sr-users February 2016

sr-users@lists.kamailio.org

80 participants
133 discussions

Using the auth_ephemeral module
by Hemanshu Vadehra 17 Jan '17

17 Jan '17

I'm involved in setting up a Kamailio instance and was hoping to make use of the auth_ephemeral module for authentication. But the module documentation doesn't quite make clear how exactly the module is to be employed or the web service set up. Does anyone have a working example? Regards, Hemanshu Vadehra hemanshu.v(a)directi.com

5 8

Kamailio on Mac
by Carlos Ruiz Díaz 04 Aug '16

04 Aug '16

Hi all, I'm switching my development environment from Linux to Mac. Is there any tutorial on how to setup Kamailio on this OS? It may be an Unix flavor, but it's still quite different from Linux :). Thanks, -- Carlos http://caruizdiaz.com http://ngvoice.com +52 55 3048 3303

6 9

Sipcapture on SPARC
by Spencer Thomason 18 May '16

18 May '16

Hello, I’m attempting to deploy a homer sip capture server on SPARC and I’m seeing some strange date related errors: ERROR: db_mysql [km_dbase.c:128]: db_mysql_submit_query(): driver error on query: Incorrect datetime value: '2052-06-12 16:21:06' for column 'date' at row 1 (1292) Is there some sore of endianness issue? Thanks for any assistance! Regards, Spencer

2 3

sdp_remove_line_by_prefix
by Alberto Sagredo 09 May '16

09 May '16

Hi Im trying to remove my Asterisk s= line on SDP but when doing: sdp_remove_line_by_prefix("s=Asterisk"); Nothing happens. Loaded sdpops.so module as well. Is there any additional needed? BR

4 10

t_on_branch_failure never called AND t_relay never fails in a, forked scenario
by Tristan Mahé 03 May '16

03 May '16

Hi fellow kamailio users, I'm playing actually with t_on_branch_failure, in a simultaneous forking scenario ( lookup("location") returns multiple contacts ). Any idea on how to get those "on_branch_failure" working ? Thanks in Advance ! * Test by putting failure_exec_mode: - at 1 => no branch failure being called, never. - at 0 => t_relay does not fail if a single branch answers the transaction, even if all other branches are failing. * Test by moving the t_on_branch_failure("manage_branch_failure"); line before or after the lookup("location") or on a _on_branch route to set it per branch. - The on_route branch are executed, but never the failure one. - tried also with failure_exec_mode = 0 or 1. * Using set_forward_no_connect, I can see in the logs a "Sending to branch X failed" but no failure route being executed. Without it, nothing in the logs indicating that the branch has timeout. * Config extract: # auto-discard branches from previous serial forking leg modparam("tm", "failure_reply_mode", 3) # 3 by default # default retransmission timeout: 30sec modparam("tm", "fr_timer", 30000) # default invite retransmission timeout after 1xx: 120sec modparam("tm", "fr_inv_timer", 120000) modparam("tm", "reparse_on_dns_failover", 0) # 1: Allow branches to have a per branch failure route # 0: t_relay should fail if a branch fail modparam("tm", "failure_exec_mode", 1) # Allow locally generated 408 to be forgotten in case a reply is received. #modparam("tm", "faked_reply_prio", 2000) # USER location service route[LOCATION] { t_on_branch_failure("manage_branch_failure"); if (!lookup("location")) { .... } # Let's get back after 2.5s if no 100/Trying received. t_set_fr(0, 2500); # set_forward_no_connect(); #t_on_branch("SET_BRANCH_FAILURE"); route(RELAY); exit; } route[RELAY] { .... if (!t_relay()) { xlog("L_WARN","$rm|$ci|$fu|$tu|RELAY_FAILED"); sl_reply_error(); } exit(); } # set failure route per branch branch_route[SET_BRANCH_FAILURE] { xlog("L_WARN","$rm|$ci|$fu|$tu|SETTING_BrANCH_FAILURE_ROUTE"); t_on_branch_failure("manage_branch_failure"); } # manage failure routing cases per branch event_route[tm:branch-failure:manage_branch_failure] { xlog("L_WARN","$rm|$ci|$fu|$tu[$avp(dest_to)]|MANAGE_BRANCH_FAILURE"); }

3 2

Trouble initializing TLS on Fedora 23
by Anthony Messina 02 Apr '16

02 Apr '16

Happy New Year! I've just upgraded my Kamailio (build from master@c7e411e) instance to Fedora 23 from Fedora 22. I've built the packages specifically for Fedora 23 with the following current sources: openssl-1.0.2e-3.fc23.x86_64 openssl-libs-1.0.2e-3.fc23.x86_64 openssl version reports... OpenSSL 1.0.2e-fips 3 Dec 2015 Even so, the following error occurs. It seems like Kamailio having trouble detecting that I'm using running with the same version that I have installed, and the same version that I have compiled against. tls [tls_init.c:557]: init_tls_h(): ERROR: tls: init_tls_h: installed openssl library version is too different from the library the Kamailio tls module was compiled with: installed "OpenSSL 1.0.0-fips 29 Mar 2010" (0x10000003), compiled "OpenSSL 1.0.2d-fips 9 Jul 2015" (0x1000204f). Please make sure a compatible version is used (tls_force_run in kamailio.cfg will override this check) CRITICAL: <core> [main.c:2558]: main(): could not initialize tls, exiting... Any pointers? -A -- Anthony - https://messinet.com/ - https://messinet.com/~amessina/gallery 8F89 5E72 8DF0 BCF0 10BE 9967 92DC 35DC B001 4A4E

3 7

Record-Route header
by jignesh gandhi 01 Apr '16

01 Apr '16

Hello All, I have a need to save the Record-Route header from the INVITE and use it as a route header in requests like BYE. PROXY --> Kamailio(as PROXY) --> Asterisk I am using rr module to add a record_route when passing the INVITE to Asterisk. Thanks, Jignesh Gandhi

2 4

kamailio in a multi-site configuration
by Sébastien Brice 24 Mar '16

24 Mar '16

Hi everyone i am installing Kamailio to scale asterisk on a remote hosted server in a way to manage calls dialogs in a real-time fashion. (and to manage many customers) Several users (maybe 80) are working at the head-office and i want them register their hardphone on the remote Kamailio Ipbx, to free them of ours end-of-life PABX (alcatel-Lucent). Can kamailio help me to achieve that ? What kind of software have I to install locally (mysql to replicate the master mysql db? a replicated asterisk instance?) ? Taking into consideration disaster recovery plan What could be my options to maintain internal call if my internet provider get down by exemple. thx you for your idea. Sébastien BRICE VoIP, Support et Intégration

3 2

Re: [SR-Users] Registration Failure - IMS
by Franz Edler 11 Mar '16

11 Mar '16

Hi Cristina, > But I have another problem related to registration process. After REGISTER- > 401 Unauthorized-REGISTER-200 OK, the IMS client sends the SUBSCRIBE > message (for the "reg" event package subscription) to the S-CSCF, the latter > replies with NOTIFY and the client correctly responds with 200 OK. In order to > be notified on any change of registration state for the client, also the P-CSCF > sends the SUBSCRIBE message to the S-CSCF, the S-CSCF sends a NOTIFY to > the proxy but, instead of replying with 200 OK, the P-CSCF replies with 404- > Not Here (like it doesn't recognize that the recipient of the NOTIFY in the > Req-URI is the P-CSCF itself). > > Have you ever seen similar issue? I have now spent some time to reproduce the issue. First of all: I had to adapt module reg_mod.c in ims_registrar_pcscf, because it containes a hardcoded P-CSCF address: str pcscf_uri = str_init("sip:pcscf.ims.smilecoms.com:4060"); which is only valid for smilecoms. Did you also change that? Then I got exactly the same problem. I found that the P-CSCF config causes in the part "# Check for Subsequent requests:" a reject " sl_send_reply("404","Not here");" I have doubts that this is correctly designed and have to dig deeper into the logic of the config-file. Fact is: the NOTIFY request does not contain a Route header and as it not an ACK it goes straight to the reject. Maybe any IMS expert can shed some light on this code as shown below: # Check for Subsequent requests: if (has_totag()) { # sequential request withing a dialog should # take the path determined by record-routing if (loose_route()) { if ($route_uri =~ "sip:mo@.*") { setflag(FLT_MO); } if(!isdsturiset()) { handle_ruri_alias(); } # RTP-Relay, if necessary route(RTPPROXY); t_relay(); } else { if ( is_method("ACK") ) { if ( t_check_trans() ) { # no loose-route, but stateful ACK; # must be an ACK after a 487 # or e.g. 404 from upstream server t_relay(); exit; } else { # ACK without matching transaction ... ignore and discard exit; } } sl_send_reply("404","Not here"); } exit; BR Franz

3 3

UDP send: Operation not permitted
by Sebastian Damm 11 Mar '16

11 Mar '16

Hi, we have a load balancer which is handling a lot of SIP traffic all day. There's always 20-40 Mbit SIP traffic going through. From time to time we see in our logs messages like these: Sep 16 09:46:28 ecker /usr/sbin/kamailio[25505]: ERROR: <core> [udp_server.c:591]: udp_send(): ERROR: udp_send: sendto(sock,0x7f2d9d6b3ce0,1321,0,46.237.225.126:5060,16): Operation not permitted(1) Sep 16 09:46:38 ecker /usr/sbin/kamailio[25194]: ERROR: <core> [udp_server.c:591]: udp_send(): ERROR: udp_send: sendto(sock,0x7efc982b8fc8,420,0,82.113.121.183:35794,16): Operation not permitted(1) Sep 16 09:46:40 ecker /usr/sbin/kamailio[25505]: ERROR: <core> [udp_server.c:591]: udp_send(): ERROR: udp_send: sendto(sock,0x7f2d9d6b3ce0,1338,0,5.158.137.9:55067,16): Operation not permitted(1) Sep 16 09:46:44 ecker /usr/sbin/kamailio[25183]: ERROR: <core> [udp_server.c:591]: udp_send(): ERROR: udp_send: sendto(sock,0x7efc982d9f48,450,0,178.165.131.197:37515,16): Operation not permitted(1) Sep 16 09:46:49 ecker /usr/sbin/kamailio[25643]: ERROR: <core> [udp_server.c:591]: udp_send(): ERROR: udp_send: sendto(sock,0x7f93fb624530,496,0,172.56.7.69:25643,16): Operation not permitted(1) Sep 16 09:46:55 ecker /usr/sbin/kamailio[25335]: ERROR: <core> [udp_server.c:591]: udp_send(): ERROR: udp_send: sendto(sock,0x7f41632cda98,598,0,80.215.234.139:3396,16): Operation not permitted(1) Sep 16 09:46:56 ecker /usr/sbin/kamailio[25345]: ERROR: <core> [udp_server.c:591]: udp_send(): ERROR: udp_send: sendto(sock,0x7f41632f4840,459,0,94.197.120.191:8225,16): Operation not permitted(1) I know that these messages can be produced by iptables blocking the outbound traffic. But our outbound chain looks basically like this: root@ecker:~# iptables-save | grep OUTPUT :OUTPUT DROP [0:0] -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -j ACCEPT -A OUTPUT -m state --state INVALID -j DROP -A OUTPUT -o lo -m state --state NEW -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -m state --state NEW -j ACCEPT We don't have the nf_ct_sip module loaded, syslog doesn't say anything, and even clearing all iptables rules doesn't eliminate those errors. Has anyone ever seen this? It looks like a load thing, because at weekends there are significantly less errors. Thanks, Sebastian

5 7

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users February 2016