Hi Simon, Your X-Lite configuration looks correct. Can you please send me the debug logs from Sprout from an attempted register? You can turn on debug logging by creating/editing the file /etc/clearwater/user_settings, adding log_level=5 and then restarting Sprout (service sprout stop - it's automatically restarted by monit). The Sprout logs are output in /var/log/sprout/*.
Also, what version of Zoiper are you using, and on what system? Thanks, Ellie -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of simon connolly Sent: 25 September 2014 15:48 To: [email protected] Subject: Re: [Clearwater] SIP Registration Failure: 403 Forbidden Hi Ellie thanks for reply in the log I sent for sprout below I was using Zoiper softphone (which is recomended on clearwater website) but there doesnt seem to be a field to set authorization name, there are only 3 fields it allows you to set, which I set as below user / user host : [email protected] password: <password> Domain / Outbound proxy: 192.168.20.68 I have now tried using XLite which does have a field to set auth name, Ive set fields as below:- User ID: 0000001005 Domain : example.com Password: <password> Display name: 1005 Auth Name: [email protected] I tried again and this time I get 401 Unauthorised, but log is different, shows the correct format for the private identity i think 24-09-2014 08:29:43.360 UTC Warning authentication.cpp:205: Received24-09-2014 17:31:56.657 UTC Warning authentication.cpp:205: Received an authentication request for [email protected] with nonce 7883849902ac3e63, but no matching AV found 24-09-2014 17:31:56.670 UTC Warning authentication.cpp:205: Received an authentication request for [email protected] with nonce 734410286b986924, but no matching AV found what can be the reason for failed auth ? thanks Simon -----Original Message----- From: Eleanor Merry Sent: Wednesday, September 24, 2014 6:14 PM To: simon connolly ; [email protected] Subject: RE: [Clearwater] SIP Registration Failure: 403 Forbidden Hi Simon, You're right - the create_numbers script is used to tell Ellis which numbers are available for provisioning - it doesn't actually create any numbers on Homer/Homestead itself. Looking at the diagnostics, it looks like you've got three provisioned users (1001, 1008 and 1005), and 7 more numbers available for provisioning. For each provisioned number, the public identity is sip:[email protected] and the private identity is [email protected] When you register, you need to configure your client so that authentication name matches the private identity - it looks from the logs that you're using 0000001000x. What softphone are you using? Can you please try with [email protected] instead? Hope this helps, Ellie -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of simon connolly Sent: 24 September 2014 11:52 To: [email protected] Subject: [Clearwater] SIP Registration Failure: 403 Forbidden Hi I’ve recently installed the all-in-one version of clearwater and I am having trouble registering a user. When I installed the OVF there were 1000 users created automatically in Ellis database, but only a handful (about 50) of these 1000 were in other databases ie homer, homestead. I thought this might be due to some installation issue. To better understand how clearwater is working I decided to delete all the subscribers from Ellis and recreate just 10 (1000-1009) using the ‘create_numbers.py’ scipt, as I wanted to see if deleting / creating users in Ellis would propagate through to other databases, but I found this wasn’t the case. After search on internet I found info that the ‘create_numbers.py’ script doesn't actually create numbers on Homestead, it just provisions a pool of numbers on Ellis that Ellis can then select from during real number creation’, so now i’m confused how users are created in other databases...should this be done manually or is there some config issue which is stopping Ellis informing other databases about new users ? below are the 10 users I created mysql> select * from numbers; +--------------------------------------+----------------------------+----------+------------+------+ | number_id | number | owner_id | gab_listed | pstn | +--------------------------------------+----------------------------+----------+------------+------+ | 008ccc4a-1972-4510-9a3e-bcea60983ec4 | sip:[email protected] | NULL | 1 | 0 | | 070680ec-9934-4c21-8f84-fa3538e735a9 | sip:[email protected] | NULL | 1 | 0 | | 09218e54-4427-472f-bc6a-b00eac4464ed | sip:[email protected] | NULL | 1 | 0 | | 43cb9b77-7581-41bb-b1c8-1bc6aac4d9ba | sip:[email protected] | NULL | 1 | 0 | | 693e3271-525b-4002-9683-3e29816db695 | sip:[email protected] | NULL | 1 | 0 | | 6f35ccbf-3228-4d33-942b-147604a027fb | sip:[email protected] | NULL | 1 | 0 | | 96cf89c3-8f61-4ddc-a9fc-1ffcf0e00c4b | sip:[email protected] | NULL | 1 | 0 | | a2800cf0-10ef-4d65-ac3c-89e634c5617c | sip:[email protected] | NULL | 1 | 0 | | aef13d75-159f-4c4a-8d4f-420b539e4b93 | sip:[email protected] | NULL | 1 | 0 | | af3d3ca7-49aa-4b34-8750-d87a695a29d8 | sip:[email protected] | NULL | 1 | 0 | +--------------------------------------+----------------------------+----------+------------+------+ using the web interface I generated 3 private identities (1001, 1008, 1005), which worked and I got a password for each. Can see in mysql that owner-id field is now filled, so this part is working fine mysql> select * from numbers; +--------------------------------------+----------------------------+--------------------------------------+------------+------+ | number_id | number | owner_id | gab_listed | pstn | +--------------------------------------+----------------------------+--------------------------------------+------------+------+ | 008ccc4a-1972-4510-9a3e-bcea60983ec4 | sip:[email protected] | ad2dec28-eadc-4501-87d6-c74c2ed28676 | 1 | 0 | | 070680ec-9934-4c21-8f84-fa3538e735a9 | sip:[email protected] | ad2dec28-eadc-4501-87d6-c74c2ed28676 | 1 | 0 | | 09218e54-4427-472f-bc6a-b00eac4464ed | sip:[email protected] | ad2dec28-eadc-4501-87d6-c74c2ed28676 | 1 | 0 | | 43cb9b77-7581-41bb-b1c8-1bc6aac4d9ba | sip:[email protected] | NULL | 1 | 0 | | 693e3271-525b-4002-9683-3e29816db695 | sip:[email protected] | NULL | 1 | 0 | | 6f35ccbf-3228-4d33-942b-147604a027fb | sip:[email protected] | NULL | 1 | 0 | | 96cf89c3-8f61-4ddc-a9fc-1ffcf0e00c4b | sip:[email protected] | NULL | 1 | 0 | | a2800cf0-10ef-4d65-ac3c-89e634c5617c | sip:[email protected] | NULL | 1 | 0 | | aef13d75-159f-4c4a-8d4f-420b539e4b93 | sip:[email protected] | NULL | 1 | 0 | | af3d3ca7-49aa-4b34-8750-d87a695a29d8 | sip:[email protected] | NULL | 1 | 0 | +--------------------------------------+----------------------------+--------------------------------------+------------+------+ I then tried to register with softphone, clearwater first sends back 401 Unauthorised (so it recognises the user ), softphone then replies with sip register which includes auth parameters this time, but the clearwater sends back 403 forbidden. In sprout log i see errors below which seem to point at impi and impu tables in homestead_cache database, that they cant find matching record 24-09-2014 08:29:43.360 UTC Warning authentication.cpp:205: Received an authentication request for 0000001008 with nonce 5073304c580c6b04, but no matching AV found 24-09-2014 08:29:43.362 UTC Error httpconnection.cpp:561: http://192.168.20.68:8888/impi/0000001008/av?impu=sip%3A0000001008%40example.com failed at server 192.168.20.68 : HTTP response code said error (22 404) : fatal 24-09-2014 08:29:43.362 UTC Error httpconnection.cpp:659: cURL failure with cURL error code 22 (see man 3 libcurl-errors) and HTTP error code 404 24-09-2014 08:29:43.362 UTC Error hssconnection.cpp:144: Failed to get Authentication Vector for 0000001008 this makes sense as there are no entries for the 10 users I created in either of these 2 tables please advise many thanks Simon _______________________________________________ Clearwater mailing list [email protected] http://lists.projectclearwater.org/listinfo/clearwater _______________________________________________ Clearwater mailing list [email protected] http://lists.projectclearwater.org/listinfo/clearwater _______________________________________________ Clearwater mailing list [email protected] http://lists.projectclearwater.org/listinfo/clearwater
