401最终注册握手未经授权 [英] 401 unauthorized on final REGISTER Handshake

问题描述

我已经在定制的lync客户端中为lync-server登录实现了ntlmv2。我发送给服务器的消息是.....

（第3次注册消息）

 

注册sip：example.com SIP / 2.0

通过：SIP / 2.0 / TLS 19x .1xx.0.1xx：3246

来自：< sip：[e-mail]> ;; tag = 2257063211; epid = 22570632

收件人：< sip：lynctest8 @ example.com>

电话ID：A2B000F95CB8XZRikcdYitb4QBvEr4P2

CSeq：3寄存器

联系人：< sip：19x.1xx.0.1xx ：3246; transport = tls; ms-opaque = 28c9d310c1> ;; methods =" INVITE，MESSAGE，INFO，OPTIONS，BYE，CANCEL，NOTIFY，ACK，REFER，BENOTIFY" ;; proxy = replace; + sip.instance =" < urn：uuid：6b6590c5-2a3f-5dee-ad87-5ab6694cf66d>"
$
Max-Forwards：70

User-Agent：UCCAPI / 4.0.7577.0 OC / 4.0.7577.0（Microsoft Lync 2010）

支持：gruu-10，adhoclist，msrtc-event-categories

支持：ms -forking

支持：ms-cluster-failover

支持：ms-userservices-state-notification

Ms-keep-alive：UAC; hop-hop = yes

事件：注册

Ms -subnet：19x.1xx.0.0

代理授权：NTLM qop =" auth"，realm =" SIP Communications Service"，opaque =" 8CEED616"，targetname =" lyncfe。 example.com" ;,版本= 4，GSSAPI数据= QUOT; TlRMTVNTUAADAAAAGAAYAKgAAADGAMYAwAAAABAAEABYAAAALAAsAGgAAAAUABQAlAAAABAAEACGAQAAVYKQYgYBsR0AAAAPAAAAAAAAAAAAAAAAAAAAAG4AZQB5AGUAYgBhAGwAbABsAHkAbgBjAHQAZQBzAHQAOABAAG4AZQB5AGUAYgBhAGwAbAAuAGMAbwBtAEUAWQBFAEIAQQBMAEwALQBQAEMA9jYBMVaneo2SEFBrg1 / YnLPWl4gGzCyjeTg + SJIb99jnRvh / xOM1KQEBAAAAAAAAAD9j2kfbzAGz1peIBswsowAAAAACABAATgBFAFkARQBCAEEATABMAAEADABMAFkATgBDAEYARQAEABgAbgBlAHkAZQBiAGEAbABsAC4AYwBvAG0AAwAmAGwAeQBuAGMAZgBlAC4AbgBlAHkAZQBiAGEAbABsAC4AYwBvAG0ABQAYAG4AZQB5AGUAYgBhAGwAbAAuAGMAbwBtAAcACABjQk / rRdvMAQAAAAAAAAAAGL4kYo + YoVBEmij7AkIylQ =="
，crand =" becdaa89"，cnum =" 1"，response =" 0100000024A95BA08AA3947964000000" b
内容长度：0

  ;

我从服务器获得的回复是在日志中......

 

TL_INFO（TF_COMPONENT）[0] 05FC.02D0 :: 01/25 / 2012-08：06：57.900.00000042（SIPStack，CSIPMessage :: CacheConnectionFlags：SIPMessage.cpp（1664））[0]（00000000039B4DC0）来自server [lyncfe.example.com] connection，flags [PeerInternal TrafficInternal 0xa0100c]，CID
[0x12300]

TL_INFO（TF_PROTOCOL）[0] 05FC.02D0 :: 01/25/2012 -08：06：57.900.00000043（SIPStack，SIPAdminLog :: TraceProtocolRecord：SIPAdminLog.cpp（125））$$ begin_record

Trace-Correlation-Id：4074196035

实例-Id：000018F0
$
方向：收到;来源="内部边缘" ;;目的地="外部边缘< b $ b $同行：lyncfe.example.com:5061

消息类型：响应

起始线：SIP / 2.0 401未经授权

来自：< s ip：[e-mail]> ;; tag = 1672455111; epid = 16724551
$
收件人：< sip：[e-mail]> ;; tag = 6E92C85AEBAC66461CD3D9E7FF35D674

CSeq： 3 REGISTER

电话ID：CDEA0494B083GDXKgQYZ3IuhqvqePNLL

日期：星期三，2012年1月25日08:06:57 GMT

WWW-Authenticate：NTLM领域="SIP通信服务"，targetname =" lyncfe.example.com"，version = 4

WWW-Authenticate：TLS-DSK realm =" SIP Communications Service"，targetname =" lyncfe.example.com"，version = 4，sts-uri =" https：//lyncfe.example.com：443 / CertProv / CertProvisioningService.svc"

Via：SIP / 2.0 / TLS 19x.1xx.0.2xx：60027; branch = z9hG4bK72A5FBC9.AAC299504F0761A1;分支= FALSE; ms-received-port = 60027; ms-received-cid = 16B9100

Via：SIP / 2.0 / TLS 19x .1xx.0.1xx：3082;收到= 2xx.xx.1xx.1xx; ms-received-port = 3082; ms-received-cid = 12700

ms-diagnostics：1000; reason =" ;最终握手失败" ;; HRESULT =" 0xC3E93EC3（SIP_E_AUTH_UNAU THORIZED）" ;; source =" lyncfe.example.com"

服务器：RTC / 4.0

内容长度：0

消息-Body：–
$
$$ end_record

这里有什么问题，如果有任何请发帖并给出提示/解决方案来解决它。

最好的问候

 

 

解决方案

您能否按照以下所述的握手协议进行操作：

http://msdn.microsoft.com/en-us/library/cc431491 （v = office.12）的.aspx ？

I have implemented ntlmv2 for lync-server login in an custom made lync client.The message that I send to server is .....

(3rd register message)

 

REGISTER sip:example.com SIP/2.0
Via: SIP/2.0/TLS 19x.1xx.0.1xx:3246
From: <sip:[e-mail]>;tag=2257063211;epid=22570632
To: <sip:[e-mail]>
Call-ID: A2B000F95CB8XZRikcdYitb4QBvEr4P2
CSeq: 3 REGISTER
Contact: <sip:19x.1xx.0.1xx:3246;transport=tls;ms-opaque=28c9d310c1>;methods="INVITE, MESSAGE, INFO, OPTIONS, BYE, CANCEL, NOTIFY, ACK, REFER, BENOTIFY";proxy=replace;+sip.instance="<urn:uuid:6b6590c5-2a3f-5dee-ad87-5ab6694cf66d>"
Max-Forwards: 70
User-Agent: UCCAPI/4.0.7577.0 OC/4.0.7577.0 (Microsoft Lync 2010)
Supported: gruu-10, adhoclist, msrtc-event-categories
Supported: ms-forking
Supported: ms-cluster-failover
Supported: ms-userservices-state-notification
Ms-keep-alive: UAC;hop-hop=yes
Event: registration
Ms-subnet: 19x.1xx.0.0
Proxy-Authorization: NTLM qop="auth", realm="SIP Communications Service", opaque="8CEED616", targetname="lyncfe.example.com", version=4, gssapi-data="TlRMTVNTUAADAAAAGAAYAKgAAADGAMYAwAAAABAAEABYAAAALAAsAGgAAAAUABQAlAAAABAAEACGAQAAVYKQYgYBsR0AAAAPAAAAAAAAAAAAAAAAAAAAAG4AZQB5AGUAYgBhAGwAbABsAHkAbgBjAHQAZQBzAHQAOABAAG4AZQB5AGUAYgBhAGwAbAAuAGMAbwBtAEUAWQBFAEIAQQBMAEwALQBQAEMA9jYBMVaneo2SEFBrg1/YnLPWl4gGzCyjeTg+SJIb99jnRvh/xOM1KQEBAAAAAAAAAD9j2kfbzAGz1peIBswsowAAAAACABAATgBFAFkARQBCAEEATABMAAEADABMAFkATgBDAEYARQAEABgAbgBlAHkAZQBiAGEAbABsAC4AYwBvAG0AAwAmAGwAeQBuAGMAZgBlAC4AbgBlAHkAZQBiAGEAbABsAC4AYwBvAG0ABQAYAG4AZQB5AGUAYgBhAGwAbAAuAGMAbwBtAAcACABjQk/rRdvMAQAAAAAAAAAAGL4kYo+YoVBEmij7AkIylQ==" , crand="becdaa89", cnum ="1", response="0100000024A95BA08AA3947964000000"
Content-Length: 0

 

The response that I get from server is in log is......

 

TL_INFO(TF_COMPONENT) [0]05FC.02D0::01/25/2012-08:06:57.900.00000042 (SIPStack,CSIPMessage::CacheConnectionFlags:SIPMessage.cpp(1664))[0]( 00000000039B4DC0 ) From server [lyncfe.example.com] connection, flags [PeerInternal TrafficInternal 0xa0100c], CID [0x12300]
TL_INFO(TF_PROTOCOL) [0]05FC.02D0::01/25/2012-08:06:57.900.00000043 (SIPStack,SIPAdminLog::TraceProtocolRecord:SIPAdminLog.cpp(125))$$begin_record
Trace-Correlation-Id: 4074196035
Instance-Id: 000018F0
Direction: incoming;source="internal edge";destination="external edge"
Peer: lyncfe.example.com:5061
Message-Type: response
Start-Line: SIP/2.0 401 Unauthorized
From: <sip:[e-mail]>;tag=1672455111;epid=16724551
To: <sip:[e-mail]>;tag=6E92C85AEBAC66461CD3D9E7FF35D674
CSeq: 3 REGISTER
Call-ID: CDEA0494B083GDXKgQYZ3IuhqvqePNLL
Date: Wed, 25 Jan 2012 08:06:57 GMT
WWW-Authenticate: NTLM realm="SIP Communications Service", targetname="lyncfe.example.com", version=4
WWW-Authenticate: TLS-DSK realm="SIP Communications Service", targetname="lyncfe.example.com", version=4, sts-uri="https://lyncfe.example.com:443/CertProv/CertProvisioningService.svc"
Via: SIP/2.0/TLS 19x.1xx.0.2xx:60027;branch=z9hG4bK72A5FBC9.AAC299504F0761A1;branched=FALSE;ms-received-port=60027;ms-received-cid=16B9100
Via: SIP/2.0/TLS 19x.1xx.0.1xx:3082;received=2xx.xx.1xx.1xx;ms-received-port=3082;ms-received-cid=12700
ms-diagnostics: 1000;reason="Final handshake failed";HRESULT="0xC3E93EC3(SIP_E_AUTH_UNAUTHORIZED)";source="lyncfe.example.com"
Server: RTC/4.0
Content-Length: 0
Message-Body: –
$$end_record

What is the problem here , if there any please post and give the hints/solution to solve it.

Best Regards

 

 

解决方案

Can you please follow the hand-shake protocol described in:

http://msdn.microsoft.com/en-us/library/cc431491(v=office.12).aspx?

这篇关于401最终注册握手未经授权的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！