[Home]

Summary:ASTERISK-08744: insecure=very not work
Reporter:Badalian Vyacheslav (slavon)Labels:
Date Opened:2007-02-07 01:31:57.000-0600Date Closed:2011-06-07 14:08:01
Priority:MinorRegression?No
Status:Closed/CompleteComponents:Core/General
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:
Description:[ccm-trunk]
type=friend
host=87.255.0.210
insecure=very
context=ccm-in
accountcode=ccm-trunk
canreinvite=no

3 day work ok... now say - Proxy Authentication Required... restart asterisk not help for me...

****** ADDITIONAL INFORMATION ******

Via: SIP/2.0/UDP  87.255.0.210:5060;branch=z9hG4bK32c96592
From: "Badalian Vyacheslav" <sip:113@87.255.0.210>;tag=16792470
To: <sip:611@87.255.0.218>
Date: Wed, 07 Feb 2007 07:27:31 GMT
Call-ID: aa74f900-1dc1d47f-9d3-d200ff57@87.255.0.210
Supported: timer
Min-SE:  1800
User-Agent: Cisco-CCM4.1
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK
CSeq: 101 INVITE
Max-Forwards: 70
Remote-Party-ID: "Badalian Vyacheslav" <sip:113@87.255.0.210>;party=calling;screen=no;privacy=off
Contact: <sip:113@87.255.0.210:5060>
Expires: 180
Allow-Events: telephone-event
Content-Type: application/sdp
Content-Length: 227

v=0
o=CiscoSystemsCCM-SIP 2000 1000 IN IP4 87.255.0.210
s=SIP Call
c=IN IP4 87.255.0.210
t=0 0
m=audio 29152 RTP/AVP 0 101
a=sendrecv
a=rtpmap:0 PCMU/8000
a=ptime:20
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15

10:27:03.896736 IP 87.255.0.218.5060 > 87.255.0.210.5060: SIP, length: 519
E..#....@...W...W...........SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP  87.255.0.210:5060;branch=z9hG4bK32c96592;received=87.255.0.210
From: "Badalian Vyacheslav" <sip:113@87.255.0.210>;tag=16792470
To: <sip:611@87.255.0.218>;tag=as2d26661e
Call-ID: aa74f900-1dc1d47f-9d3-d200ff57@87.255.0.210
CSeq: 101 INVITE
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Proxy-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="191ca624"
Content-Length: 0


10:27:03.898044 IP 87.255.0.210.5060 > 87.255.0.218.5060: SIP, length: 352
E`.|....|..MW...W........h.]ACK sip:611@87.255.0.218:5060 SIP/2.0
Via: SIP/2.0/UDP  87.255.0.210:5060;branch=z9hG4bK32c96592
From: "Badalian Vyacheslav" <sip:113@87.255.0.210>;tag=16792470
To: <sip:611@87.255.0.218>;tag=as2d26661e
Date: Wed, 07 Feb 2007 07:27:31 GMT
Call-ID: aa74f900-1dc1d47f-9d3-d200ff57@87.255.0.210
Max-Forwards: 70
CSeq: 101 ACK
Content-Length: 0
Comments:By: Badalian Vyacheslav (slavon) 2007-02-07 01:54:14.000-0600

[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: Auto destroying SIP dialog '5e2bb800-1dc1d483-a24-d200ff57@87.255.0.210'
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: Destroying SIP dialog 5e2bb800-1dc1d483-a24-d200ff57@87.255.0.210
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: 66551ef6-fbe6b081@10.10.131.211 Their Tag 16607aa9a3565109o0 Our tag: as3d97d32d
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: 7bbcb2d6-cc112e28@10.10.147.211 Their Tag 397bf3b3227d1b90o0 Our tag: as68c79ef9
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: 44cfc45d0a7cd7f24fe479805ba858f2@87.255.0.218 Their Tag 16793163 Our tag: as2be0d28e
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: CEE7DCC-B5B711DB-92B0E9FA-CBACB0D0@87.255.5.254 Their Tag 389A67D4-22E2 Our tag: as1ae539f1
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: 040175ce71eba67a5bb9fb041e95f8e3@87.255.0.218 Their Tag 389A5DCC-6C7 Our tag: as3f13c4b1
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: 2218805515@10.10.199.204 Their Tag 3300014448 Our tag: as0cd2f588
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: 0cb0f1a259fbfea412cc69ff5e5c5d8b@87.255.0.218 Their Tag 3899C428-F9D Our tag: as6390a4a7
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: 62cf6122-78b606b1@10.10.136.41 Their Tag 11d1866ea98341d5o0 Our tag: as1c78d66c
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: 448fe3be0f3fb9267a38e4152c329634@87.255.0.218 Their Tag 89E80FC0-1D4E Our tag: as0ac62fc4
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: a23bbc7b-2996146c@10.10.139.247 Their Tag ff31b52fb8ff5348o0 Our tag: as7f6e926a
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: 40a8f315-394c52f3@10.10.14.66 Their Tag 7458de484114a968o0 Our tag: as6d138717
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = No match Their Call ID: 97196e3b-5316a205@10.10.14.66 Their Tag 743748d3892468o1 Our tag: as5e493b37
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: Setting NAT on RTP to Off
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: Allocating new SIP dialog for 713e8800-1dc1d483-a26-d200ff57@87.255.0.210 - INVITE (With RTP)
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: **** Received INVITE (5) - Command in SIP INVITE
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: Setting NAT on RTP to Off
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: = Found Their Call ID: 713e8800-1dc1d483-a26-d200ff57@87.255.0.210 Their Tag 16793183 Our tag: as2b15274f
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: **** Received ACK (6) - Command in SIP ACK
[Feb  7 10:54:05] DEBUG[6589] chan_sip.c: Stopping retransmission on '713e8800-1dc1d483-a26-d200ff57@87.255.0.210' of Response 101: Match Not Found
By: Badalian Vyacheslav (slavon) 2007-02-07 01:58:00.000-0600

Found truble...
in sip.conf i add

[113]
....
....
....

and asterisk say "Proxy Authentication Required" because From: "Badalian Vyacheslav" <sip:113@87.255.0.210>;tag=16792470

But why? i can't have user 113 on asterisk and 113 on CiscoCallManager?
By: Badalian Vyacheslav (slavon) 2007-02-07 02:18:39.000-0600

if it normal.. close this and thanks )
By: Joshua C. Colp (jcolp) 2007-02-07 08:20:02.000-0600

chan_sip prefers users over peers and it finds users by looking at the user portion of the From header. In your case it was 113 and matched a user, so it prompted for a user/pass.