Registration Loop

Asterisk Asterisk Support
1

I am having an issue with Asterisk 1.8.5.0. Users report that they can not make outgoing calls, below is from /var/log/asterisk/messages:
[Aug 2 09:31:19] NOTICE[3611] chan_sip.c: Correct auth, but based on stale nonce received from ‘“208” sip:208@192.168.50.10;tag=CD7EAA5F-FAC8AE54’
[Aug 2 09:31:20] NOTICE[3611] chan_sip.c: Correct auth, but based on stale nonce received from ‘“207” sip:207@192.168.50.10;tag=3591D77-14113E50’
[Aug 2 09:31:20] NOTICE[3611] chan_sip.c: Correct auth, but based on stale nonce received from ‘“202” sip:202@192.168.50.10;tag=AEBF867D-F64140F4’
[Aug 2 09:31:20] NOTICE[3611] chan_sip.c: Correct auth, but based on stale nonce received from ‘“206” sip:206@192.168.50.10;tag=421741B8-96C72BC1’
[Aug 2 09:31:20] NOTICE[3611] chan_sip.c: Correct auth, but based on stale nonce received from ‘“204” sip:204@192.168.50.10;tag=4F845683-4F821A84’
[Aug 2 09:31:20] NOTICE[3611] chan_sip.c: Correct auth, but based on stale nonce received from ‘“203” sip:203@192.168.50.10;tag=D4F4198F-7F6C570A’
[Aug 2 09:31:20] NOTICE[3611] chan_sip.c: Correct auth, but based on stale nonce received from ‘“201” sip:201@192.168.50.10;tag=9DC26458-A77C136B’
[Aug 2 09:31:20] NOTICE[3611] chan_sip.c: Correct auth, but based on stale nonce received from ‘“205” sip:205@192.168.50.10;tag=A49344AE-15C1E4EF’

I have to restart the Asterisk service to resolve the issue, core restart now does nothing. Anyone else experiencing this problem or seen it before?

2
I would stop asterisk from requesting authentication from phones when making outbound calls. Registered phones should not need to authenticate. More info [viewtopic.php?t=79338](http://forums.digium.com/viewtopic.php?t=79338)
3

I removed Asterisk and reinstalled. I haven’t had the issue since.

4

[quote=“thor”]
I would stop asterisk from requesting authentication from phones when making outbound calls.
Registered phones should not need to authenticate.
More info viewtopic.php?t=79338
</wild ass guess>[/quote]

Why is that? I think that authentication on every call is a very good thing. Registration does NOT equal authentication. It is only a way to let Asterisk know where to find the registered extensions. If there is no authentication on individual calls, then possible attackers have a much eazier job when they want to use your system for :smiling_imp: evil :smiling_imp: puporses.

As far as the “Correct auth, but based on stale nonce received from” message - I had this problem on some IP Phones. It is an IP phone issue, not an Asterisk issue. Asterisk just wants to let you know that the IP Phone does not change auth. parameters when it renews the SIP registration.

5

i’ve add parameter pedantic=no to sip.conf. it works! my sip gates now reg and auth without problems on my asterisk.