[OpenSIPS-Users] 3.2.11 vs 3.2.10 authorization

[Gabe Shepard]

Hi,
   We've run into this as well.  Doing a git bisect appears to point to
commit 72610573a637f1bad60ba07061e05d1652cb93e0 which is related to qop
validation.  If it helps, I've been testing with a Polycom VVX 450 running
firmware 6.4.3.

-Gabe

On Tue, Mar 14, 2023 at 4:39 PM Callum Guy <callum.guy at x-on.co.uk> wrote:

> Hi Matt,
>
> You are not alone, I have just performed the same update and ran into the
> same problem!
>
> No config changes, just an opensips package update on a CentOS 7 server.
>
> My only lead so far is the server referring to a stale nonce in its reply,
> this may be a red herring as I reverted so quickly I don't have much data!
>
> SIP/2.0 401 Unauthorized
> Via: SIP/2.0/WSS
> 4dd4fgrikg9v.invalid;received=99.100.77.236;rport=59260;branch=z9hG4bK2984131
> To: <sip:3129114 at fr-1.rtc.example.net
> >;tag=8dca.7f4e487b9989bf9b0212db1e9a1410a8
> From: <sip:3129114 at fr-1.rtc.example.net>;tag=ad8qlo9gaq
> Call-ID: 2cjev1ph5gr0m2337tur
> CSeq: 3 REGISTER
> WWW-Authenticate: Digest realm="fr-1.rtc.example.net",
> nonce="j9+Qf6N87TeziTRHnWacqtUl3wCf8nvD2I9jm21q+48A", *stale=true*
> Content-Length: 0
>
> I'll set up a test lab tomorrow and see if I can get to the bottom of it
> and will continue to follow this thread.
>
> Good luck,
>
> Callum
>
> On Tue, 14 Mar 2023 at 13:05, L S <efes99999 at gmail.com> wrote:
>
>> Hi,
>>
>> We are trying to upgrade from Opensips 3.2.10 to 3.2.11, but we are
>> running to an issue with registrations. It's the same server, same opensips
>> cfg file, but 3.2.10 allows/authorizes the registrations, but 3.2.11
>> returns 401 Unauthorized.
>>
>> The code that checks the credentials is:
>>
>> if (is_method("REGISTER|SUBSCRIBE")) {
>>    $avp(password)="xyz";
>>    if (!pv_www_authorize("")) {
>>        www_challenge("");
>>        exit;
>>   };
>> consume_credentials();
>> }
>>
>> Again it's same code, the same physical server. What might be causing
>> this?
>>
>> Thanks,
>> Matt
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>
>
>
> *0333 332 0000  |  x-on.co.uk <https://www.x-on.co.uk>  |   **
> <https://www.linkedin.com/company/x-on>   <https://www.facebook.com/XonTel>
>   <https://twitter.com/xonuk> **  |  **Practice Index Reviews
> <https://practiceindex.co.uk/gp/x-on>*
>
> *Our new office address: 22 Riduna Park, Melton IP12 1QT.*
>
> X-on is a trading name of Storacall Technology Ltd a limited company
> registered in England and Wales.
> Registered Office : Glebe Farm, Down Street, Dummer, Basingstoke,
> Hampshire, England RG25 2AD. Company Registration No. 2578478.
> The information in this e-mail is confidential and for use by the
> addressee(s) only. If you are not the intended recipient, please notify
> X-on immediately on +44(0)333 332 0000 and delete the
> message from your computer. If you are not a named addressee you must not
> use, disclose, disseminate, distribute, copy, print or reply to this email. Views
> or opinions expressed by an individual
> within this email may not necessarily reflect the views of X-on or its
> associated companies. Although X-on routinely screens for viruses,
> addressees should scan this email and any attachments
> for viruses. X-on makes no representation or warranty as to the absence of
> viruses in this email or any attachments.
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>


-- 
*Gabe Shepard*
*Architect, Advanced Applications*
Phone: 941 960-8205
Email: gshepard at sangoma.com
Website: www.sangoma.com
[image: Facebook] <https://www.facebook.com/sangoma> [image: Linkedin]
<https://www.linkedin.com/company/sangoma/> [image: Twitter]
<https://www.twitter.com/sangoma> [image: Youtube]
<https://www.youtube.com/user/SangomaTechnologies/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20230315/1ba67241/attachment.html>