# Pjsip WebRTC registration Failed to authenticate

**URL:** <https://community.asterisk.org/t/pjsip-webrtc-registration-failed-to-authenticate/97446>\
**Category:** Asterisk WebRTC\
**Created:** [June 21, 2023, 12:55pm UTC](https://community.asterisk.org/t/pjsip-webrtc-registration-failed-to-authenticate/97446 "2023-06-21T12:55:32Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![yohai](https://avatars.discourse-cdn.com/v4/letter/y/9fc348/32.png) [@yohai](https://community.asterisk.org/u/yohai)\
**Post date:** [June 21, 2023, 12:55pm UTC](https://community.asterisk.org/t/pjsip-webrtc-registration-failed-to-authenticate/97446/1 "2023-06-21T12:55:32Z")

</div>

Hello,

I am trying to connect phone WebRTC clients to Asterisk.

keep getting :

res\_pjsip/pjsip\_distributor.c: Request ‘REGISTER’ from ‘“200” sip:200@aabbcc’ failed for ‘\<incomming ip + port\>’ (callid: qjp62x5un9752856h111z5) - Failed to authenticate

Asterisk version:20

Configuration:  
[transport-wss]  
type=transport  
protocol=wss  
bind=

;=============TEMPLATES ===================  
[endpoint-basic] (!)  
type=endpoint  
identify\_by=auth\_username  
transport=transport-wss  
from\_user= true  
webrtc=yes  
context=webrtc\_mo  
allow=!all,g722,ulaw

[auth-userpass] (!)  
type=auth  
auth\_type=userpass  
realm=asterisk

[aor-single-reg] (!)  
type=aor  
max\_contacts=1  
;===============EXTENSION 100  
[100] (endpoint-basic)  
auth=auth100  
aors=100

[auth100] (auth-userpass)  
password=12345467  
username=100

[100] (aor-single-reg)  
contact=sip:100@aabbcc

;===============EXTENSION 200

[200] (endpoint-basic)  
auth=auth200  
aors=200

[auth200] (auth-userpass)  
password=12345467  
username=200

[200] (aor-single-reg)  
contact=sip:200@aabbcc

DEBUG LOG:  
[Jun 21 13:00:10] VERBOSE[2516826] res\_http\_websocket.c: WebSocket connection from ‘\<incomming ip + port\>’ for protocol ‘sip’ accepted using version ‘13’  
[Jun 21 13:00:10] DEBUG[2516826] res\_pjsip\_transport\_websocket.c: Found WSS transport with write timeout: 100  
[Jun 21 13:00:10] DEBUG[2516826] res\_pjsip\_transport\_websocket.c: Write timeout for WS/WSS transports: 100  
[Jun 21 13:00:10] DEBUG[2393545] res\_pjsip\_transport\_websocket.c: Creating websocket transport for WSS:\<incomming ip + port\>  
[Jun 21 13:00:10] DEBUG[2393545] res\_pjsip/pjsip\_transport\_events.c: Transport \<incomming ip + port\>(ws0x7fe9bc044208-96,WSS): RefCnt: 0 state:CONNECTED  
[Jun 21 13:00:10] DEBUG[2393545] res\_pjsip/pjsip\_transport\_events.c: Transport \<incomming ip + port\>(ws0x7fe9bc044208-96,WSS): RefCnt: 1 state:MONITOR\_CREATED  
[Jun 21 13:00:11] DEBUG[2409804] res\_pjsip\_transport\_websocket.c: Saving contact ‘zyuikuxpkwnd.invalid:0’  
[Jun 21 13:00:11] DEBUG[2409804] res\_pjsip\_transport\_websocket.c: Request msg REGISTER/cseq=1 (rdata0x7fe9bc044358) re-writing Contact URI from zyuikuxpkwnd.invalid:0;transport=wss to \<incomming ip + port\>;transport=ws  
[Jun 21 13:00:11] DEBUG[2409804] res\_pjsip/pjsip\_distributor.c: Could not find matching transaction for Request msg REGISTER/cseq=1 (rdata0x7fe9bc044358)  
[Jun 21 13:00:11] DEBUG[2409804] res\_pjsip/pjsip\_distributor.c: Calculated serializer pjsip/distributor-0000002c to use for Request msg REGISTER/cseq=1 (rdata0x7fe9bc044358)  
[Jun 21 13:00:11] DEBUG[2409804] res\_pjsip\_endpoint\_identifier\_user.c: Attempting identify by From username ‘200’ domain ‘aabbcc’  
[Jun 21 13:00:11] DEBUG[2409804] res\_pjsip\_endpoint\_identifier\_user.c: Identified by From username ‘200’ domain ‘aabbcc’  
[Jun 21 13:00:11] DEBUG[2409804] res\_pjsip\_authenticator\_digest.c: Realm: asterisk Username: 200 Result: NOAUTH  
[Jun 21 13:00:11] DEBUG[2409804] res\_http\_websocket.c: Writing websocket text frame, length 477  
[Jun 21 13:00:11] DEBUG[2393545] res\_pjsip\_transport\_websocket.c: Saving contact ‘zyuikuxpkwnd.invalid:0’  
[Jun 21 13:00:11] DEBUG[2393545] res\_pjsip\_transport\_websocket.c: Request msg REGISTER/cseq=2 (rdata0x7fe9bc044358) re-writing Contact URI from zyuikuxpkwnd.invalid:0;transport=wss to \<incomming ip + port\>;transport=ws  
[Jun 21 13:00:11] DEBUG[2393545] res\_pjsip/pjsip\_distributor.c: Could not find matching transaction for Request msg REGISTER/cseq=2 (rdata0x7fe9bc044358)  
[Jun 21 13:00:11] DEBUG[2393545] res\_pjsip/pjsip\_distributor.c: Calculated serializer pjsip/distributor-0000002c to use for Request msg REGISTER/cseq=2 (rdata0x7fe9bc044358)  
[Jun 21 13:00:11] DEBUG[2393545] res\_pjsip\_endpoint\_identifier\_user.c: Attempting identify by Authorization username ‘200’ realm ‘asterisk’  
[Jun 21 13:00:11] DEBUG[2393545] res\_pjsip\_endpoint\_identifier\_user.c: Identified by Authorization username ‘200’ realm ‘asterisk’  
[Jun 21 13:00:11] DEBUG[2393545] res\_pjsip\_authenticator\_digest.c: Calculated nonce 1687341611/6e129ba086c0aa7a7953af248857356c. Actual nonce is 1687341611/6e129ba086c0aa7a7953af248857356c  
[Jun 21 13:00:11] DEBUG[2393545] res\_pjsip\_authenticator\_digest.c: Realm: asterisk Username: 200 Result: FAIL

Regards,  
Yohai

---

<div class="post-metadata">

**Author:** ![jcolp](https://sea1.discourse-cdn.com/asterisk/user_avatar/community.asterisk.org/jcolp/32/8848_2.png) [@jcolp](https://community.asterisk.org/u/jcolp)\
**Post date:** [June 21, 2023, 5:54pm UTC](https://community.asterisk.org/t/pjsip-webrtc-registration-failed-to-authenticate/97446/2 "2023-06-21T17:54:44Z")

</div>

The configuration requires an auth realm of “asterisk”. If the client isn’t using this, then authentication will fail. The easiest option is to remove the “realm=asterisk” line from the auth-userpass template.

---

<div class="post-metadata">

**Author:** ![yohai](https://avatars.discourse-cdn.com/v4/letter/y/9fc348/32.png) [@yohai](https://community.asterisk.org/u/yohai)\
**Post date:** [June 22, 2023, 5:48am UTC](https://community.asterisk.org/t/pjsip-webrtc-registration-failed-to-authenticate/97446/3 "2023-06-22T05:48:31Z")

</div>

Thanks for the quick reply,

I have changed the config removing realm=asterisk

Still getting the same error:

here is the new log:

[Jun 22 08:41:21] VERBOSE[2657170] res\_http\_websocket.c: WebSocket connection from ‘\<ip+port\>’ for protocol ‘sip’ accepted using version ‘13’  
[Jun 22 08:41:21] DEBUG[2657170] res\_pjsip\_transport\_websocket.c: Found WSS transport with write timeout: 100  
[Jun 22 08:41:21] DEBUG[2657170] res\_pjsip\_transport\_websocket.c: Write timeout for WS/WSS transports: 100  
[Jun 22 08:41:21] DEBUG[2393545] res\_pjsip\_transport\_websocket.c: Creating websocket transport for WSS:\<ip+port\>  
[Jun 22 08:41:21] DEBUG[2393545] res\_pjsip/pjsip\_transport\_events.c: Transport \<ip+port\>(ws0x7fe9bc08e0a8-138,WSS): RefCnt: 0 state:CONNECTED  
[Jun 22 08:41:21] DEBUG[2393545] res\_pjsip/pjsip\_transport\_events.c: Transport \<ip+port\>(ws0x7fe9bc08e0a8-138,WSS): RefCnt: 1 state:MONITOR\_CREATED  
[Jun 22 08:41:21] DEBUG[2409804] res\_pjsip\_transport\_websocket.c: Saving contact ‘9824z0r6767g.invalid:0’  
[Jun 22 08:41:21] DEBUG[2409804] res\_pjsip\_transport\_websocket.c: Request msg REGISTER/cseq=1 (rdata0x7fe9bc08e1f8) re-writing Contact URI from 9824z0r6767g.invalid:0;transport=wss to \<ip+port\>;transport=ws  
[Jun 22 08:41:21] DEBUG[2409804] res\_pjsip/pjsip\_distributor.c: Could not find matching transaction for Request msg REGISTER/cseq=1 (rdata0x7fe9bc08e1f8)  
[Jun 22 08:41:21] DEBUG[2409804] res\_pjsip/pjsip\_distributor.c: Calculated serializer pjsip/distributor-00000039 to use for Request msg REGISTER/cseq=1 (rdata0x7fe9bc08e1f8)  
[Jun 22 08:41:21] DEBUG[2409804] res\_pjsip\_endpoint\_identifier\_user.c: Attempting identify by From username ‘200’ domain ‘[domain.com](http://domain.com)’  
[Jun 22 08:41:21] DEBUG[2409804] res\_pjsip\_endpoint\_identifier\_user.c: Identified by From username ‘200’ domain ‘[domain.com](http://domain.com)’  
[Jun 22 08:41:21] DEBUG[2409804] res\_pjsip\_authenticator\_digest.c: Using default realm ‘asterisk’ on incoming auth ‘200’.  
[Jun 22 08:41:21] DEBUG[2409804] res\_pjsip\_authenticator\_digest.c: Realm: asterisk Username: 200 Result: NOAUTH  
[Jun 22 08:41:21] DEBUG[2409804] res\_http\_websocket.c: Writing websocket text frame, length 479  
[Jun 22 08:41:22] DEBUG[2393545] res\_pjsip\_transport\_websocket.c: Saving contact ‘9824z0r6767g.invalid:0’  
[Jun 22 08:41:22] DEBUG[2393545] res\_pjsip\_transport\_websocket.c: Request msg REGISTER/cseq=2 (rdata0x7fe9bc08e1f8) re-writing Contact URI from 9824z0r6767g.invalid:0;transport=wss to \<ip+port\>;transport=ws  
[Jun 22 08:41:22] DEBUG[2393545] res\_pjsip/pjsip\_distributor.c: Could not find matching transaction for Request msg REGISTER/cseq=2 (rdata0x7fe9bc08e1f8)  
[Jun 22 08:41:22] DEBUG[2393545] res\_pjsip/pjsip\_distributor.c: Calculated serializer pjsip/distributor-00000039 to use for Request msg REGISTER/cseq=2 (rdata0x7fe9bc08e1f8)  
[Jun 22 08:41:22] DEBUG[2393545] res\_pjsip\_endpoint\_identifier\_user.c: Attempting identify by Authorization username ‘200’ realm ‘asterisk’  
[Jun 22 08:41:22] DEBUG[2393545] res\_pjsip\_endpoint\_identifier\_user.c: Identified by Authorization username ‘200’ realm ‘asterisk’  
[Jun 22 08:41:22] DEBUG[2393545] res\_pjsip\_authenticator\_digest.c: Using default realm ‘asterisk’ on incoming auth ‘200’.  
[Jun 22 08:41:22] DEBUG[2393545] res\_pjsip\_authenticator\_digest.c: Calculated nonce 1687412481/7db3a5eb23f00247eaae5cae55c63724. Actual nonce is 1687412481/7db3a5eb23f00247eaae5cae55c63724  
[Jun 22 08:41:22] DEBUG[2393545] res\_pjsip\_authenticator\_digest.c: Realm: asterisk Username: 200 Result: FAIL

---

<div class="post-metadata">

**Author:** ![jcolp](https://sea1.discourse-cdn.com/asterisk/user_avatar/community.asterisk.org/jcolp/32/8848_2.png) [@jcolp](https://community.asterisk.org/u/jcolp)\
**Post date:** [June 22, 2023, 8:39am UTC](https://community.asterisk.org/t/pjsip-webrtc-registration-failed-to-authenticate/97446/4 "2023-06-22T08:39:07Z")

</div>

Show the actual new configuration, as well as an actual SIP trace (pjsip set logger on), and confirm that the client is configured with the correct username/password.

---

<div class="post-metadata">

**Author:** ![yohai](https://avatars.discourse-cdn.com/v4/letter/y/9fc348/32.png) [@yohai](https://community.asterisk.org/u/yohai)\
**Post date:** [June 22, 2023, 1:50pm UTC](https://community.asterisk.org/t/pjsip-webrtc-registration-failed-to-authenticate/97446/5 "2023-06-22T13:50:13Z")

</div>

[transport-wss]  
type=transport  
protocol=wss  
bind=0.0.0.0

;=============TEMPLATES TEST===================

endpoint-basic  
type=endpoint

identify\_by=auth\_username,username ;username header,auth\_username  
transport=transport-wss  
from\_user= true

webrtc=yes  
context=webrtc\_mo  
allow=!all,g722,ulaw

identify-userpass  
type = identify

auth-userpass  
type=auth  
auth\_type=userpass

aor-single-reg  
type=aor  
max\_contacts=1

;===============EXTENSION 100  
100  
auth=auth100  
aors=100

auth100  
password=XXXXXX  
username=100

100  
contact=sip:100@domain-com

;===============EXTENSION 200

200  
auth=200  
aors=200

200  
password=YYYYY  
username=200

200  
contact=sip:200@domain-com

* * *

DEBUG LOG

== WebSocket connection from ‘InternalIP:61688’ for protocol ‘sip’ accepted using version ‘13’  
asterisk\*CLI\>  
\<— Received SIP request (581 bytes) from WSS:InternalIP:61688 —\>  
REGISTER sip:MyDomain SIP/2.0  
Via: SIP/2.0/WSS 9824z0r6767g.invalid;branch=z9hG4bK1951058889  
Max-Forwards: 69  
To: sip:200@MyDomain  
From: “200” sip:200@MyDomain;tag=30696169zj  
Call-ID: 2227852tqm4rd4u6585283  
CSeq: 58 REGISTER  
Contact: sip:3761e6ba@9824z0r6767g.invalid;transport=wss;+sip.ice;reg-id=1;+sip.instance=“urn:uuid:f5e99350-123b-43e7-94c6-6ef33da38b24”;expires=600  
Expires: 600  
Allow: INVITE,ACK,CANCEL,BYE,UPDATE,MESSAGE,OPTIONS,REFER,INFO,NOTIFY  
Supported: path,gruu,outbound  
User-Agent: Dart SIP Client v1.0.0  
Content-Length: 0

\<— Transmitting SIP response (480 bytes) to WSS:InternalIP:61688 —\>  
SIP/2.0 401 Unauthorized  
Via: SIP/2.0/WSS 9824z0r6767g.invalid;rport=61688;received=InternalIP;branch=z9hG4bK1951058889  
Call-ID: 2227852tqm4rd4u6585283  
From: “200” sip:200@MyDomain;tag=30696169zj  
To: sip:200@MyDomain;tag=z9hG4bK1951058889  
CSeq: 58 REGISTER  
WWW-Authenticate: Digest realm=“asterisk”,nonce=“1687441852/4976eecbf173e45f2e1c01017466ad92”,opaque=“59e10b330b0fe8ad”,algorithm=MD5,qop=“auth”  
Server: Asterisk PBX 20.2.0  
Content-Length: 0

\<— Received SIP request (847 bytes) from WSS:InternalIP:61688 —\>  
REGISTER sip:MyDomain SIP/2.0  
Via: SIP/2.0/WSS 9824z0r6767g.invalid;branch=z9hG4bK75215008  
Max-Forwards: 69  
To: sip:200@MyDomain  
From: “200” sip:200@MyDomain;tag=30696169zj  
Call-ID: 2227852tqm4rd4u6585283  
CSeq: 59 REGISTER  
Authorization: Digest algorithm=MD5, username=“200”, realm=“asterisk”, nonce=“1687441852/4976eecbf173e45f2e1c01017466ad92”, uri=“sip:MyDomain”, response=“f3ccebea386b860d3985632bdb6a119d”, opaque=“59e10b330b0fe8ad”, qop=auth, cnonce=“q35w7qg92858”, nc=00000001  
Contact: sip:3761e6ba@9824z0r6767g.invalid;transport=wss;+sip.ice;reg-id=1;+sip.instance=“urn:uuid:f5e99350-123b-43e7-94c6-6ef33da38b24”;expires=600  
Expires: 600  
Allow: INVITE,ACK,CANCEL,BYE,UPDATE,MESSAGE,OPTIONS,REFER,INFO,NOTIFY  
Supported: path,gruu,outbound  
User-Agent: Dart SIP Client v1.0.0  
Content-Length: 0

[Jun 22 16:50:52] NOTICE[2693641]: res\_pjsip/pjsip\_distributor.c:676 log\_failed\_request: Request ‘REGISTER’ from ‘“200” sip:200@MyDomain’ failed for ‘InternalIP:61688’ (callid: 2227852tqm4rd4u6585283) - Failed to authenticate  
\<— Transmitting SIP response (476 bytes) to WSS:InternalIP:61688 —\>  
SIP/2.0 401 Unauthorized  
Via: SIP/2.0/WSS 9824z0r6767g.invalid;rport=61688;received=InternalIP;branch=z9hG4bK75215008  
Call-ID: 2227852tqm4rd4u6585283  
From: “200” sip:200@MyDomain;tag=30696169zj  
To: sip:200@MyDomain;tag=z9hG4bK75215008  
CSeq: 59 REGISTER  
WWW-Authenticate: Digest realm=“asterisk”,nonce=“1687441852/4976eecbf173e45f2e1c01017466ad92”,opaque=“1254a865525fd342”,algorithm=MD5,qop=“auth”  
Server: Asterisk PBX 20.2.0  
Content-Length: 0

---

<div class="post-metadata">

**Author:** ![yohai](https://avatars.discourse-cdn.com/v4/letter/y/9fc348/32.png) [@yohai](https://community.asterisk.org/u/yohai)\
**Post date:** [June 22, 2023, 1:59pm UTC](https://community.asterisk.org/t/pjsip-webrtc-registration-failed-to-authenticate/97446/6 "2023-06-22T13:59:24Z")

</div>

Hello,

Issue solved.  
bad password 🤦‍♂️

I am very sorry.

Yohai

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/asterisk/original/2X/4/475d0c889911cfb84ac4881ad6df8b523e3f9105.png) [@system](https://community.asterisk.org/u/system)\
**Post date:** [July 22, 2023, 1:59pm UTC](https://community.asterisk.org/t/pjsip-webrtc-registration-failed-to-authenticate/97446/7 "2023-07-22T13:59:47Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.