[Home]

Summary:ASTERISK-13796: [patch] chan_iax2 reports endless if a peer cannot be registered (>100 logs/sec)
Reporter:mobeck (mobeck)Labels:
Date Opened:2009-03-21 17:31:25Date Closed:2009-06-16 13:34:01
Priority:MajorRegression?No
Status:Closed/CompleteComponents:Channels/chan_iax2
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:( 0) regauth_loop_update_patch.diff
Description:New installation of the last release (sample configs) including dahdi under Debian Etch.
Already installed local peer (iaxmodem), but still no entries in iax.conf/users.conf.

I receive the following errors:
chan_iax2.c:XXXX register_verify: No registration for peer 'iaxmodem' (from 127.0.0.1). Normally this error/info should be ok.

But the log (messages) and the console are showing hundreds of entries per second.
Log size is within minutes > 100MB.
Comments:By: snuffy (snuffy) 2009-03-22 00:18:59

Could you check the iax.conf
see if 'authdebug' is in the file.

If not under the general section add 'authdebug=no' this should make the message go away


By: Lorenz Barth (bartpbx) 2009-04-04 14:45:48

i had the same problem appearing on 1.4.23 adding authdebug=no solved the issue
By: Sergey Pronin (pronini) 2009-05-07 08:13:24

Yes, this realy solves the issue.
But something is wrong in chan_iax2.c. Registration notices should not be sent 10 times a second.
By: Ronald Wells (ronaldlw) 2009-05-13 10:48:59

I have this same issue, is there any update to this?  Setting the authdebug=no keeps the log from growing, but does that actually fix any underlying issue?

Thanks,
Ron
By: Ronald Wells (ronaldlw) 2009-05-13 13:07:50

actually I answered my own question, while the log is no longer being filled, the /usr/sbin/iaxmodem process is constantly using about 50% of my cpu.  Is there a safe way to disable this process until this is fixed?

Thanks,
Ron


By: David Vossel (dvossel) 2009-05-13 14:12:01

I know what is causing this. Sit tight and I'll have a patch this afternoon or tomorrow.  There are a whole host of reports out on this right now.
By: Ronald Wells (ronaldlw) 2009-05-13 14:13:31

dvossel, ok, thanks!  I think this is what has been causing our server to kernel panic.. at least i hope so.

Ron
By: Ben Smith (bensmith72) 2009-05-13 19:36:23

Is it known if the same issue exists in Asterisk 1.6.

I am running 1.6.0.7 and have the same problem, endless  "chan_iax2.c:XXXX register_verify: No registration for peer 'iaxmodem' (from 127.0.0.1)" messages in the cli and log.

Thanks
Ben
By: David Vossel (dvossel) 2009-05-14 16:40:06

uploaded a patch. its going through some review right now and should be committed soon. let me know if you have any issues with it.
By: Ben Smith (bensmith72) 2009-05-14 18:15:29

dvossel
Can you tell me does this bug and patch apply to asterisk 1.6? Have you been able to reproduce this problem on 1.6.X?

Thanks
Ben
By: sles (sles) 2009-05-15 03:11:42

Hello!

I have the same problem with 1.6.1:

Rx-Frame Retry[ No] -- OSeqno: 048 ISeqno: 048 Type: IAX     Subclass: REGREQ
  Timestamp: 03628ms  SCall: 19845  DCall: 03128 [87.249.237.30:1915]
  USERNAME        : guest
  REFRESH         : 300
  MD5 RESULT      : 6feeb5426a946f257ac311088583f4c7

Tx-Frame Retry[000] -- OSeqno: 048 ISeqno: 049 Type: IAX     Subclass: REGAUTH
  Timestamp: 03634ms  SCall: 03128  DCall: 19845 [87.249.237.30:1915]
  AUTHMETHODS     : 3
  CHALLENGE       : \x37\x30\x37\x38\x32\x36\x37\x34\x36
  USERNAME        : guest

Rx-Frame Retry[ No] -- OSeqno: 049 ISeqno: 049 Type: IAX     Subclass: REGREQ
  Timestamp: 03704ms  SCall: 19845  DCall: 03128 [87.249.237.30:1915]
  USERNAME        : guest
  REFRESH         : 300
  MD5 RESULT      : 2c882cdab1d3aefb4b857c9ceaa857c6

Tx-Frame Retry[000] -- OSeqno: 049 ISeqno: 050 Type: IAX     Subclass: REGAUTH
  Timestamp: 03710ms  SCall: 03128  DCall: 19845 [87.249.237.30:1915]
  AUTHMETHODS     : 3
  CHALLENGE       : \x31\x37\x37\x35\x31\x36\x34\x39\x31
  USERNAME        : guest

and forever.


Is there patch for 1.6.1?
By: David Vossel (dvossel) 2009-05-15 09:49:12

that patch was made for 1.4, it probably won't patch cleanly into 1.6.  No worries though, I'm working on it.  My goal is to have it committed by the end of the day.
By: Digium Subversion (svnbot) 2009-05-15 17:43:24

Repository: asterisk
Revision: 194873

U   branches/1.4/channels/chan_iax2.c

------------------------------------------------------------------------
r194873 | dvossel | 2009-05-15 17:43:22 -0500 (Fri, 15 May 2009) | 17 lines

IAX2 REGAUTH loop

IAX was not sending REGREJ to terminate invalid registrations.  Instead it sent another REGAUTH if the authentication challenge failed.  This caused a loop of REGREQ and REGAUTH frames.

(Related to Security fix AST-2009-001)

(closes issue ASTERISK-13931)
Reported by: aragon
Tested by: dvossel

(closes issue ASTERISK-13796)
Reported by: mobeck
Patches:
     regauth_loop_update_patch.diff uploaded by dvossel (license 671)
Tested by: dvossel


------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=194873
By: Digium Subversion (svnbot) 2009-05-15 17:44:53

Repository: asterisk
Revision: 194874

_U  trunk/
U   trunk/channels/chan_iax2.c

------------------------------------------------------------------------
r194874 | dvossel | 2009-05-15 17:44:53 -0500 (Fri, 15 May 2009) | 23 lines

Merged revisions 194873 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.4

........
 r194873 | dvossel | 2009-05-15 17:43:13 -0500 (Fri, 15 May 2009) | 17 lines
 
 IAX2 REGAUTH loop
 
 IAX was not sending REGREJ to terminate invalid registrations.  Instead it sent another REGAUTH if the authentication challenge failed.  This caused a loop of REGREQ and REGAUTH frames.
 
 (Related to Security fix AST-2009-001)
 
 (closes issue ASTERISK-13931)
 Reported by: aragon
 Tested by: dvossel
 
 (closes issue ASTERISK-13796)
 Reported by: mobeck
 Patches:
       regauth_loop_update_patch.diff uploaded by dvossel (license 671)
 Tested by: dvossel
........

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=194874
By: Digium Subversion (svnbot) 2009-05-15 17:46:01

Repository: asterisk
Revision: 194875

_U  branches/1.6.0/
U   branches/1.6.0/channels/chan_iax2.c

------------------------------------------------------------------------
r194875 | dvossel | 2009-05-15 17:46:00 -0500 (Fri, 15 May 2009) | 30 lines

Merged revisions 194874 via svnmerge from
https://origsvn.digium.com/svn/asterisk/trunk

................
 r194874 | dvossel | 2009-05-15 17:44:44 -0500 (Fri, 15 May 2009) | 23 lines
 
 Merged revisions 194873 via svnmerge from
 https://origsvn.digium.com/svn/asterisk/branches/1.4
 
 ........
   r194873 | dvossel | 2009-05-15 17:43:13 -0500 (Fri, 15 May 2009) | 17 lines
   
   IAX2 REGAUTH loop
   
   IAX was not sending REGREJ to terminate invalid registrations.  Instead it sent another REGAUTH if the authentication challenge failed.  This caused a loop of REGREQ and REGAUTH frames.
   
   (Related to Security fix AST-2009-001)
   
   (closes issue ASTERISK-13931)
   Reported by: aragon
   Tested by: dvossel
   
   (closes issue ASTERISK-13796)
   Reported by: mobeck
   Patches:
         regauth_loop_update_patch.diff uploaded by dvossel (license 671)
   Tested by: dvossel
 ........
................

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=194875
By: Digium Subversion (svnbot) 2009-05-15 17:47:04

Repository: asterisk
Revision: 194876

_U  branches/1.6.1/
U   branches/1.6.1/channels/chan_iax2.c

------------------------------------------------------------------------
r194876 | dvossel | 2009-05-15 17:47:03 -0500 (Fri, 15 May 2009) | 30 lines

Merged revisions 194874 via svnmerge from
https://origsvn.digium.com/svn/asterisk/trunk

................
 r194874 | dvossel | 2009-05-15 17:44:44 -0500 (Fri, 15 May 2009) | 23 lines
 
 Merged revisions 194873 via svnmerge from
 https://origsvn.digium.com/svn/asterisk/branches/1.4
 
 ........
   r194873 | dvossel | 2009-05-15 17:43:13 -0500 (Fri, 15 May 2009) | 17 lines
   
   IAX2 REGAUTH loop
   
   IAX was not sending REGREJ to terminate invalid registrations.  Instead it sent another REGAUTH if the authentication challenge failed.  This caused a loop of REGREQ and REGAUTH frames.
   
   (Related to Security fix AST-2009-001)
   
   (closes issue ASTERISK-13931)
   Reported by: aragon
   Tested by: dvossel
   
   (closes issue ASTERISK-13796)
   Reported by: mobeck
   Patches:
         regauth_loop_update_patch.diff uploaded by dvossel (license 671)
   Tested by: dvossel
 ........
................

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=194876
By: Digium Subversion (svnbot) 2009-05-15 17:48:22

Repository: asterisk
Revision: 194877

_U  branches/1.6.2/
U   branches/1.6.2/channels/chan_iax2.c

------------------------------------------------------------------------
r194877 | dvossel | 2009-05-15 17:48:21 -0500 (Fri, 15 May 2009) | 30 lines

Merged revisions 194874 via svnmerge from
https://origsvn.digium.com/svn/asterisk/trunk

................
 r194874 | dvossel | 2009-05-15 17:44:44 -0500 (Fri, 15 May 2009) | 23 lines
 
 Merged revisions 194873 via svnmerge from
 https://origsvn.digium.com/svn/asterisk/branches/1.4
 
 ........
   r194873 | dvossel | 2009-05-15 17:43:13 -0500 (Fri, 15 May 2009) | 17 lines
   
   IAX2 REGAUTH loop
   
   IAX was not sending REGREJ to terminate invalid registrations.  Instead it sent another REGAUTH if the authentication challenge failed.  This caused a loop of REGREQ and REGAUTH frames.
   
   (Related to Security fix AST-2009-001)
   
   (closes issue ASTERISK-13931)
   Reported by: aragon
   Tested by: dvossel
   
   (closes issue ASTERISK-13796)
   Reported by: mobeck
   Patches:
         regauth_loop_update_patch.diff uploaded by dvossel (license 671)
   Tested by: dvossel
 ........
................

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=194877
By: Digium Subversion (svnbot) 2009-06-04 14:37:44

Repository: asterisk
Revision: 199204

U   tags/1.4.25.1/channels/chan_iax2.c

------------------------------------------------------------------------
r199204 | dvossel | 2009-06-04 14:37:43 -0500 (Thu, 04 Jun 2009) | 17 lines

IAX2 REGAUTH loop

IAX was not sending REGREJ to terminate invalid registrations.  Instead it sent another REGAUTH if the authentication challenge failed.  This caused a loop of REGREQ and REGAUTH frames.

(Related to Security fix AST-2009-001)

(closes issue ASTERISK-13931)
Reported by: aragon
Tested by: dvossel

(closes issue ASTERISK-13796)
Reported by: mobeck
Patches:
     regauth_loop_update_patch.diff uploaded by dvossel (license 671)
Tested by: dvossel


------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=199204
By: Digium Subversion (svnbot) 2009-06-04 14:39:18

Repository: asterisk
Revision: 199206

U   tags/1.6.0.10/channels/chan_iax2.c

------------------------------------------------------------------------
r199206 | dvossel | 2009-06-04 14:39:17 -0500 (Thu, 04 Jun 2009) | 17 lines

IAX2 REGAUTH loop

IAX was not sending REGREJ to terminate invalid registrations.  Instead it sent another REGAUTH if the authentication challenge failed.  This caused a loop of REGREQ and REGAUTH frames.

(Related to Security fix AST-2009-001)

(closes issue ASTERISK-13931)
Reported by: aragon
Tested by: dvossel

(closes issue ASTERISK-13796)
Reported by: mobeck
Patches:
     regauth_loop_update_patch.diff uploaded by dvossel (license 671)
Tested by: dvossel


------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=199206
By: Digium Subversion (svnbot) 2009-06-04 14:47:57

Repository: asterisk
Revision: 199208

U   tags/1.6.1.1/channels/chan_iax2.c

------------------------------------------------------------------------
r199208 | dvossel | 2009-06-04 14:47:56 -0500 (Thu, 04 Jun 2009) | 16 lines

IAX2 REGAUTH loop

IAX was not sending REGREJ to terminate invalid registrations.  Instead it sent another REGAUTH if the authentication challenge failed.  This caused a loop of REGREQ and REGAUTH frames.

(Related to Security fix AST-2009-001)

(closes issue ASTERISK-13931)
Reported by: aragon
Tested by: dvossel

(closes issue ASTERISK-13796)
Reported by: mobeck
Patches:
regauth_loop_update_patch.diff uploaded by dvossel (license 671)
Tested by: dvossel

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=199208