[Home]

Summary:ASTERISK-21911: Tearing down a registration throws a 403 back at the endpoint
Reporter:Malcolm Davenport (mdavenport)Labels:
Date Opened:2013-06-14 16:08:28Date Closed:2013-06-14 16:58:09
Priority:MajorRegression?
Status:Closed/CompleteComponents:Resources/res_pjsip
Versions:12 Frequency of
Occurrence		Constant
Related
Issues:
Environment:Asterisk SVN-trunk-r391828Attachments:( 0) res_sip.conf
Description:When an endpoint (a phone) unregisters, Asterisk throws back a 403 Forbidden.

{noformat}

<--- Received SIP request (440 bytes) from UDP:10.24.18.122:5060 --->
REGISTER sip:10.24.13.224:5060 SIP/2.0
Via: SIP/2.0/UDP 10.24.18.122:5060;rport;branch=z9hG4bKPjZZwPzKWwSFHOZYm-2.uPVl4jVTW5Qyrs
Max-Forwards: 70
From: "101" <sip:101@10.24.13.224>;tag=e1basP0.l21.fPtBgYCCiwKY4sM9y.YI
To: "101" <sip:101@10.24.13.224>
Call-ID: DDCeuSslqp6eFL2pnXZQqHYhbL26w9sa
CSeq: 21075 REGISTER
User-Agent: Digium D40 1_3_2_0_54993
Contact: "101" <sip:101@10.24.18.122:5060;ob>
Expires: 0
Content-Length:  0


<--- Transmitting SIP response (526 bytes) to UDP:10.24.18.122:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.24.18.122:5060;rport;received=10.24.18.122;branch=z9hG4bKPjZZwPzKWwSFHOZYm-2.uPVl4jVTW5Qyrs
Call-ID: DDCeuSslqp6eFL2pnXZQqHYhbL26w9sa
From: "101" <sip:101@10.24.13.224>;tag=e1basP0.l21.fPtBgYCCiwKY4sM9y.YI
To: "101" <sip:101@10.24.13.224>;tag=z9hG4bKPjZZwPzKWwSFHOZYm-2.uPVl4jVTW5Qyrs
CSeq: 21075 REGISTER
WWW-Authenticate: Digest  realm="asterisk",nonce="1371243446/7c1a9455510fc626baa11984ddccbe35",opaque="763dcb680464780b",algorithm=md5,qop="auth"
Content-Length:  0


<--- Received SIP request (731 bytes) from UDP:10.24.18.122:5060 --->
REGISTER sip:10.24.13.224:5060 SIP/2.0
Via: SIP/2.0/UDP 10.24.18.122:5060;rport;branch=z9hG4bKPjdlxMV0z5Xf7OMlXX-SIHR-oLxyE9XOir
Max-Forwards: 70
From: "101" <sip:101@10.24.13.224>;tag=e1basP0.l21.fPtBgYCCiwKY4sM9y.YI
To: "101" <sip:101@10.24.13.224>
Call-ID: DDCeuSslqp6eFL2pnXZQqHYhbL26w9sa
CSeq: 21076 REGISTER
User-Agent: Digium D40 1_3_2_0_54993
Contact: "101" <sip:101@10.24.18.122:5060;ob>
Expires: 0
Authorization: Digest username="101", realm="asterisk", nonce="1371243446/7c1a9455510fc626baa11984ddccbe35", uri="sip:10.24.13.224:5060", response="713d17682f2cb202c64b2822fdc53253", algorithm=md5, cnonce="HRNxPe8yOC0HwcvpNWOfY05s7K4YGOgV", opaque="763dcb680464780b", qop=auth, nc=00000001
Content-Length:  0


<--- Transmitting SIP response (376 bytes) to UDP:10.24.18.122:5060 --->
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 10.24.18.122:5060;rport;received=10.24.18.122;branch=z9hG4bKPjdlxMV0z5Xf7OMlXX-SIHR-oLxyE9XOir
Call-ID: DDCeuSslqp6eFL2pnXZQqHYhbL26w9sa
From: "101" <sip:101@10.24.13.224>;tag=e1basP0.l21.fPtBgYCCiwKY4sM9y.YI
To: "101" <sip:101@10.24.13.224>;tag=z9hG4bKPjdlxMV0z5Xf7OMlXX-SIHR-oLxyE9XOir
CSeq: 21076 REGISTER
Content-Length:  0
{noformat}
Comments:By: Mark Michelson (mmichelson) 2013-06-14 16:28:04.999-0500

Tried with my Digium phone (firmware: 1_0_5_1_47270) and see the following:

{noformat}
<--- Received SIP request (452 bytes) from UDP:10.24.19.174:5060 --->
REGISTER sip:10.24.20.249:5060 SIP/2.0
Via: SIP/2.0/UDP 10.24.19.174:5060;rport;branch=z9hG4bKPjscLmLpH2tN0BEiimEj1cpf8TQw5R-AnV
Max-Forwards: 70
From: "Carol" <sip:carol@10.24.20.249>;tag=.y2y-.Htcj8fcec3WjKtEMFJ2je-fg-K
To: "Carol" <sip:carol@10.24.20.249>
Call-ID: 6X-Xfsu2t685mxNuaVJZnAlHs2ACcSwY
CSeq: 15569 REGISTER
User-Agent: Digium D40 1_0_5_1_47270
Contact: "Carol" <sip:carol@10.24.19.174:5060;ob>
Expires: 0
Content-Length:  0


<--- Transmitting SIP response (534 bytes) to UDP:10.24.19.174:5060 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.24.19.174:5060;rport;received=10.24.19.174;branch=z9hG4bKPjscLmLpH2tN0BEiimEj1cpf8TQw5R-AnV
Call-ID: 6X-Xfsu2t685mxNuaVJZnAlHs2ACcSwY
From: "Carol" <sip:carol@10.24.20.249>;tag=.y2y-.Htcj8fcec3WjKtEMFJ2je-fg-K
To: "Carol" <sip:carol@10.24.20.249>;tag=z9hG4bKPjscLmLpH2tN0BEiimEj1cpf8TQw5R-AnV
CSeq: 15569 REGISTER
WWW-Authenticate: Digest  realm="asterisk",nonce="1371243829/f3ef6fa692241156e3d4dfa07628853d",opaque="72b10723380fe833",algorithm=md5,qop="auth"
Content-Length:  0


<--- Received SIP request (745 bytes) from UDP:10.24.19.174:5060 --->
REGISTER sip:10.24.20.249:5060 SIP/2.0
Via: SIP/2.0/UDP 10.24.19.174:5060;rport;branch=z9hG4bKPjtJPG2UWEAGt7QBPaQp-evBqgBTFluAhd
Max-Forwards: 70
From: "Carol" <sip:carol@10.24.20.249>;tag=.y2y-.Htcj8fcec3WjKtEMFJ2je-fg-K
To: "Carol" <sip:carol@10.24.20.249>
Call-ID: 6X-Xfsu2t685mxNuaVJZnAlHs2ACcSwY
CSeq: 15570 REGISTER
User-Agent: Digium D40 1_0_5_1_47270
Contact: "Carol" <sip:carol@10.24.19.174:5060;ob>
Expires: 0
Authorization: Digest username="carol", realm="asterisk", nonce="1371243829/f3ef6fa692241156e3d4dfa07628853d", uri="sip:10.24.20.249:5060", response="4406beb67fb1f3540399fe0e33d7c579", algorithm=md5, cnonce="PKrCLB5ADHC.yC6eVBcfcvYn095b9z0G", opaque="72b10723380fe833", qop=auth, nc=00000001
Content-Length:  0


   -- Removed contact 'sip:carol@10.24.19.174:5060;ob' from AOR 'carol' due to request
<--- Transmitting SIP response (414 bytes) to UDP:10.24.19.174:5060 --->
SIP/2.0 200 OK
Via: SIP/2.0/UDP 10.24.19.174:5060;rport;received=10.24.19.174;branch=z9hG4bKPjtJPG2UWEAGt7QBPaQp-evBqgBTFluAhd
Call-ID: 6X-Xfsu2t685mxNuaVJZnAlHs2ACcSwY
From: "Carol" <sip:carol@10.24.20.249>;tag=.y2y-.Htcj8fcec3WjKtEMFJ2je-fg-K
To: "Carol" <sip:carol@10.24.20.249>;tag=z9hG4bKPjtJPG2UWEAGt7QBPaQp-evBqgBTFluAhd
CSeq: 15570 REGISTER
Date: Fri, 14 Jun 2013 21:03:49 GMT
Content-Length:  0
{noformat}
By: Mark Michelson (mmichelson) 2013-06-14 16:35:59.696-0500

Adding my res_sip.conf file. The relevant endpoint is "carol" who uses aor "carol" and has auth section "carol-auth"
By: Joshua C. Colp (jcolp) 2013-06-14 16:45:22.462-0500

I also tried with Blink and it worked just like Mark posted.
By: Joshua C. Colp (jcolp) 2013-06-14 16:48:56.293-0500

Isolated the problem! It's legit.
By: Malcolm Davenport (mdavenport) 2013-06-14 16:57:50.652-0500

Score! :D
By: Joshua C. Colp (jcolp) 2013-06-14 16:58:09.522-0500

Committed revision 391902.
By: Malcolm Davenport (mdavenport) 2013-06-14 17:03:01.232-0500

works for me