TIPS PIAF2 - Server to Server issue - No authority found

[Patrick Healy]

Hi,

I'm in the midst of upgrading a series of old Trixbox servers with PIAF. In a nutshell, there's a main server that has a PRI connected to it and then two satellite servers that connect to the main one via IAX. Under the old all-trixbox configuration, the extensions at the satellite servers appear to be local extensions.

As I replace the main server (the one with the PRI card) I am able to set up the trunks to the satellite systems and all seems ok. I can call from an extension at the main site and communicate with an extension at one of the remote sites. However, when the remote site tries to call me they get an all circuits busy message and the log file on the trixbox side says this:

chan_iax2.c: Call rejected by XXX.XXX.XXX.XXX: No authority found

The PIAF side has no indication that an attempt was made. The odd thing is that I copied the trunk definitions directly from the old FreePBX trunk page to the new one. I even used copy/paste to eliminate the possibility of a typo.

Google tells me that the error is and indication that a username/password is wrong. But I can't see any difference between the PIAF config and the Trixbox config. When I disable the routes and re-point the trunks back to the old Trixbox, everything works normally.

Can anyone offer some suggestions on where to look? I turned on IAX debugging on the satellite side and got this output:

[Sep 7 12:17:42] VERBOSE[2923] logger.c: Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass: NEW

[Sep 7 12:17:42] VERBOSE[2923] logger.c: Timestamp: 00008ms SCall: 17334 DCall: 00000 [XXX.XXX.XXX.XXX:4569]
[Sep 7 12:17:42] VERBOSE[2923] logger.c: VERSION : 2
[Sep 7 12:17:42] VERBOSE[2923] logger.c: CALLED NUMBER : 3016
[Sep 7 12:17:42] VERBOSE[2923] logger.c: CODEC_PREFS : (ulaw|alaw|gsm)
[Sep 7 12:17:42] VERBOSE[2923] logger.c: CALLING NUMBER : 2125556170
[Sep 7 12:17:42] VERBOSE[2923] logger.c: CALLING PRESNTN : 0
[Sep 7 12:17:42] VERBOSE[2923] logger.c: CALLING TYPEOFN : 0
[Sep 7 12:17:42] VERBOSE[2923] logger.c: CALLING TRANSIT : 0
[Sep 7 12:17:42] VERBOSE[2923] logger.c: CALLING NAME : Jane Smith
[Sep 7 12:17:42] VERBOSE[2923] logger.c: LANGUAGE : en
[Sep 7 12:17:42] VERBOSE[2923] logger.c: USERNAME : <XXXXXXXXX>
[Sep 7 12:17:42] VERBOSE[2923] logger.c: FORMAT : 4
[Sep 7 12:17:42] VERBOSE[2923] logger.c: CAPABILITY : 14
[Sep 7 12:17:42] VERBOSE[2923] logger.c: ADSICPE : 2
[Sep 7 12:17:42] VERBOSE[2923] logger.c: DATE TIME : 2013-09-07 12:17:42
[Sep 7 12:17:42] VERBOSE[2923] logger.c:
[Sep 7 12:17:42] VERBOSE[2920] logger.c: Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass: ACK
[Sep 7 12:17:42] VERBOSE[2920] logger.c: Timestamp: 00008ms SCall: 00481 DCall: 17334 [XXX.XXX.XXX.XXX:4569]
[Sep 7 12:17:42] VERBOSE[2919] logger.c: Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass: REJECT
[Sep 7 12:17:42] VERBOSE[2919] logger.c: Timestamp: 00013ms SCall: 00481 DCall: 17334 [XXX.XXX.XXX.XXX:4569]
[Sep 7 12:17:42] VERBOSE[2919] logger.c: CAUSE : No authority found
[Sep 7 12:17:42] VERBOSE[2919] logger.c: CAUSE CODE : 50


Any other debugging suggestions?

Thanks!

Pat

 

[billsimon]

Newer versions of Asterisk have extra security in the IAX protocol. You will probably need to disable it until all servers are up to date. See https://wiki.asterisk.org/wiki/display/AST/IAX2 Security . Try setting calltokenoptional = 0.0.0.0/0.0.0.0 in the Asterisk IAX Settings on PIAF. (That would go in the "Other IAX Settings" field.)