Long story short: I'm trying to install FusionPBX (FPBX) and FS on a Debian 8 server, but I'm not able to get the softphones registered, I keep getting this error in the FreeSWITCH (FS) log:
2017-07-07 17:45:59.758807 [WARNING] sofia_reg.c:2906 Can't find user [101@192.168.1.11] from [IP Redacted]
You must define a domain called '192.168.1.11' in your directory and add a user with the id="101" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
2017-07-07 17:46:12.918807 [WARNING] sofia_reg.c:2906 Can't find user [102@192.168.1.11] from [IP Redacted]
You must define a domain called '192.168.1.11' in your directory and add a user with the id="102" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
Server is NATted, local LAN IP is 192.168.1.11
I understand there are many different variables in play, but I have tried so many times and yet I cannot figure out what's wrong. It's like FPBX is not "talking" to FS, everything else looks fine, there are no errors in the logs, but still FS ain't able to recognize the domain and extensions created in FPBX.
This is in brief the installation story:
1) Install from FPBX script fusionpbx-install.sh, only thing I changed is the nginix script (commented out) so that nginix is not installed and FPBX runs under apache2.
2) FS stable, compiled with pgsql and zrt support:
FreeSWITCH Version 1.6.18+git~20170630T173819Z~db529ca382~64bit (git db529ca 2017-06-30 17:38:19Z 64bit)
./configure --prefix=/usr/local/freeswitch --enable-core-pgsql-support --disable-fhs --enable-zrtp
make
make install
Install sounds, then check systemctl file: works with no errors, LUA ok, config.php and config.lua ok.
Only point I don't understand is why FPBX scripts make a copy of conf files in /etc/freeswitch, thought they were for package install, not source. Anyway, nothing happens in /etc/freeswitch as well, FS runs on /usr/local/freeswitch/conf files.
3) FPBX v.4.2, install with no errors
4) Domain and extensions created in FPBX, but FS seems to ignore them, and still looks for a domain with {local_ip_v4} as domain name
5) SIP trace in fs_cli shows that FS gets the correct registration message from UA (REGISTER 101@domain.tld), answers correct 401 unauthorized, then FS gets new sip request with nonce but answers 403 forbidden:
+OK Global siptrace on
recv 505 bytes from tcp/[IP Redacted]:64291 at 18:16:14.030719:
------------------------------------------------------------------------
REGISTER sip:domain.tld SIP/2.0
Via: SIP/2.0/TCP IP Redacted:64290;branch=z9hG4bK46b6997972fea682e15910cbe5628733;rport
From: "101" <sip:101@domain.tld>;tag=902758182
To: "101" <sip:101@domain.tld>
Call-ID: 498072297@192_168_0_141
CSeq: 21634 REGISTER
Contact: <sip:101@IP Redacted:64290;transport=tcp>
Max-Forwards: 70
User-Agent: Redacted
Expires: 300
Allow: INVITE, ACK, CANCEL, BYE, OPTIONS, INFO, SUBSCRIBE, NOTIFY, REFER
Content-Length: 0
------------------------------------------------------------------------
send 662 bytes to tcp/[IP Redacted]:64291 at 18:16:14.031680:
------------------------------------------------------------------------
SIP/2.0 401 Unauthorized
Via: SIP/2.0/TCP IP Redacted:64290;branch=z9hG4bK46b6997972fea682e15910cbe5628733;rport=64291
From: "101" <sip:201@domain.tld>;tag=902758182
To: "101" <sip:101@domain.tld>;tag=yK523g32ta0ZB
Call-ID: 498072297@192_168_0_141
CSeq: 21634 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.6.18+git~20170630T173819Z~db529ca382~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
WWW-Authenticate: Digest realm="domain.tld", nonce="f33e69b0-978f-47c7-885c-2d7134b48853", algorithm=MD5, qop="auth"
Content-Length: 0
------------------------------------------------------------------------
recv 767 bytes from tcp/[IP Redacted]:64291 at 18:16:14.360647:
------------------------------------------------------------------------
REGISTER sip:domain.tld SIP/2.0
Via: SIP/2.0/TCP 192.168.0.141:64291;branch=z9hG4bK56bdb88f6580805f9520e12260c54bf5;rport
From: "101" <sip:101@domain.tld>;tag=902758182
To: "101" <sip:101@domain.tld>
Call-ID: 498072297@192_168_0_141
CSeq: 21635 REGISTER
Contact: <sip:101@IP Redacted:64291;transport=tcp>
Authorization: Digest username="101", realm="domain.tld", qop=auth, algorithm=MD5, uri="sip:domain.tld", nonce="f33e69b0-978f-47c7-885c-2d7134b48853", nc=00000001, cnonce="d1329c8f751bf8bb1b3f0823ebf5128a", response="e7efd8dfd2aa02e48d1c46ba2488d00f"
Max-Forwards: 70
User-Agent: Redacted
Expires: 300
Allow: INVITE, ACK, CANCEL, BYE, OPTIONS, INFO, SUBSCRIBE, NOTIFY, REFER
Content-Length: 0
------------------------------------------------------------------------
send 557 bytes to tcp/[IP Redacted]:64291 at 18:16:14.361773:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/TCP 192.168.0.141:64291;branch=z9hG4bK56bdb88f6580805f9520e12260c54bf5;rport=64291;received=IP Redacted
From: "101" <sip:101@domain.tld>;tag=902758182
To: "101" <sip:101@domain.tld>;tag=ZvyU5Bm6QKpjQ
Call-ID: 498072297@192_168_0_141
CSeq: 21635 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.6.18+git~20170630T173819Z~db529ca382~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Content-Length: 0
------------------------------------------------------------------------
Any suggestion? Help will be highly appreciated, thanks!
2017-07-07 17:45:59.758807 [WARNING] sofia_reg.c:2906 Can't find user [101@192.168.1.11] from [IP Redacted]
You must define a domain called '192.168.1.11' in your directory and add a user with the id="101" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
2017-07-07 17:46:12.918807 [WARNING] sofia_reg.c:2906 Can't find user [102@192.168.1.11] from [IP Redacted]
You must define a domain called '192.168.1.11' in your directory and add a user with the id="102" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
Server is NATted, local LAN IP is 192.168.1.11
I understand there are many different variables in play, but I have tried so many times and yet I cannot figure out what's wrong. It's like FPBX is not "talking" to FS, everything else looks fine, there are no errors in the logs, but still FS ain't able to recognize the domain and extensions created in FPBX.
This is in brief the installation story:
1) Install from FPBX script fusionpbx-install.sh, only thing I changed is the nginix script (commented out) so that nginix is not installed and FPBX runs under apache2.
2) FS stable, compiled with pgsql and zrt support:
FreeSWITCH Version 1.6.18+git~20170630T173819Z~db529ca382~64bit (git db529ca 2017-06-30 17:38:19Z 64bit)
./configure --prefix=/usr/local/freeswitch --enable-core-pgsql-support --disable-fhs --enable-zrtp
make
make install
Install sounds, then check systemctl file: works with no errors, LUA ok, config.php and config.lua ok.
Only point I don't understand is why FPBX scripts make a copy of conf files in /etc/freeswitch, thought they were for package install, not source. Anyway, nothing happens in /etc/freeswitch as well, FS runs on /usr/local/freeswitch/conf files.
3) FPBX v.4.2, install with no errors
4) Domain and extensions created in FPBX, but FS seems to ignore them, and still looks for a domain with {local_ip_v4} as domain name
5) SIP trace in fs_cli shows that FS gets the correct registration message from UA (REGISTER 101@domain.tld), answers correct 401 unauthorized, then FS gets new sip request with nonce but answers 403 forbidden:
+OK Global siptrace on
recv 505 bytes from tcp/[IP Redacted]:64291 at 18:16:14.030719:
------------------------------------------------------------------------
REGISTER sip:domain.tld SIP/2.0
Via: SIP/2.0/TCP IP Redacted:64290;branch=z9hG4bK46b6997972fea682e15910cbe5628733;rport
From: "101" <sip:101@domain.tld>;tag=902758182
To: "101" <sip:101@domain.tld>
Call-ID: 498072297@192_168_0_141
CSeq: 21634 REGISTER
Contact: <sip:101@IP Redacted:64290;transport=tcp>
Max-Forwards: 70
User-Agent: Redacted
Expires: 300
Allow: INVITE, ACK, CANCEL, BYE, OPTIONS, INFO, SUBSCRIBE, NOTIFY, REFER
Content-Length: 0
------------------------------------------------------------------------
send 662 bytes to tcp/[IP Redacted]:64291 at 18:16:14.031680:
------------------------------------------------------------------------
SIP/2.0 401 Unauthorized
Via: SIP/2.0/TCP IP Redacted:64290;branch=z9hG4bK46b6997972fea682e15910cbe5628733;rport=64291
From: "101" <sip:201@domain.tld>;tag=902758182
To: "101" <sip:101@domain.tld>;tag=yK523g32ta0ZB
Call-ID: 498072297@192_168_0_141
CSeq: 21634 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.6.18+git~20170630T173819Z~db529ca382~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
WWW-Authenticate: Digest realm="domain.tld", nonce="f33e69b0-978f-47c7-885c-2d7134b48853", algorithm=MD5, qop="auth"
Content-Length: 0
------------------------------------------------------------------------
recv 767 bytes from tcp/[IP Redacted]:64291 at 18:16:14.360647:
------------------------------------------------------------------------
REGISTER sip:domain.tld SIP/2.0
Via: SIP/2.0/TCP 192.168.0.141:64291;branch=z9hG4bK56bdb88f6580805f9520e12260c54bf5;rport
From: "101" <sip:101@domain.tld>;tag=902758182
To: "101" <sip:101@domain.tld>
Call-ID: 498072297@192_168_0_141
CSeq: 21635 REGISTER
Contact: <sip:101@IP Redacted:64291;transport=tcp>
Authorization: Digest username="101", realm="domain.tld", qop=auth, algorithm=MD5, uri="sip:domain.tld", nonce="f33e69b0-978f-47c7-885c-2d7134b48853", nc=00000001, cnonce="d1329c8f751bf8bb1b3f0823ebf5128a", response="e7efd8dfd2aa02e48d1c46ba2488d00f"
Max-Forwards: 70
User-Agent: Redacted
Expires: 300
Allow: INVITE, ACK, CANCEL, BYE, OPTIONS, INFO, SUBSCRIBE, NOTIFY, REFER
Content-Length: 0
------------------------------------------------------------------------
send 557 bytes to tcp/[IP Redacted]:64291 at 18:16:14.361773:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/TCP 192.168.0.141:64291;branch=z9hG4bK56bdb88f6580805f9520e12260c54bf5;rport=64291;received=IP Redacted
From: "101" <sip:101@domain.tld>;tag=902758182
To: "101" <sip:101@domain.tld>;tag=ZvyU5Bm6QKpjQ
Call-ID: 498072297@192_168_0_141
CSeq: 21635 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.6.18+git~20170630T173819Z~db529ca382~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Content-Length: 0
------------------------------------------------------------------------
Any suggestion? Help will be highly appreciated, thanks!