October 27, 2021, 12:32:10 pm *
Welcome, Guest. Please login or register.
News:
 
   Forum Home   Search Login Register OBiTALK  
Pages: 1 ... 5 6 [7] 8 9 ... 11
  Print  
Author Topic: token error  (Read 74834 times)
TheFoxRocks
Newbie
*
Posts: 3


« Reply #120 on: June 13, 2021, 11:21:50 am »

I reported this to Google Voice engineering staff yesterday afternoon.  They have identified the problem and they are working with Poly to resolve it.

To be clear: no action on your part is necessary nor will fix it at this time.  This outage is a good reminder that nobody should depend on Google Voice as their sole source of telephone service, and you can configure your OBiTALK device to use one or more other service providers, such as Callcentric or voip.ms.

I'm sorry, but I don't have any status update to report, since my Google contacts are off for the weekend.  Nonetheless, it's safe to assume that they are working on it, and I will pass along any news I can get.

Hey Steve,

You have my thanks for reaching out on behalf of the community. Please know, that there are people who are thankful for people like yourself. I think people fail to appreciate after buying their OBi (or other) device that they are getting completely free service through Google Voice and expect that free service to always be perfect. I was only relying on Google Voice before. I am using mine as a business phone, I will probably follow your CallCentric guide later today so I have a viable backup. Thanks again!
Logged
PusBucket
Newbie
*
Posts: 2


« Reply #121 on: June 13, 2021, 11:25:11 am »

This didn't achieve even a temporary fix, for me.


The fix is as follows:
Use Obi expert and under Service Providers, ITSP, General:
STUNEnable  checked  (you must uncheck the box to the right first)
STUNserver  stun.l.google.com
X_STUNServerPort  19302
Logged
calt
Newbie
*
Posts: 2


« Reply #122 on: June 13, 2021, 11:28:31 am »

The fix is as follows:
Use Obi expert and under Service Providers, ITSP, General:
STUNEnable  checked  (you must uncheck the box to the right first)
STUNserver  stun.l.google.com
X_STUNServerPort  19302

NO fix!
I tried these changes via OBI expert and via the built in UI of the device (local IP). Also rebooted after each change.

Still exactly the same token error!

Will undo these changes.
Logged
Taoman
Hero Member
*****
Posts: 1473



« Reply #123 on: June 13, 2021, 11:36:39 am »


NSLOOKUP cannot find obihai.sip.google.com or sip.google.com using 8.8.8.8 or 8.8.4.4 or 1.1.1.1 or ns1.google.com

*** dns.google can't find sip.google.com: Non-existent domain

So either Google shut down SIP of google voice, or the A Record was removed on purpose or by attack.

In any case, until the A record for sip.google.com is restored, no obihai.sip.google.com, no GV connection.

obihai.sip.google.com has never had an A record or SRV record. It doesn't matter. Whenever there is an OutboundProxy setting it overrides any Proxy server setting.

All SIP requests go to obihai.telephony.goog, not obihai.sip.google.com. From there it gets redirected as needed.

Look at many of the error messages people are getting:"Connecting to 216.239.36.145;Token Error"
And what does 216.239.36.145 resolve to? The OutboundProxy setting which is obihai.telephony.goog.

You're wasting your time worrying about obihai.sip.google.com.
Logged
Mickey613
Newbie
*
Posts: 4


« Reply #124 on: June 13, 2021, 11:46:28 am »

It should look like this:

It looks like that (but slightly different layout for me). I unchecked STUNEnable since it didn't help. See image here:
https://i.gyazo.com/ac54496c7b678553a3cbbb70beb65aa0.png


That's exactly the settings I had BEFORE making any changes. I'm still down with or without this setting change.
Logged
Taoman
Hero Member
*****
Posts: 1473



« Reply #125 on: June 13, 2021, 11:47:40 am »

The fix is as follows:
Use Obi expert and under Service Providers, ITSP, General:
STUNEnable  checked  (you must uncheck the box to the right first)
STUNserver  stun.l.google.com
X_STUNServerPort  19302

The purpose of a STUN server is to allow the local client to traverse your local NAT successfully. The current issue some people are experiencing is not related to any STUN setting.
Your OBi device may have connected after making a STUN setting change but I guarantee it was purely coincidental.
Logged
Taoman
Hero Member
*****
Posts: 1473



« Reply #126 on: June 13, 2021, 12:11:53 pm »

The following was recently posted on Reddit supposedly by a Google Voice engineer:
Quote
GV eng here: There is some kind of OAuth refresh token problem with some devices. We haven't been able to track it down as of yet. It seems to be only affecting some OBiTALK devices, but it's unclear why because neither us nor Polycom have rolled anything out that would do this, not that we know of at least. We are continuing to investigate, but Google has no access to the devices so there's not a lot to go on. If you have paid support from Polycom, please open a support case with them and give them the serial number of the device that is malfunctioning so they can pull its system logs.

https://www.reddit.com/r/Googlevoice/comments/nxubgn/google_voice_token_error_message_on_poly_obitalk/h1m05vh?utm_source=share&utm_medium=web2x&context=3
Logged
railpass
Newbie
*
Posts: 1



« Reply #127 on: June 13, 2021, 12:15:30 pm »

Just ported my Google Voice number to a different Service Provider (Anveo). Didn't realize how dependent I'd become on the VoIP line. Hard to complain given that GV was free.
Logged
Jasmine10
Newbie
*
Posts: 6


« Reply #128 on: June 13, 2021, 12:52:09 pm »

You are 100% correct, obihai.sip.google.com is just SIP realm name: http://docs.intenogroup.com/v312/en/glossary/s/sip_realm#:~:text=A%20SIP%20realm%20is%20a,as%20a%20the%20SIP%20domain.

216.239.36.145 is the real SIP registration server: obihai.telephony.goog

But before SIP registration, it needs to get OAuth token from another Google server: www.googleapis.com

If changing DNS works, it may be related to the fact that different DNS servers may return different IPs for this server.
Can anyone post the dns resolution output:

In Mac computer:

# Get answer from your ISP DNS server
dig www.googelapis.com

# Get answer from specific DNS server
dig @1.1.1.1 www.googleapis.com

Please also include your city/state.



NSLOOKUP cannot find obihai.sip.google.com or sip.google.com using 8.8.8.8 or 8.8.4.4 or 1.1.1.1 or ns1.google.com

*** dns.google can't find sip.google.com: Non-existent domain

So either Google shut down SIP of google voice, or the A Record was removed on purpose or by attack.

In any case, until the A record for sip.google.com is restored, no obihai.sip.google.com, no GV connection.

obihai.sip.google.com has never had an A record or SRV record. It doesn't matter. Whenever there is an OutboundProxy setting it overrides any Proxy server setting.

All SIP requests go to obihai.telephony.goog, not obihai.sip.google.com. From there it gets redirected as needed.

Look at many of the error messages people are getting:"Connecting to 216.239.36.145;Token Error"
And what does 216.239.36.145 resolve to? The OutboundProxy setting which is obihai.telephony.goog.

You're wasting your time worrying about obihai.sip.google.com.

Logged
lrosenman
Full Member
***
Posts: 235



« Reply #129 on: June 13, 2021, 01:03:32 pm »

I got an ONLINE note from Obitalk at 13:45 CDT 2021-06-13.  Thanks, @SteveInWa for reaching out to Google!
« Last Edit: June 13, 2021, 01:12:13 pm by lrosenman » Logged
Taoman
Hero Member
*****
Posts: 1473



« Reply #130 on: June 13, 2021, 01:06:10 pm »


But before SIP registration, it needs to get OAuth token from another Google server: www.googleapis.com

If changing DNS works, it may be related to the fact that different DNS servers may return different IPs for this server.


Right. Someone posted a SIP trace and it points to a cert issue. I would guess this is correct as it has happened before.
Quote
I did a packet capture and get a "Unknown CA error" so it looks like a certificate issue.

Transport Layer Security
    TLSv1.2 Record Layer: Alert (Level: Fatal, Description: Unknown CA)
        Content Type: Alert (21)
        Version: TLS 1.2 (0x0303)
        Length: 2
        Alert Message
            Level: Fatal (2)
            Description: Unknown CA (48)


Server:  one.one.one.one
Address:  1.1.1.1

Non-authoritative answer:
Name:    www.googleapis.com
Addresses:  2607:f8b0:400a:80a::200a
          2607:f8b0:400a:806::200a
          2607:f8b0:400a:805::200a
          2607:f8b0:400a:807::200a
          142.250.217.106
          142.251.33.106
          142.250.217.74
          172.217.14.234
          142.250.69.202
          172.217.14.202
          142.251.33.74

Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    www.googleapis.com
Addresses:  2607:f8b0:400a:803::200a
          2607:f8b0:400a:805::200a
          2607:f8b0:400a:807::200a
          2607:f8b0:400a:806::200a
          172.217.14.234
          142.250.69.202
          142.251.33.106
          142.251.33.74
          142.250.217.74
          142.250.217.106
          172.217.14.202

Server:  cdns01.comcast.net
Address:  75.75.75.75

Non-authoritative answer:
Name:    www.googleapis.com
Addresses:  2607:f8b0:400a:805::200a
          2607:f8b0:400a:807::200a
          2607:f8b0:400a:806::200a
          2607:f8b0:400a:803::200a
          142.250.69.202
          142.251.33.106
          142.251.33.74
          142.250.217.74
          142.250.217.106
          172.217.14.202
          172.217.14.234

Edit: Near Seattle, WA and GV has stayed connected to 2 GV accounts on multiple OBi devices.

« Last Edit: June 13, 2021, 01:13:34 pm by Taoman » Logged
Taoman
Hero Member
*****
Posts: 1473



« Reply #131 on: June 13, 2021, 01:26:11 pm »


If changing DNS works, it may be related to the fact that different DNS servers may return different IPs for this server.


So is your OBi device not connecting to GV? If so, are you able to do a TCPdump? That's what the GV engineer was asking for. I posted the SIP trace but that wasn't enough. All my OBi devices are connecting normally so a TCPdump from me would do no good.

https://www.reddit.com/r/Googlevoice/comments/nxubgn/google_voice_token_error_message_on_poly_obitalk/h1mm753?utm_source=share&utm_medium=web2x&context=3

Logged
awriter
Jr. Member
**
Posts: 34


« Reply #132 on: June 13, 2021, 01:39:01 pm »

Obi 200 still out in New England at 4:30 pm EST. Still shows either token error or registration not required.

However... I just discovered that Alexa can call out using my GV number, no problem! And there's one within the sound of my voice all around the house.

If you have an Echo, give it a try.
Logged
Jasmine10
Newbie
*
Posts: 6


« Reply #133 on: June 13, 2021, 01:46:02 pm »

Hi, Taoman,

Thanks for your help.
So 1.1.1.1 and 8.8.8.8 work, but 75.75.75.75 doesn't work, correct?


Server:  one.one.one.one
Address:  1.1.1.1

Non-authoritative answer:
Name:    www.googleapis.com
Addresses:  2607:f8b0:400a:80a::200a
          2607:f8b0:400a:806::200a
          2607:f8b0:400a:805::200a
          2607:f8b0:400a:807::200a
          142.250.217.106
          142.251.33.106
          142.250.217.74
          172.217.14.234
          142.250.69.202
          172.217.14.202
          142.251.33.74

Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    www.googleapis.com
Addresses:  2607:f8b0:400a:803::200a
          2607:f8b0:400a:805::200a
          2607:f8b0:400a:807::200a
          2607:f8b0:400a:806::200a
          172.217.14.234
          142.250.69.202
          142.251.33.106
          142.251.33.74
          142.250.217.74
          142.250.217.106
          172.217.14.202

Server:  cdns01.comcast.net
Address:  75.75.75.75

Non-authoritative answer:
Name:    www.googleapis.com
Addresses:  2607:f8b0:400a:805::200a
          2607:f8b0:400a:807::200a
          2607:f8b0:400a:806::200a
          2607:f8b0:400a:803::200a
          142.250.69.202
          142.251.33.106
          142.251.33.74
          142.250.217.74
          142.250.217.106
          172.217.14.202
          172.217.14.234

Edit: Near Seattle, WA and GV has stayed connected to 2 GV accounts on multiple OBi devices.


Logged
Taoman
Hero Member
*****
Posts: 1473



« Reply #134 on: June 13, 2021, 01:54:09 pm »

Hi, Taoman,

Thanks for your help.
So 1.1.1.1 and 8.8.8.8 work, but 75.75.75.75 doesn't work, correct?

Not using Comcast's DNS servers. Using 8.8.8.8 as primary and 8.8.4.4 as secondary.
Logged
Jasmine10
Newbie
*
Posts: 6


« Reply #135 on: June 13, 2021, 01:59:11 pm »

My OBi is working, so we need someone with a failed device to do a TCPdump.


So is your OBi device not connecting to GV? If so, are you able to do a TCPdump? That's what the GV engineer was asking for. I posted the SIP trace but that wasn't enough. All my OBi devices are connecting normally so a TCPdump from me would do no good.

https://www.reddit.com/r/Googlevoice/comments/nxubgn/google_voice_token_error_message_on_poly_obitalk/h1mm753?utm_source=share&utm_medium=web2x&context=3


Logged
Jasmine10
Newbie
*
Posts: 6


« Reply #136 on: June 13, 2021, 02:03:24 pm »

Can you provide DNS resolution output for www.googelapis.com with 1.1.1.1?

Also the output of below command if you are on Mac or Linux:
curl -v --tlsv1.2 "https://www.googleapis.com/"


I did replace the Default DNS providers with the 1.1.1.1 (Cloudflare) and 8.8.8.8 (Google) and the OBi202 is still not working.
Deleted the device from Google account and it won't show up anymore when setting it up from OBiTalk webpage.
obihai.sip.google.com doesn't resolve to anything
Logged
Jasmine10
Newbie
*
Posts: 6


« Reply #137 on: June 13, 2021, 02:06:32 pm »

Can you provide DNS resolution output for www.googelapis.com with your ISP DNS?

Also the output of below command if you are on Mac or Linux:
curl -v --tlsv1.2 "https://www.googleapis.com/"

Obi 200 still out in New England at 4:30 pm EST. Still shows either token error or registration not required.

However... I just discovered that Alexa can call out using my GV number, no problem! And there's one within the sound of my voice all around the house.

If you have an Echo, give it a try.
Logged
Mickey613
Newbie
*
Posts: 4


« Reply #138 on: June 13, 2021, 02:27:56 pm »

on Win10


>curl -v --tlsv1.2 "https://www.googleapis.com/"
*   Trying 142.251.33.202...
* TCP_NODELAY set
* Connected to www.googleapis.com (142.251.33.202) port 443 (#0)
* schannel: SSL/TLS connection with www.googleapis.com port 443 (step 1/3)
* schannel: checking server certificate revocation
* schannel: sending initial handshake data: sending 189 bytes...
* schannel: sent initial handshake data: sent 189 bytes
* schannel: SSL/TLS connection with www.googleapis.com port 443 (step 2/3)
* schannel: failed to receive handshake, need more data
* schannel: SSL/TLS connection with www.googleapis.com port 443 (step 2/3)
* schannel: encrypted data got 2937
* schannel: encrypted data buffer: offset 2937 length 4096
* schannel: sending next handshake data: sending 93 bytes...
* schannel: SSL/TLS connection with www.googleapis.com port 443 (step 2/3)
* schannel: encrypted data got 292
* schannel: encrypted data buffer: offset 292 length 4096
* schannel: SSL/TLS handshake complete
* schannel: SSL/TLS connection with www.googleapis.com port 443 (step 3/3)
* schannel: stored credential handle in session cache
> GET / HTTP/1.1
> Host: www.googleapis.com
> User-Agent: curl/7.55.1
> Accept: */*
>
* schannel: client wants to read 102400 bytes
* schannel: encdata_buffer resized 103424
* schannel: encrypted data buffer: offset 0 length 103424
* schannel: encrypted data got 1974
* schannel: encrypted data buffer: offset 1974 length 103424
* schannel: decrypted data length: 1401
* schannel: decrypted data added: 1401
* schannel: decrypted data cached: offset 1401 length 102400
* schannel: encrypted data length: 544
* schannel: encrypted data cached: offset 544 length 103424
* schannel: decrypted data length: 515
* schannel: decrypted data added: 515
* schannel: decrypted data cached: offset 1916 length 102400
* schannel: encrypted data buffer: offset 0 length 103424
* schannel: decrypted data buffer: offset 1916 length 102400
* schannel: schannel_recv cleanup
* schannel: decrypted data returned 1916
* schannel: decrypted data buffer: offset 0 length 102400
< HTTP/1.1 404 Not Found
< Content-Type: text/html; charset=UTF-8
< Referrer-Policy: no-referrer
< Content-Length: 1561
< Date: Sun, 13 Jun 2021 21:25:22 GMT
< Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
<
<!DOCTYPE html>
<html lang=en>
  <meta charset=utf-8>
  <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">
  <title>Error 404 (Not Found)!!1</title>
  <style>
    *{margin:0; ...
  </style>
  <a href=//www.google.com/><span id=logo aria-label=Google></span></a>
  <p><b>404.</b> <ins>Thatís an error.</ins>
  <p>The requested URL <code>/</code> was not found on this server.  <ins>Thatís all we know.</ins>
* Connection #0 to host www.googleapis.com left intact
Logged
vincentnyc
Newbie
*
Posts: 5


« Reply #139 on: June 13, 2021, 03:51:13 pm »

This didn't achieve even a temporary fix, for me.


The fix is as follows:
Use Obi expert and under Service Providers, ITSP, General:
STUNEnable  checked  (you must uncheck the box to the right first)
STUNserver  stun.l.google.com
X_STUNServerPort  19302

that dude is lying out of his buttcheek.  i ignore dude like him.
Logged
Pages: 1 ... 5 6 [7] 8 9 ... 11
  Print  
 
Jump to:  

Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC

Advertisement
Advertisement