Hi Will/Team,
I had configured IMPI,IMPU,IMS password and Authentication type in HSS and the
xml is successfully validated.
<ims_password>cisco</ims_password>
<ims_profile>
<auth_type>
Digest-AKAv1-MD5</auth_type>
And now I can see UE is initiating SIP Register and then IMS is initiating MAR
to HSS with SIP-Authentication-Scheme: Unknown but HSS is rejecting the request
with result code 5006 “AVP: Experimental-Result-Code(298) l=12 f=-M-
val=DIAMETER_ERROR_AUTH_SCHEME_NOT_SUPPORTED (5006)”.
As its first time registration IMS behaves as expected it set
SIP-Authentication-Scheme: Unknown but can you please help us to dig why HSS is
rejecting the MAR.
I tried with both auth types SIP Digest i.e default as well as
Digest-AKAv1-MD5 in HSS but in both the cases I am getting same error.
Logs and xml file attached for your reference.
Thanks & Regards,
Ashish Maheshwari
From: Eleanor Merry [mailto:[email protected]]
Sent: 02 February 2015 23:32
To: Ashish Maheshwari -X (ashimahe - L & T TECHNOLOGY SERVICES LIMITED at Cisco)
Cc:
[email protected]<mailto:[email protected]>;
Anil Jain -X (anilja - Aricent Technology Holdings Limited at Cisco);
Venkatesh Thangaraj -X (venthang - ARICENT TECHNOLOGIES MAURIITIUS LIMITED at
Cisco); Alok Kumar (alokuma2); Chinna Morampalle (cmorampa)
Subject: RE: [Clearwater] First Call IMS Registration while using External HSS
Hi Ashish,
The S-CSCF should set the SIP-Authentication-Scheme to "Unknown" if it doesn't
know what authentication mechanism to use for a client – this is expected on
the first register as it’s the HSS that has the authentication information.
I don’t know why your HSS has rejected this, although we’ve seen cases before
where the HSS expects "unknown" (with a lower case 'u'), leading a request with
“Unknown” to be rejected.
We've implemented a workaround for this case in Homestead. To enable the
workaround, add the following line to /etc/clearwater/user_settings on your
Homestead node(s) (creating the file if it doesn't already exist).
hss_mar_lowercase_unknown=Y
Then run "sudo service homestead stop" to restart Homestead (it will be
automatically restarted by monit).
Ellie
From: Ashish Maheshwari -X (ashimahe - L & T TECHNOLOGY SERVICES LIMITED at
Cisco) [mailto:[email protected]]
Sent: 02 February 2015 13:52
To: Eleanor Merry
Cc:
[email protected]<mailto:[email protected]>;
Anil Jain -X (anilja - Aricent Technology Holdings Limited at Cisco);
Venkatesh Thangaraj -X (venthang - ARICENT TECHNOLOGIES MAURIITIUS LIMITED at
Cisco); Alok Kumar (alokuma2); Chinna Morampalle (cmorampa)
Subject: RE: [Clearwater] First Call IMS Registration while using External HSS
Hi Ellie,
I had configured IMS password and Authentication type in HSS
<ims_password>cisco</ims_password>
<ims_profile>
<auth_type>SIP
Digest</auth_type>
And now I can see UE is initiating SIP Register and then IMS is initiating MAR
to HSS with SIP-Authentication-Scheme: Unknown hence HSS is rejecting the
request with result code 5006 “AVP: Experimental-Result-Code(298) l=12 f=-M-
val=DIAMETER_ERROR_AUTH_SCHEME_NOT_SUPPORTED (5006)”.
I tried to configure both the auth type SIP Digest and AKA in HSS but as IMS is
sending sip-auth-scheme as Unknown in both the cases HSS rejecting the request
with permanent error DIAMETER_ERROR_AUTH_SCHEME_NOT_SUPPORTED (5006)
Can you please look in to the issue and guide me if auth_type need to manually
configured in IMS , I also captured homestead logs with trace level 5 but
didn’t get too much info from them.
I am attaching pcap file captured at IMS and homestead logs for your reference.
Thanks in advance and waiting for your prompt and early response.
Thanks & Regards,
Ashish Maheshwari
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
On Thursday, 29 January 2015 12:53 AM, Eleanor Merry
<[email protected]<mailto:[email protected]>> wrote:
Hi Ashish,
I'd expect you to create a public user identity (IMPU) in the HSS, e.g.
sip:[email protected]<mailto:[email protected]>). You then need to add an
associated private identity (IMPI), e.g.
[email protected]<mailto:[email protected]><mailto:[email protected]<mailto:[email protected]>>.
When you create this you should set it to use SIP digest authentication (or
AKA if your P-CSCF supports this - note that Bono does not), and you should
also be able to set the password here.
You should then use the private identity as the authentication username, and
the password you've set above. You can set the auth. username separately in the
Preferences tab in Zoiper - please see
http://www.zoiper.com/en/documentation/linux-installation-and-configuration#preferences
Ellie
From: Ashish Maheshwari -X (ashimahe - L & T TECHNOLOGY SERVICES LIMITED at
Cisco) [mailto:[email protected]<mailto:[email protected]>]
Sent: 28 January 2015 12:57
To:
[email protected]<mailto:[email protected]><mailto:[email protected]<mailto:[email protected]>>;
Eleanor Merry
Cc: Chinna Morampalle (cmorampa)
Subject: First Call IMS Registration while using External HSS
Hi Team,
I have integrated external HSS(not ellis) with CW IMS and now I want to
register the subscriber in IMS.
I defined used IMSI in HSS and trying to register the subscriber.
I am using Zoiper Sip client where I need to give few things like Username,
password, outbound proxy etc.
As I am not using Ellis, else using real HSS in this case what value shall I
need to use in "password" and "Username" in Zoiper initially.
I believe user name should be
[email protected]<mailto:[email protected]><mailto:[email protected]<mailto:[email protected]>>
if not please suggest reg both password and Username.
Thanks in advance....
Thanks & Regards,
Ashish Maheshwari
_______________________________________________
Clearwater mailing list
[email protected]<mailto:[email protected]>
http://lists.projectclearwater.org/listinfo/clearwater
_______________________________________________
Clearwater mailing list
[email protected]
http://lists.projectclearwater.org/listinfo/clearwater
