[Home]

Summary:ASTERISK-05233: Non-working authentication with Audiocodes MP-124
Reporter:Morten Isaksen (misaksen)Labels:
Date Opened:2005-10-04 09:47:41Date Closed:2011-06-07 14:02:50
Priority:MajorRegression?No
Status:Closed/CompleteComponents:Channels/chan_sip/Interoperability
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:( 0) audiocodesdebug.txt
( 1) mp124debugdump.txt
( 2) mp124debugdump2.txt
( 3) sipdebug109.txt
( 4) sipdebug120beta1.txt
Description:Asterisk 1.20beta1 and CVS-HEAD does not work with Audiocodes MP-124. MP-124 is a box with 24 FXS ports and 24 SIP acounts.

Asterisk reports:

Oct  4 17:38:30 NOTICE[8372]: chan_sip.c:6180 check_auth: stale nonce received from '<sip:*2@10.131.0.1;user=phone>'

and then refuses the call. It worked with earlier versions of Asterisk.

****** ADDITIONAL INFORMATION ******

A dump of a conversation between the MP-124 and Asterisk is attached.

DEBUG level 4, VERBOSE level 4 and SIP debug enabled.
Comments:By: Olle Johansson (oej) 2005-10-04 10:08:57

I think calls from several accounts is somehow mixed up, I need a larger SIP debug trace, with the previous call from the audiocode and the call after, more than the failed call.
By: Morten Isaksen (misaksen) 2005-10-04 10:15:40

There are no other calls. At the moment I have only one phone connected to the MP-124. Already from the first call after a "service asterisk restart" the stale nonce thing happens.
By: Olle Johansson (oej) 2005-10-04 10:49:41

That is weird... Hmmm.
By: Olle Johansson (oej) 2005-10-04 11:06:09

Please apply this patch and run debugging again. It is no attempt to solve the issue, but to clarify a few of my questions.

Is it possible to get access to a system for testing?
By: Morten Isaksen (misaksen) 2005-10-04 11:18:24

The debug output after the patch has been applied is in mp124debugdump2.txt.

I will email you the ip and the username/password.
By: Morten Isaksen (misaksen) 2005-10-05 01:32:44

If I downgrade Asterisk from CVS-HEAD to 1.0.9 the MP-124 works with asterisk.

I have attached a debug of the conversation with asterisk CVS-HEAD and asterisk 1.0.9. I can see to small diffences. The SIP/2.0 407 answer from asterisk beta1 has a few more options and appends a received="<ip>" in the Via line.
By: Olle Johansson (oej) 2005-10-05 01:36:40

The "Stale nonce" message is no longer received with Asterisk cvs head, so I updated the topic.
By: Olle Johansson (oej) 2005-10-05 02:26:46

I believe that the patch that was committed tonight that removes the space at the end of the digest header, after the nonce, fixes this.

On the other hand, the AudioCodes parser is really bad to not handle that and terminate the string at the quotation mark.

Please test.
By: Filip Olsson (folsson) 2005-10-05 02:28:00

This is a duplicate for ASTERISK-5186.
By: Morten Isaksen (misaksen) 2005-10-05 02:36:04

It works now. Thanks!

I will send some info to Audiocodes about this.
By: Olle Johansson (oej) 2005-10-05 02:45:49

Yes, it was the space at the end of the Proxy-Authorization header. Fixed in another bug report.