sr-users

sr-users@lists.kamailio.org

37 participants
37510 discussions

Re: [SR-Users] Reading the P-Assserted-identity header
by Gertjan Wolzak 02 Nov '17

02 Nov '17

Alex and Daniel, Thank you for the feedback, the tip from Daniel helped me pinpoint the problem. And the the one from Alex showed that. The problem was between keyboard and chair, I should have seen that the SBC removed the PAI. Once I changed that, the PAI arrived at Kamailio and manipulation was a breeze. Thanks guys.

1 0

Tcp socket error with active/active kamailio schema
by Donat Zenichev 02 Nov '17

02 Nov '17

Hi guys. I'm trying to realize active/active schema with kamailio. Topology is as following: active/active kamailio -> routing server (asterisk) Kamailio servers work as registrar/location servers and sbc. Asterisk server performs routing functions for calls. We use sip / sips / ws / wss for signaling. Schema built on aws platform and both kamailio have virtual ip address. So when first kamailio crashes, second one assigns ip address of first kamailio. And vice-versa. Both kamailio listens on both shared addresses all the time (with help of sysctl non lolcal bind function). Problem occurs when first kamailio goes down and second kamailio gets ip address of first one. Asterisk tries to send in-dialog requests (for dialogs that were established on first kamailio), request goes to second kamailio and asterisk gets a socket error. And this is proper behaviour I think, because first kamailio established tcp connection with asterisk from certain port, that is not listened on second kamailio. So that, I think that the solution is to use force_send_socket function, but I'm not confident about it. If anyone has ideas, please send your advices. Thanks in advance. -- -- BR, Donat Zenichev Wnet VoIP team Tel: +380(44) 5-900-808 http://wnet.ua <http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_cam…> Virus-free. www.avg.com <http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_cam…> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

1 0

Kamailio not calling each time
by hanoulia salameh 02 Nov '17

02 Nov '17

Hello, I have a problem with kamailio (v4.4), when i try to call from a sip phone through kamailio, the call is interrupted and hang up automatically but after 4s it continues to retry (I can see in the log file Session Progress) and goes through the asterisk (certified/13.13-cert4) and establishes a normal call (It rings at the client side) while it's still disconnected from the sip phone side But when i try again it works fine sometimes. Am I missing something in my configuration file? What can I show in order to help me? Regards

2 2

Kamailio Realtime Integration with Asterisk
by Floimair Florian 02 Nov '17

02 Nov '17

Hi! I found a few tutorials from Daniel on this topic , the latest being https://kb.asipto.com/asterisk:realtime:kamailio-4.0.x-asterisk-11.3.0-astd… . Has anyone ever tried this with a more recent Asterisk version (13 or newer) and using chan_pjsip instead of chan_sip? I'd be willing to update the tutorial once I get it running but I would like to avoid going through obstacles that were already handled ;-) My desired setup is 2 Asterisk boxes (which share configuration, useres and registrations via DB) behind a Kamailio as Load-balancer (got that working already). With best regards Florian Floimair COMMEND INTERNATIONAL GMBH A-5020 Salzburg, Saalachstraße 51 f.floimair(a)commend.com<mailto:f.floimair@commend.com> http://www.commend.com<http://www.commend.com/> Security and Communication by Commend FN 178618z | LG Salzburg

1 0

Mutual TLS with Skype for Business 2015
by Francisco Valentin Vinagrero 02 Nov '17

02 Nov '17

Hello, I'm trying to replace two old Audiocodes gateways (used to interconnect our Skype for Business infrastructure to the PSTN) with a new Kamailio cluster. I am having some trouble to get the TLS mutual authentication working with Kamailio. For the moment, I'm just trying to receive the incoming OPTIONS from SfB, but I get all the time certificate verification errors: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed ERROR: <core> [tcp_read.c:1330]: tcp_read_req(): ERROR: tcp_read_req: error reading My tls.cfg is quite simple, with the same config for client and server (and one single listen=tls:<my IP>:5061 in the Kamailio.cfg file) [server:default] method = TLSv1+ verify_certificate = yes require_certificate = yes private_key = /usr/local/etc/kamailio/tls/key_gw_sfb.pem certificate = /usr/local/etc/kamailio/tls/cert_gw_sfb.pem # => This certificate's Subject is the DNS alias for the cluster, with all the kamailios in the cluster as Subject Alternative Names ca_list = /usr/local/etc/kamailio/tls/myca_and_sfbca.pem # => Kamailio and Skype for Business are signed by different CAs, so here I concatenated all intermediate and root CAs [client:default] method = TLSv1+ verify_certificate = yes require_certificate = yes private_key = /usr/local/etc/kamailio/tls/key_gw_sfb.pem certificate = /usr/local/etc/kamailio/tls/cert_gw_sfb.pem ca_list = /usr/local/etc/kamailio/tls/myca_and_sfbca.pem When I run Kamailio, I can see incoming OPTIONS from Microsoft Exchange Unified Messaging (UM), whose certificate I verify without any issues. UM presents a certificate issued for a single machine, so no Subject Alternative Names (SANs) are involved. The problem comes with the TLS handshake for the Skype Mediation pool. They have a certificate with Subject = DNS alias and all the physical machines that are behind the alias appear listed as Subject Alternative Names (SANs) in the certificate. As the only difference between UM and Skype's Mediation is the certificate's Subject, I think I am missing something on my configuration to validate the SANs instead of the subject. Is the TLS module doing any reverse DNS lookup to verify this? Thanks, Francisco.

4 11

Reading the P-Assserted-identity header
by Gertjan Wolzak 01 Nov '17

01 Nov '17

Hello Kamailions, I receive anonymous calls where the PAI has a prefix which I need to strip before forwarding the call to a proxy. I am trying to read the the header with $hdr(P-Asserted-Identity) and I tried the $ai pseudovariable, but I get an empty reply back every time. xlog("PAI is $ai"); results in ; "Nov 1 16:19:55 proxy04 /usr/local/sbin/kamailio[14814]: ERROR: <script>: PAI is <null>" Same for xlog("PAI is $hdr(P-Asserted-Identity). This works for the Privacy header but not the P-Asserted-Identity header. Hope someone can tell me what I am doing wrong.... Rgds, Gertjan

3 2

Record-Route IP Value
by Soltanici Ilie 31 Oct '17

31 Oct '17

Hi All, Having the following Header: Record-Route: <sip:192.168.1.1;lr;did=637.07c7c2d7> How can i extract only IP value from this header? Thank You.

2 3

module version mismatch for /usr/local/lib64/kamailio/modules/kex.so
by Abdul Basit 31 Oct '17

31 Oct '17

Hi, My kamailio installation with 5.0.3 was working fine. I update kamailio source to 5.0.4 and make all; make install I started receiving error below: /etc/init.d/kamailio start [FAIL] Not starting Kamailio SIP Server: invalid configuration file! ... failed! failed! [....] 0(7426) ERROR: <core> [core/sr_module.c:431]: version_control(): module version mismatch for /usr/local/lib64/kamailio/modules/kex.so; core: kamailio 5.0.3 (x86_64/lin[FAILmodule: kamailio 5.0.4 (x86_64/linux) ... failed! failed! kamailio.cfg is same as earlier. I removed kamailio sources and modules folder /usr/local/lib64/kamailio/modules/ I also dropped old kamailio postgres database and created new one after fresh source install of version 5.0.4 from git. # git clone https://github.com/kamailio/kamailio kamailio # cd kamailio # git checkout -b 5.0 origin/5.0 But this error persists. Whats the resolution? Is this a bug? -- regards, abdul basit

2 2

Source comparisons by DNS hostname
by Alex Balashov 31 Oct '17

31 Oct '17

Hi, Is there a reasonable way, in Kamailio, to determine whether the source of a given SIP message is equivalent to the IP address to which a given DNS hostname resolves? i.e. if(src_ip == 'fqdn.domain.xyz') but not src_ip, obviously. I can't find any core keywords that would seem to fit the bill for a composite comparison. Any other options? -- Alex -- Alex Balashov | Principal | Evariste Systems LLC Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/

2 3

Radius accounting and cdr's
by Jan Hazenberg 31 Oct '17

31 Oct '17

Hi all, I have a question regarding radius accounting. I would like to have a config where i store local cdr records (and not the ACC records) and send accounting to radius as well. I have the following config: # ----- acc params ----- /* General settings */ modparam("acc", "log_level", 0) modparam("acc", "log_facility", "LOG_LOCAL2") /* Enable cdr's */ modparam("acc", "cdr_enable", 1) modparam("acc", "cdr_log_enable", 1) modparam("acc", "cdr_start_on_confirmed", 0) modparam("acc", "cdr_facility", "LOG_LOCAL2") modparam("acc", "cdr_on_failed", 1) /* what special events should be accounted ? */ modparam("acc", "early_media", 0) modparam("acc", "report_ack", 0) modparam("acc", "report_cancels", 0) modparam("acc", "detect_direction", 1) /* Accounting triggers (flags) */ modparam("acc", "log_flag", FLT_ACC) modparam("acc", "log_missed_flag", FLT_ACCMISSED) modparam("acc", "failed_transaction_flag", FLT_ACCFAILED) modparam("acc_radius", "radius_flag", FLT_ACC) modparam("acc_radius", "radius_missed_flag", FLT_ACCMISSED) modparam("acc_radius", "radius_config", "/etc/radiusclient-ng/radiusclient.conf") This works but stores the raw accounting records as well. If i disable the acc log_flag it stops sending radius accounting records (while the acc_radius log_flag is still enabled). Is it possible to send only radius accounting records and disable the local logging of those records, but leave the cdr logging enabled? Or is there a option where i can set only the cdr_log_level so accounting records will only show up when i increase the debug level? Another option is to use a seperate log facility for accounting and cdr's, but it would be nice if it is possible to disable the logging of accounting records and only keep the cdr's. I'm running kamailio 5.0.3. Thanks, Jan

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users