VoIP Mailing List Archives

[larclap at yahoo.com]

I am getting an error when I try to make an intercom call from a softphone to a SNOM 320. I get a “401 Unauthorized” in the siptrace and a “No Matching gateway found” in the log. I can successfully make an intercom call between my softphone and a Polycom 501, so it must be something with the SNOM.

bkw suggested that the problem was in the challenge/response between FreeSWITCH and SNOM. In the SNOM’s Setup/Advanced/Behavior page I have set “Challenge/Response” off, “Enable intercom” on and “Type of Intercom Answering” to “Handsfree”. The error is still “401 Unauthorized”.

What more do I need to do?

Thanks, Lars

http://pastebin.freeswitch.org/9709

[msc at freeswitch.org]

On Tue, Jul 14, 2009 at 8:53 AM, Lars Zeb <larclap@yahoo.com (larclap@yahoo.com)> wrote:

[larclap at yahoo.com]

Michael,

I made the changes you suggested, but the result is the same. If it matters, I am at 14229. I stopped and restarted FreeSWITCH and then reran the intercom call.

Lars

<configuration name="acl.conf" description="Network Lists">
<network-lists>

<list name="lan" default="allow">
<node type="deny" cidr="192.168.42.0/24"/>
<node type="allow" cidr="192.168.42.42/32"/>
<node type="allow" cidr="192.168.10.11/32"/>
</list>

2009-07-14 10:41:40.553145 [DEBUG] sofia.c:4587 IP 192.168.10.11 Rejected by acl "domains". Falling back to Digest auth.
2009-07-14 10:41:40.562147 [DEBUG] sofia.c:4587 IP 192.168.10.11 Rejected by acl "domains". Falling back to Digest auth.
2009-07-14 10:41:40.565166 [NOTICE] switch_channel.c:602 New Channel sofia/internal/1009@192.168.10.29 [fac3f284-3710-4492-a9e7-667c7e816ea0]

From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Michael Collins
Sent: Tuesday, July 14, 2009 10:10 AM
To: freeswitch-users@lists.freeswitch.org
Subject: Re: [Freeswitch-users] Intercom error with SNOM




On Tue, Jul 14, 2009 at 8:53 AM, Lars Zeb <larclap@yahoo.com (larclap@yahoo.com)> wrote:
I am getting an error when I try to make an intercom call from a softphone to a SNOM 320. I get a “401 Unauthorized” in the siptrace and a “No Matching gateway found” in the log. I can successfully make an intercom call between my softphone and a Polycom 501, so it must be something with the SNOM.

bkw suggested that the problem was in the challenge/response between FreeSWITCH and SNOM. In the SNOM’s Setup/Advanced/Behavior page I have set “Challenge/Response” off, “Enable intercom” on and “Type of Intercom Answering” to “Handsfree”. The error is still “401 Unauthorized”.

What more do I need to do?



Lars,
It looks like FreeSWITCH is sending the challenge to the Snom. Note this line from the debug log:
2009-07-14 08:12:32.333079 [DEBUG] sofia.c:4587 IP 192.168.10.11 Rejected by acl "domains". Falling back to Digest auth.

For testing purposes you can edit acl.conf.xml and add a new line right after:
<node type="allow" domain="$${domain}"/>

Add:
<node type="allow" cidr="192.168.10.11/32"/>

Restart FS or issue this command at the CLI:
reloadacl reloadxml

Then try your call again.

To learn more about how you can have your local users bypass the "domains" acl without editing acl.conf.xml then look in conf/directory/default/brian.xml. At the top of that file you will see a note about how adding a cidr= attribute to your user tag will let you bypass the domains ACL check.

Enjoy!
-MC

[peder at networkoblivi...]

I haven’t followed the whole thread, but the acl listed is named “lan” and the rejected acl is named “domains”.


From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Lars Zeb
Sent: Tuesday, July 14, 2009 12:47 PM
To: freeswitch-users@lists.freeswitch.org
Subject: Re: [Freeswitch-users] Intercom error with SNOM



Michael,

I made the changes you suggested, but the result is the same. If it matters, I am at 14229. I stopped and restarted FreeSWITCH and then reran the intercom call.

Lars

<configuration name="acl.conf" description="Network Lists">
<network-lists>

<list name="lan" default="allow">
<node type="deny" cidr="192.168.42.0/24"/>
<node type="allow" cidr="192.168.42.42/32"/>
<node type="allow" cidr="192.168.10.11/32"/>
</list>

2009-07-14 10:41:40.553145 [DEBUG] sofia.c:4587 IP 192.168.10.11 Rejected by acl "domains". Falling back to Digest auth.
2009-07-14 10:41:40.562147 [DEBUG] sofia.c:4587 IP 192.168.10.11 Rejected by acl "domains". Falling back to Digest auth.
2009-07-14 10:41:40.565166 [NOTICE] switch_channel.c:602 New Channel sofia/internal/1009@192.168.10.29 [fac3f284-3710-4492-a9e7-667c7e816ea0]

From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Michael Collins
Sent: Tuesday, July 14, 2009 10:10 AM
To: freeswitch-users@lists.freeswitch.org
Subject: Re: [Freeswitch-users] Intercom error with SNOM




On Tue, Jul 14, 2009 at 8:53 AM, Lars Zeb <larclap@yahoo.com (larclap@yahoo.com)> wrote:
I am getting an error when I try to make an intercom call from a softphone to a SNOM 320. I get a “401 Unauthorized” in the siptrace and a “No Matching gateway found” in the log. I can successfully make an intercom call between my softphone and a Polycom 501, so it must be something with the SNOM.

bkw suggested that the problem was in the challenge/response between FreeSWITCH and SNOM. In the SNOM’s Setup/Advanced/Behavior page I have set “Challenge/Response” off, “Enable intercom” on and “Type of Intercom Answering” to “Handsfree”. The error is still “401 Unauthorized”.

What more do I need to do?



Lars,
It looks like FreeSWITCH is sending the challenge to the Snom. Note this line from the debug log:
2009-07-14 08:12:32.333079 [DEBUG] sofia.c:4587 IP 192.168.10.11 Rejected by acl "domains". Falling back to Digest auth.

For testing purposes you can edit acl.conf.xml and add a new line right after:
<node type="allow" domain="$${domain}"/>

Add:
<node type="allow" cidr="192.168.10.11/32"/>

Restart FS or issue this command at the CLI:
reloadacl reloadxml

Then try your call again.

To learn more about how you can have your local users bypass the "domains" acl without editing acl.conf.xml then look in conf/directory/default/brian.xml. At the top of that file you will see a note about how adding a cidr= attribute to your user tag will let you bypass the domains ACL check.

Enjoy!
-MC

[msc at freeswitch.org]

Lars,

Brian pointed out that the challenge is coming from the phone. Is 192.168.10.104 the Snom?

-MC

On Tue, Jul 14, 2009 at 10:46 AM, Lars Zeb <larclap@yahoo.com (larclap@yahoo.com)> wrote:

[andrew at hijacked.us]

On Tue, Jul 14, 2009 at 08:53:07AM -0700, Lars Zeb wrote:

[brian at freeswitch.org]

Make sure you 1. reboot. 2. make sure the setting is correct to not auth. 3. what firmware are you on?

/b

On Jul 14, 2009, at 2:34 PM, Lars Zeb wrote:

[larclap at yahoo.com]

Yes.

From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Michael Collins
Sent: Tuesday, July 14, 2009 10:58 AM
To: freeswitch-users@lists.freeswitch.org
Subject: Re: [Freeswitch-users] Intercom error with SNOM



Lars,

Brian pointed out that the challenge is coming from the phone. Is 192.168.10.104 the Snom?

-MC
On Tue, Jul 14, 2009 at 10:46 AM, Lars Zeb <larclap@yahoo.com (larclap@yahoo.com)> wrote:
Michael,

I made the changes you suggested, but the result is the same. If it matters, I am at 14229. I stopped and restarted FreeSWITCH and then reran the intercom call.

Lars

<configuration name="acl.conf" description="Network Lists">
<network-lists>

<list name="lan" default="allow">
<node type="deny" cidr="192.168.42.0/24"/>
<node type="allow" cidr="192.168.42.42/32"/>
<node type="allow" cidr="192.168.10.11/32"/>

</list>

2009-07-14 10:41:40.553145 [DEBUG] sofia.c:4587 IP 192.168.10.11 Rejected by acl "domains". Falling back to Digest auth.
2009-07-14 10:41:40.562147 [DEBUG] sofia.c:4587 IP 192.168.10.11 Rejected by acl "domains". Falling back to Digest auth.
2009-07-14 10:41:40.565166 [NOTICE] switch_channel.c:602 New Channel sofia/internal/1009@192.168.10.29 (1009@192.168.10.29) [fac3f284-3710-4492-a9e7-667c7e816ea0]

From: freeswitch-users-bounces@lists.freeswitch.org (freeswitch-users-bounces@lists.freeswitch.org) [mailto:freeswitch-users-bounces@lists.freeswitch.org (freeswitch-users-bounces@lists.freeswitch.org)] On Behalf Of Michael Collins
Sent: Tuesday, July 14, 2009 10:10 AM
To: freeswitch-users@lists.freeswitch.org (freeswitch-users@lists.freeswitch.org)
Subject: Re: [Freeswitch-users] Intercom error with SNOM




On Tue, Jul 14, 2009 at 8:53 AM, Lars Zeb <larclap@yahoo.com (larclap@yahoo.com)> wrote:
I am getting an error when I try to make an intercom call from a softphone to a SNOM 320. I get a “401 Unauthorized” in the siptrace and a “No Matching gateway found” in the log. I can successfully make an intercom call between my softphone and a Polycom 501, so it must be something with the SNOM.

bkw suggested that the problem was in the challenge/response between FreeSWITCH and SNOM. In the SNOM’s Setup/Advanced/Behavior page I have set “Challenge/Response” off, “Enable intercom” on and “Type of Intercom Answering” to “Handsfree”. The error is still “401 Unauthorized”.

What more do I need to do?



Lars,
It looks like FreeSWITCH is sending the challenge to the Snom. Note this line from the debug log:
2009-07-14 08:12:32.333079 [DEBUG] sofia.c:4587 IP 192.168.10.11 Rejected by acl "domains". Falling back to Digest auth.

For testing purposes you can edit acl.conf.xml and add a new line right after:
<node type="allow" domain="$${domain}"/>

Add:
<node type="allow" cidr="192.168.10.11/32"/>

Restart FS or issue this command at the CLI:
reloadacl reloadxml

Then try your call again.

To learn more about how you can have your local users bypass the "domains" acl without editing acl.conf.xml then look in conf/directory/default/brian.xml. At the top of that file you will see a note about how adding a cidr= attribute to your user tag will let you bypass the domains ACL check.

Enjoy!
-MC

[brian at freeswitch.org]

Do what Andrew said.. it has to be a bug (in the snom)

/b

On Jul 14, 2009, at 2:51 PM, Lars Zeb wrote:

[larclap at yahoo.com]

2. Do you mean setting “Challenge Response on phone” on the SNOM? It is already set to no.
3. 7.3.14

From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian West
Sent: Tuesday, July 14, 2009 12:41 PM
To: freeswitch-users@lists.freeswitch.org
Subject: Re: [Freeswitch-users] Intercom error with SNOM



Make sure you 1. reboot. 2. make sure the setting is correct to not auth. 3. what firmware are you on?


/b


On Jul 14, 2009, at 2:34 PM, Lars Zeb wrote:




Yes.



From: freeswitch-users-bounces@lists.freeswitch.org (freeswitch-users-bounces@lists.freeswitch.org) [mailto:freeswitch-users-bounces@lists.freeswitch.org (freeswitch-users-bounces@lists.freeswitch.org)] On Behalf Of Michael Collins
Sent: Tuesday, July 14, 2009 10:58 AM
To: freeswitch-users@lists.freeswitch.org (freeswitch-users@lists.freeswitch.org)
Subject: Re: [Freeswitch-users] Intercom error with SNOM





Lars,

Brian pointed out that the challenge is coming from the phone. Is 192.168.10.104 the Snom?

-MC

[larclap at yahoo.com]

Thanks Michael and Brian and Andrew and Peder. I changed “Enable Intercom” to off and “’Answer After’ Policy” to “only in idle” and it works. The next firmware will probably change the settings to mean what they should mean.

From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian West
Sent: Tuesday, July 14, 2009 12:59 PM
To: freeswitch-users@lists.freeswitch.org
Subject: Re: [Freeswitch-users] Intercom error with SNOM



Do what Andrew said.. it has to be a bug (in the snom)


/b


On Jul 14, 2009, at 2:51 PM, Lars Zeb wrote:




2. Do you mean setting “Challenge Response on phone” on the SNOM? It is already set to no.

3. 7.3.14