Возникли трудности при динамической авторизации клиентов.
В биллинге создан клиент, указаны логин и пароль.
При попытке подключится (smg1016m - rfc4590) получаем reject от сервера, разработчики сервера говорят, что в request должны прилетать атрибуты либо h323-conf-id, либо Acct-Session-Id и Acct-Session-Time.
Попробовали добавить на стороне сервера в request атрибут h323-conf-id (вставка его реализована штатно, но выглядит как костыль) с произвольным значением, авторизация прошла.
версия ПО V.2.11.02.387. L. M. [SIPu] [COPM]
Подскажите, чье поведение правильно, биллинга или шлюза, какие должны быть атрибуты при авторизации, сейчас авторизация выглядит так:
Код: Выделить всё
01-18/12:35:59 INFO [rdsLstnr-p-5-t-5] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 45
Authenticator: {59 3D B2 21 1A 32 D1 39 C3 CA 0A 32 FA 8F 8A 99}
Attributes:
User-Name=503
NAS-IP-Address=10.1.19.250
Message-Authenticator={D9 CC 88 90 ED 72 25 14 8A 5B 8D 36 7D 56 7D A3}
NAS-Port=49157
Service-Type=1
Framed-Protocol=2
Digest-Method=REGISTER
Digest-URI=sip:503@10.1.19.250
Calling-Station-Id=503
NAS-Port-Type=0
Called-Station-Id=503
01-18/12:35:59 INFO [rdsLstnr-p-5-t-5] NasScript - REQUEST_AFTER_SCRIPT:
Packet type: Access-Request
Identifier: 45
Authenticator: {59 3D B2 21 1A 32 D1 39 C3 CA 0A 32 FA 8F 8A 99}
Attributes:
User-Name=503
NAS-IP-Address=10.1.19.250
Message-Authenticator={D9 CC 88 90 ED 72 25 14 8A 5B 8D 36 7D 56 7D A3}
NAS-Port=49157
Service-Type=1
Framed-Protocol=2
Digest-Method=REGISTER
Digest-URI=sip:503@10.1.19.250
Calling-Station-Id=503
NAS-Port-Type=0
Called-Station-Id=503
Common options: {call.type=1}
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-5] RadiusProcessor - Create new radius session.
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-5] ProcessorRequest - Sending to /10.1.19.250:32774
01-18/12:35:59 INFO [rdsLstnr-p-5-t-5] RadiusListenerWorker - RESPONSE:
Packet type: Access-Challenge
Identifier: 45
Authenticator: {71 1C 79 57 A5 51 8B 79 1C ED B4 71 3E E9 7D EF}
Attributes:
Message-Authenticator={00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00}
Digest-Qop=auth
Digest-Algorithm=MD5
Digest-Realm=ray-com.ru
Digest-Nonce=238dee8ef5526489
01-18/12:35:59 INFO [rdsLstnr-p-5-t-6] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 46
Authenticator: {73 14 9B 1A B4 5A FC 33 6E 21 A5 81 05 68 E4 57}
Attributes:
User-Name=503
Digest-Response=3dcb88e09256b82ee01d57941fc95a65
NAS-IP-Address=10.1.19.250
NAS-Port=49157
Service-Type=1
Framed-Protocol=2
Digest-Qop=auth
Digest-Algorithm=MD5
Digest-Method=REGISTER
Digest-URI=sip:10.1.19.250:5060
Digest-Realm=ray-com.ru
Digest-Nonce=238dee8ef5526489
Digest-Username=503
Message-Authenticator={C3 F6 00 88 CA 4C 8A D0 1D 04 B8 A1 A0 72 DA 9B}
Digest-Nonce-Count=00000001
Digest-CNonce=82c6d7ab8727f821aa47c0f2ed6e18e3
SIP-AOR=sip:503@10.1.19.250
NAS-Port-Type=0
Calling-Station-Id=503
Called-Station-Id=503
01-18/12:35:59 INFO [rdsLstnr-p-5-t-6] NasScript - REQUEST_AFTER_SCRIPT:
Packet type: Access-Request
Identifier: 46
Authenticator: {73 14 9B 1A B4 5A FC 33 6E 21 A5 81 05 68 E4 57}
Attributes:
User-Name=503
Digest-Response=3dcb88e09256b82ee01d57941fc95a65
NAS-IP-Address=10.1.19.250
NAS-Port=49157
Service-Type=1
Framed-Protocol=2
Digest-Qop=auth
Digest-Algorithm=MD5
Digest-Method=REGISTER
Digest-URI=sip:10.1.19.250:5060
Digest-Realm=ray-com.ru
Digest-Nonce=238dee8ef5526489
Digest-Username=503
Message-Authenticator={C3 F6 00 88 CA 4C 8A D0 1D 04 B8 A1 A0 72 DA 9B}
Digest-Nonce-Count=00000001
Digest-CNonce=82c6d7ab8727f821aa47c0f2ed6e18e3
SIP-AOR=sip:503@10.1.19.250
NAS-Port-Type=0
Calling-Station-Id=503
Called-Station-Id=503
Common options: {call.type=1}
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] RadiusProcessor - Create new radius session.
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] VoiceIpRadiusProcessor - Process outgoing auth Packet type: Access-Request
Identifier: 46
Authenticator: {73 14 9B 1A B4 5A FC 33 6E 21 A5 81 05 68 E4 57}
Attributes:
User-Name=503
Digest-Response=3dcb88e09256b82ee01d57941fc95a65
NAS-IP-Address=10.1.19.250
NAS-Port=49157
Service-Type=1
Framed-Protocol=2
Digest-Qop=auth
Digest-Algorithm=MD5
Digest-Method=REGISTER
Digest-URI=sip:10.1.19.250:5060
Digest-Realm=ray-com.ru
Digest-Nonce=238dee8ef5526489
Digest-Username=503
Message-Authenticator={C3 F6 00 88 CA 4C 8A D0 1D 04 B8 A1 A0 72 DA 9B}
Digest-Nonce-Count=00000001
Digest-CNonce=82c6d7ab8727f821aa47c0f2ed6e18e3
SIP-AOR=sip:503@10.1.19.250
NAS-Port-Type=0
Calling-Station-Id=503
Called-Station-Id=503
Common options: {call.type=1}
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] AbstractRadiusProcessor - Finding login..
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] VoiceIpRadiusProcessor - Found login type 2
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] AbstractRadiusProcessor - Login found: 27
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] AbstractRadiusProcessor - Checking access allow...
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] AbstractRadiusProcessor - Checking password...
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] AbstractRadiusProcessor - Checking contract status
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] AbstractRadiusProcessor - Checking balance...
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] VoiceIpRadiusProcessor - Checking tariff...
01-18/12:35:59 INFO [rdsLstnr-p-5-t-6] CostMapCache - (Re)loading costMap cache and geo codes for mid 11
01-18/12:35:59 DEBUG [rdsLstnr-p-5-t-6] ProcessorRequest - Sending to /10.1.19.250:32774
01-18/12:35:59 INFO [rdsLstnr-p-5-t-6] RadiusListenerWorker - RESPONSE:
Packet type: Access-Reject
Identifier: 46
Authenticator: {40 AF 69 67 1F 77 04 23 ED E6 B7 F2 28 16 70 E6}
Attributes:
Reply-Message=12
Message-Authenticator={00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00}
Digest-Response-Auth=d4906e657ef255ceaf9cee6b455cf208
h323-credit-time=1800
h323-return-code=12
h323-credit-amount=3.15