407 Proxy Authentication Required
« on: July 28, 2015, 10:47:25 PM »
Last yate version 5.5.0-1

accfile.conf

[3426131302]
enabled=yes
protocol=sip
formats=alaw
username=3426131302
interval=120
authname=1302
password=superpassword
domain=chernushka.perm.usi.ru
registrar=chernushka.perm.usi.ru:5060
localaddress=yes

Ignore authname ?

Registracion from yate failed:

REGISTER sip:chernushka.perm.usi.ru:5060 SIP/2.0
Contact: "3426131302" <sip:3426131302@83.219.5.135:5077>
Expires: 300
To: <sip:3426131302@chernushka.perm.usi.ru>
Call-ID: 420839329@chernushka.perm.usi.ru
Via: SIP/2.0/UDP 83.219.5.135:5077;rport;branch=z9hG4bK1663346368
From: "3426131302" <sip:3426131302@chernushka.perm.usi.ru>;tag=1303895794
User-Agent: YATE/2.0.0
Max-Forwards: 70
Allow: ACK, INVITE, BYE, CANCEL, REGISTER, REFER, OPTIONS, INFO
CSeq: 6 REGISTER
Content-Length: 0

------
20150727060011.043341 <sip:INFO> 'udp:172.16.0.4:5077' received 293 bytes SIP message from 62.148.237.145:5060 [0x19b60e0]
------
SIP/2.0 100 Trying
From: "3426131302"<sip:3426131302@chernushka.perm.usi.ru>;tag=1303895794
To: <sip:3426131302@chernushka.perm.usi.ru>
Call-ID: 420839329@chernushka.perm.usi.ru
CSeq: 6 REGISTER
Via: SIP/2.0/UDP 83.219.5.135:5077;rport=5077;branch=z9hG4bK1663346368
Content-Length: 0

------
20150727060011.045044 <sip:INFO> 'udp:172.16.0.4:5077' received 557 bytes SIP message from 62.148.237.145:5060 [0x19b60e0]
------
SIP/2.0 407 Proxy Authentication Required
From: "3426131302"<sip:3426131302@chernushka.perm.usi.ru>;tag=1303895794
To: <sip:3426131302@chernushka.perm.usi.ru>;tag=1540910747
Call-ID: 420839329@chernushka.perm.usi.ru
CSeq: 6 REGISTER
Via: SIP/2.0/UDP 83.219.5.135:5077;rport=5077;branch=z9hG4bK1663346368
supported: com.nortelnetworks.firewall,p-3rdpartycontrol,nosec,join
proxy-authenticate: Digest realm="Realm",nonce="MTQzNzk3NjgwNzgyMWE4YmQyZmY4ODgyMzEyNmMxM2NmZWZkNDMyZDMwOTE4",stale=false,algorithm=MD5,qop="auth,auth-int"
Content-Length: 0

=====================================================================================
work registracion from asterisk:

REGISTER 11 headers, 0 lines
Reliably Transmitting (no NAT) to 62.148.237.145:5060:
REGISTER sip:chernushka.perm.usi.ru SIP/2.0
Via: SIP/2.0/UDP 83.219.5.134:5060;branch=z9hG4bK4b813c50
Max-Forwards: 70
From: <sip:3426131302@chernushka.perm.usi.ru>;tag=as032becdf
To: <sip:3426131302@chernushka.perm.usi.ru>
Call-ID: 0cda743629f82f5f514dfea661cb3411@chernushka.perm.usi.ru
CSeq: 104 REGISTER
User-Agent: Asterisk version 11
Authorization: Digest username="1302", realm="Realm", algorithm=MD5, uri="sip:chernushka.perm.usi.ru", nonce="MTQzNzk3NjkzMDIyN2RmNTE5YjkaaaQwYjlkYjRhNzc0MTE4Y2U2MmJlNGRk", response="b765cd52a3b6636ef85fa106daaadee9", qop=auth, cnonce="7aa88c6f", nc=00000002
Expires: 120
Contact: <sip:3426131302@83.219.5.134:5060>
Content-Length: 0


---




marian

  • Hero Member
  • *****
  • Posts: 513
    • View Profile
Re: sip registracion 407 Proxy Authentication Required
« Reply #1 on: July 29, 2015, 12:13:14 AM »
Please dump the whole SIP log.
Yate retry with credentials is missing.

awsswa

  • Newbie
  • *
  • Posts: 4
    • View Profile
Re: sip registracion 407 Proxy Authentication Required
« Reply #2 on: July 29, 2015, 04:27:08 AM »
failed from yate

U 172.16.0.4:5077 -> 62.148.237.145:5060
REGISTER sip:chernushka.perm.usi.ru:5060 SIP/2.0.
Contact: <sip:3426131302@83.219.5.135:5077>.
Expires: 120.
To: <sip:3426131302@chernushka.perm.usi.ru>.
Call-ID: 1210431180@chernushka.perm.usi.ru.
Via: SIP/2.0/UDP 83.219.5.135:5077;rport;branch=z9hG4bK582220167.
From: <sip:3426131302@chernushka.perm.usi.ru>;tag=1435003162.
User-Agent: YATE/2.0.0.
Max-Forwards: 70.
Allow: ACK, INVITE, BYE, CANCEL, REGISTER, REFER, OPTIONS, INFO.
CSeq: 758 REGISTER.
Content-Length: 0.
.

#
U 62.148.237.145:5060 -> 172.16.0.4:5077
SIP/2.0 100 Trying.
From: <sip:3426131302@chernushka.perm.usi.ru>;tag=1435003162.
To: <sip:3426131302@chernushka.perm.usi.ru>.
Call-ID: 1210431180@chernushka.perm.usi.ru.
CSeq: 758 REGISTER.
Via: SIP/2.0/UDP 83.219.5.135:5077;rport=5077;branch=z9hG4bK582220167.
Content-Length: 0.
.

#
U 62.148.237.145:5060 -> 172.16.0.4:5077
SIP/2.0 407 Proxy Authentication Required.
From: <sip:3426131302@chernushka.perm.usi.ru>;tag=1435003162.
To: <sip:3426131302@chernushka.perm.usi.ru>;tag=74269381.
Call-ID: 1210431180@chernushka.perm.usi.ru.
CSeq: 758 REGISTER.
Via: SIP/2.0/UDP 83.219.5.135:5077;rport=5077;branch=z9hG4bK582220167.
supported: com.nortelnetworks.firewall,p-3rdpartycontrol,nosec,join.
proxy-authenticate: Digest realm="Realm",nonce="MTQzODE2NTQ5MDQxODZiODRmOGRlMDA4ZTY1ZmIyOGUwYzhiZGIxY2QzMTdl",stale=false,algorithm=MD5,qop="auth,auth-int".
Content-Length: 0.

======================================================================================================================

awsswa

  • Newbie
  • *
  • Posts: 4
    • View Profile
Re: sip registracion 407 Proxy Authentication Required
« Reply #3 on: July 29, 2015, 04:28:32 AM »
ok from asterisk

U 172.16.0.4:5060 -> 62.148.237.145:5060
REGISTER sip:chernushka.perm.usi.ru SIP/2.0.
Via: SIP/2.0/UDP 83.219.5.135:5060;branch=z9hG4bK6f7bbd2e.
Max-Forwards: 70.
From: <sip:3426131302@chernushka.perm.usi.ru>;tag=as4abbed5c.
To: <sip:3426131302@chernushka.perm.usi.ru>.
Call-ID: 28bd4e9a2abda8ef2fdcd2ec1e8b07ca@chernushka.perm.usi.ru.
CSeq: 234 REGISTER.
User-Agent: VoiceOne PBX.
Authorization: Digest username="1302", realm="Realm", algorithm=MD5, uri="sip:chernushka.perm.usi.ru", nonce="MTQzODE2NTI5OTQ5MTY0Mzk2YjE1NzFjOTA2NDNmYTA0NGM1ZTA3ZTMwYzY0", response="1c6c8819cff88391f90c26e2de5ff1b4", qop=auth, cnonce="28fed1a6", nc=00000003.
Expires: 120.
Contact: <sip:3426131302@83.219.5.135:5060>.
Content-Length: 0.
.

#
U 62.148.237.145:5060 -> 172.16.0.4:5060
SIP/2.0 100 Trying.
From: <sip:3426131302@chernushka.perm.usi.ru>;tag=as4abbed5c.
To: <sip:3426131302@chernushka.perm.usi.ru>.
Call-ID: 28bd4e9a2abda8ef2fdcd2ec1e8b07ca@chernushka.perm.usi.ru.
CSeq: 234 REGISTER.
Via: SIP/2.0/UDP 83.219.5.135:5060;branch=z9hG4bK6f7bbd2e.
Content-Length: 0.
.

#
U 62.148.237.145:5060 -> 172.16.0.4:5060
SIP/2.0 200 Registration Successful.
From: "1302 1302"<sip:3426131302@chernushka.perm.usi.ru>;tag=as4abbed5c.
To: <sip:3426131302@chernushka.perm.usi.ru>;tag=330228748.
Call-ID: 28bd4e9a2abda8ef2fdcd2ec1e8b07ca@chernushka.perm.usi.ru.
CSeq: 234 REGISTER.
Via: SIP/2.0/UDP 83.219.5.135:5060;branch=z9hG4bK6f7bbd2e.
contact: <sip:3426131302@83.219.5.135:5060>;expires=113.
supported: com.nortelnetworks.firewall,p-3rdpartycontrol,nosec,join.
Content-Length: 0.





dump its ok ?
« Last Edit: July 29, 2015, 04:32:42 AM by awsswa »

marian

  • Hero Member
  • *****
  • Posts: 513
    • View Profile
Re: sip registracion 407 Proxy Authentication Required
« Reply #4 on: July 29, 2015, 04:39:56 AM »
Can you dump the yate log (SIP messages)?
I mean ALL the conversation.
You dumped the initial REGISTER and the 407 response. Yate reply is missing.
What version or yate are you using?

awsswa

  • Newbie
  • *
  • Posts: 4
    • View Profile
Re: sip registracion 407 Proxy Authentication Required
« Reply #5 on: July 29, 2015, 04:54:26 AM »
dump from ngrep
ngrep -W byline -d eth0 host 62.148.237.145 -O /tmp/dlink.cap

first message from yate sip log

versions

Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
YATE 5.5.0-1 r5968 (http://YATE.null.ro) ready on semya.workgroup.local.
debug enable
Debug level: 8, objects: off, local: on, threshold: 10
debug sip level 9
Module sip debug on level 9 objects off
debug sip enable
Module sip debug on level 9 objects off

« Last Edit: July 29, 2015, 04:57:21 AM by awsswa »