Problem was solved and the issue was in the script causing double proxy_authorize check.
Due to one nonce index on authorization, kamailio failed authorization with wrong index in debug. Still cannot get why it worked for 40 seconds. On Fri, 03 Dec 2010 11:20:38 +0100, Daniel-Constantin Mierla <mico...@gmail.com> wrote: > Hello, > > On 12/2/10 1:42 PM, Spinov Evgeniy wrote: >> Hello. >> >> I have Kamailio ( K in further ) and 2x Asterisk boxes ( A1 and A2 in >> further ) configured, so UAC registers at K and when it sends a call, >> it's routed to A1 or A2, balanced. >> >> The problem is, that I cannot find how to authorize INVITE requests, so >> unregistered UAC could not send INVITE requests. Simply cannot find >> anything. >> >> I'm making registration, using www_authorize() and checking all INVITES >> with proxy_authorize(). Just after kamailio is started - everything >> works fine and as planned: registered UAC can call and not registered - >> cannot. But after aproximately 40 seconds everything is stopped. Not >> calls passed and everybody receives 407 Proxy Authorization is required. >> >> So, the question: how it is correctly to verify that incoming INVITE on >> K is authorized? It seems to me that I'm doing that in wrong way. > you have to do proxy_authorize() for each invite you want to authorize > (if you look at default config file for v3.1.x and search for WITH_AUTH, > you will see the config actions for authentication). The asterisks must > accept SIP traffic based on source ip filtering, allowing only calls > coming from kamailio. > > If you mean that the calls are interrupted after 40 seconds, then it is > very likely ACK is not routed properly. If you mean something else, > capture the SIP traffic via ngrep/wireshark, run kamailio in higher > debug lever (debug=3 in config) and send the SIP trace and the syslog > messages. Also, try to describe in more details what actually seems to > go wrong. All these will help people here on mailing list to give you > proper hints how to solve. > > Cheers, > Daniel > > -- > Daniel-Constantin Mierla > Kamailio (OpenSER) Advanced Training > Jan 24-26, 2011, Irvine, CA, USA > http://www.asipto.com _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
