[asterisk-bugs] [JIRA] (ASTERISK-26039) Failure to INVITE authentication. (When the From header is "Anonymous".)
Hiroaki Komatsu (JIRA)
noreply at issues.asterisk.org
Thu May 19 04:48:56 CDT 2016
[ https://issues.asterisk.org/jira/browse/ASTERISK-26039?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Hiroaki Komatsu updated ASTERISK-26039:
---------------------------------------
Description:
On the asterisk, the same IP of the terminal has been registered.
{noformat}
Name/username Host Dyn Forcerport Comedia ACL Port Status Description
2001/2001 10.7.120.227 D Auto (No) No 5060 Unmonitored
2002/2002 10.7.120.227 D Auto (No) No 5061 Unmonitored
2003/2003 (Unspecified) D Auto (No) No 0 Unmonitored
{noformat}
I sent the invite(From header is "Anonymous") from 2002 terminal to Asterisk in this state.As a result, it became the invite authentication error.
{noformat}
[May 19 23:04:27] WARNING[28383][C-00000003]: chan_sip.c:16583 check_auth: username mismatch, have <2002>, digest has <2001>
[May 19 23:04:27] NOTICE[28383][C-00000003]: chan_sip.c:25473 handle_request_invite: Failed to authenticate device "Anonymous" <sip:anonymous at anonymous.invalid>;tag=31853SIPpTag091
{noformat}
>From the log, Asterisk is a signal received from the 2002 terminal, it seems to have recognized that it has received from 2001.
If the From header of Anonymous, I think Asterisk performs a search of the terminal on the basis of the IP address. However, because a search without the port number, I think that the above results.
Can you confirm the problem existence and Workarounds.
I attach a SIPp scenario and asterisk configuration files when performing a reproduction test.
■Environment, Steps to Reproduce
{noformat}
◎Asterisk(10.7.120.249)
・centOS 6.5
・asterisk-13.9.1
・Asterisk reads the following configuration.
- sip.conf
- extensions.conf
◎SIPp client(10.7.120.227)
・centOS 6.5
・sipp-3.3
・Steps to Reproduce
①register
#cd sipp/register
#./uac_register.sh
⇒It registers the 2001 and 2002 terminal to Asterisk
②invite
#cd sipp/invite_anonymous
#./uac_invite.sh
⇒It sends the invite(From header is "Anonymous") from the 2002 terminal to Asterisk.
⇒It became the invite authentication error.
{noformat}
was:
On the asterisk, the same IP of the terminal has been registered.
{noformat}
Name/username Host Dyn Forcerport Comedia ACL Port Status Description
2001/2001 10.7.120.227 D Auto (No) No 5060 Unmonitored
2002/2002 10.7.120.227 D Auto (No) No 5061 Unmonitored
2003/2003 (Unspecified) D Auto (No) No 0 Unmonitored
{noformat}
I sent the invite(From header is "Anonymous") from 2002 terminal to Asterisk in this state.As a result, it became the invite authentication error.
{noformat}
[May 19 23:04:27] WARNING[28383][C-00000003]: chan_sip.c:16583 check_auth: username mismatch, have <2002>, digest has <2001>
[May 19 23:04:27] NOTICE[28383][C-00000003]: chan_sip.c:25473 handle_request_invite: Failed to authenticate device "Anonymous" <sip:anonymous at anonymous.invalid>;tag=31853SIPpTag091
{noformat}
>From the log, Asterisk is a signal received from the 2002 terminal, it seems to have recognized that it has received from 2001.
If the From header of Anonymous, I think Asterisk performs a search of the terminal on the basis of the IP address. However, because a search without the port number, I think that the above results.
Can you confirm whether or not a problem on this issue.
I attach a SIPp scenario and asterisk configuration files when performing a reproduction test.
■Environment, Steps to Reproduce
{noformat}
◎Asterisk(10.7.120.249)
・centOS 6.5
・asterisk-13.9.1
・Asterisk reads the following configuration.
- sip.conf
- extensions.conf
◎SIPp client(10.7.120.227)
・centOS 6.5
・sipp-3.3
・Steps to Reproduce
①register
#cd sipp/register
#./uac_register.sh
⇒It registers the 2001 and 2002 terminal to Asterisk
②invite
#cd sipp/invite_anonymous
#./uac_invite.sh
⇒It sends the invite(From header is "Anonymous") from the 2002 terminal to Asterisk.
⇒It became the invite authentication error.
{noformat}
> Failure to INVITE authentication. (When the From header is "Anonymous".)
> ------------------------------------------------------------------------
>
> Key: ASTERISK-26039
> URL: https://issues.asterisk.org/jira/browse/ASTERISK-26039
> Project: Asterisk
> Issue Type: Bug
> Security Level: None
> Components: Channels/chan_sip/General
> Affects Versions: 13.9.1
> Environment: centOS 6.5(kernel-2.6.32-431.3.1.el6.x86_64)
> Reporter: Hiroaki Komatsu
> Attachments: extensions.conf, sip.conf, sipp.tar.gz
>
>
> On the asterisk, the same IP of the terminal has been registered.
> {noformat}
> Name/username Host Dyn Forcerport Comedia ACL Port Status Description
> 2001/2001 10.7.120.227 D Auto (No) No 5060 Unmonitored
> 2002/2002 10.7.120.227 D Auto (No) No 5061 Unmonitored
> 2003/2003 (Unspecified) D Auto (No) No 0 Unmonitored
> {noformat}
> I sent the invite(From header is "Anonymous") from 2002 terminal to Asterisk in this state.As a result, it became the invite authentication error.
> {noformat}
> [May 19 23:04:27] WARNING[28383][C-00000003]: chan_sip.c:16583 check_auth: username mismatch, have <2002>, digest has <2001>
> [May 19 23:04:27] NOTICE[28383][C-00000003]: chan_sip.c:25473 handle_request_invite: Failed to authenticate device "Anonymous" <sip:anonymous at anonymous.invalid>;tag=31853SIPpTag091
> {noformat}
> From the log, Asterisk is a signal received from the 2002 terminal, it seems to have recognized that it has received from 2001.
> If the From header of Anonymous, I think Asterisk performs a search of the terminal on the basis of the IP address. However, because a search without the port number, I think that the above results.
> Can you confirm the problem existence and Workarounds.
> I attach a SIPp scenario and asterisk configuration files when performing a reproduction test.
> ■Environment, Steps to Reproduce
> {noformat}
> ◎Asterisk(10.7.120.249)
> ・centOS 6.5
> ・asterisk-13.9.1
> ・Asterisk reads the following configuration.
> - sip.conf
> - extensions.conf
> ◎SIPp client(10.7.120.227)
> ・centOS 6.5
> ・sipp-3.3
> ・Steps to Reproduce
> ①register
> #cd sipp/register
> #./uac_register.sh
> ⇒It registers the 2001 and 2002 terminal to Asterisk
> ②invite
> #cd sipp/invite_anonymous
> #./uac_invite.sh
> ⇒It sends the invite(From header is "Anonymous") from the 2002 terminal to Asterisk.
> ⇒It became the invite authentication error.
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.2#6252)
More information about the asterisk-bugs
mailing list