sr-users

sr-users@lists.kamailio.org

31 participants
37386 discussions

Start a nNew thread

Re: [SR-Users] kamailio Trunk authentication
by Keshav Kaushik 29 Aug '22

29 Aug '22

1 0

Re: [SR-Users] kamailio Trunk authentication
by Henning Westerholt 29 Aug '22

29 Aug '22

Hello, For non-commercial support please address our sr-users list (added to CC). Please look at the uac module, there a function uac_auth() for this particular scenario with example cfg. https://kamailio.org/docs/modules/5.5.x/modules/uac.html#uac.f.uac_auth Cheers, Henning -- Henning Westerholt – https://skalatan.de/blog/ Kamailio services – https://gilawa.com<https://gilawa.com/> From: Keshav Kaushik <kdkaushik(a)gmail.com> Sent: Sunday, August 28, 2022 1:34 PM To: Henning Westerholt <hw(a)gilawa.com> Subject: kamailio Trunk authentication Respected Sir, I am new to kamailio so not very familiar with config PV’s and transformations etc. I have successfully authenticated the Twilio SIP phone via ACL. But I also willing to authenticate the Twilio SIP via username and password. For doing this I plan to modify the “proxy-authentication” header as blow: if (is_present_hf("Proxy-Authorization")) { $nonc=$sel(proxy-authorization.nonce);// not working $has="kamailio:$ar:SdE-----------ADVpa"; $ha1=$(has{s.md5}); hat="$aa:$adu"; $ha2=$(hat{s.md5}); $resp="$HA1:$nonc:$HA2"; append_hf('Proxy-Authorization: Digest username="kamailio", realm="$ar", nonce="$nonc", uri="sip:+1650ZZZZZZ@XX.YY.7.195", response="$(resp{s.md5})"'); } remove_hf("Proxy-Authorization");// remove original header When I save the config file and restart kamailio, it does not start, may be due to some error in code. Can you please help in authentication of a SIP trunk using user/passowrd. Thanks in advance Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows

2 1

Intermittent delays relaying BYE (up to 1s)
by Lewis Hutchinson 26 Aug '22

26 Aug '22

Thanks Alex and Kaufman, As you said there is an element of db blocking for accounting, but I don't see the same impact when the INVITE goes through and sets the accounting flags. I will look to disable accounting and see if it improves things. If not, I will have a look at benchmark to try and pin it down. It is not causing any noticeable delay in the clearing down of the call to the end users but I want to try and optimise the cleardown if possible. Once I have tested this I will report back. Thanks for your assistance. Lewis

3 2

Intermittent delays relaying BYE (up to 1s)
by Lewis Hutchinson 25 Aug '22

25 Aug '22

I have a situation where I am seeing intermittently Kamailio having delays when relaying the BYE received from an external party This is only affecting the BYE We have 6 Kamailios stood up 3 linked to the SIP Providers (SBC) 3 for Registration (REG) Language KEMI | Python version: kamailio 5.5.1 (x86_64/linux) 278772-dirty flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: 278772 -dirty compiled with gcc 9.3.0 Simplified Flow PSTN >>>> Kamailio SBC >>>> FREESWITCH >>>> Kamailio REG >>>> SIP DEVICE SIP DEVICE >>>> Kamailio REG >>>> FREESWITCH >>>> Kamailio SBC >>>> PSTN This happens on all of them intermittently when receiving the BYE from either a SIP trunk or a SIP Device Publicly, it can take upto 1s to pass this onto the next hope (Freeswitch) on the local network. All BYEs passed between the local network relay in fractions of a second. All BYEs passed out of the KAMAILIO SBC or KAMAILIO REG to their respective public enpoints relay in fractions of a second but BYEs received from public on advertised address take upto 1s for Kamailio to process and relay. i.e PSTN >>> BYE >>>> KAMAILIO SBC (kamailio will sometimes take upto 1 second to relay this on to other kit on the internal solution. Freeswitch etc) SIP DEVICE >>> BYE >>>> KAMAILIO REG (kamailio will sometimes take upto 1 second to relay this on to other kit on the internal solution. Freeswitch etc) I am basing these timings on SNgrep and PCAP traces from homer. Does anyone have any hints and tips on how I can debug this issue. I have enabled debug logging and replicated the issue but it doesn't show anything from what I can see as to why there is delays. Thanks in advance lewis

3 2

JSON-RPC dgram_socket just part of the output
by Ilie Soltanici 25 Aug '22

25 Aug '22

Hello, I'm trying to get the dispatcher status from kamailio through the UDP datagram but for some reason, it is getting just part of the output. Is there any buffer that I have to increase to get the complete output? command used: ``` echo '{"jsonrpc": "2.0", "method": "dispatcher.list", "reply_name": "kamailio_reply_fifo", "id": 1}' | nc -u 192.168.1.1 8090 ``` kamailio related config: modparam("jsonrpcs", "fifo_name", "/tmp/kamailio_request.fifo") modparam("jsonrpcs", "transport", 6) modparam("jsonrpcs", "fifo_mode", 0600) modparam("jsonrpcs", "fifo_user", "kamailio") modparam("jsonrpcs", "dgram_socket", "udp:MY_INTERNAL_IP_ADDR:8090") modparam("jsonrpcs", "dgram_timeout", 2000) modparam("jsonrpcs", "pretty_format", 1) output: [image: image.png] Thanks

2 4

Kamailio 5.3 call forwarding
by Derek OSS 24 Aug '22

24 Aug '22

Hi, I'm using Kamailio 5.3 and I am interested in doing call forwarding. I am interested in having a user "alice" bypass the SIP REGISTER step and have their SIP INVITE request/call forwarded to another SIP user "bob" (who, let's just say for now is within the same domain, so accessible by the same SCSCF and if it makes things simpler, let's say that bob went through the register step). In the PCSCF configuration, I've tried doing something like this: route { route(TEST) ... } route[TEST] { $ru = "sip:bob@domain.com" if (!t_relay("scscf.domain.com",6060)) { sl_reply_error(); } exit; } Instead of $ru, I've also tried using uac_replace_to, providing both the To and URI fields with Bob's SIP URI. When I try using the $ru, the S-CSCF still seems to use Alice's R-URI instead of Bob's. When I try using uac_replace_to, I get a 403 error saying that I need to register with the S-CSCF first. Am I going about this the correct way? Thank you. Derek

2 1

TLSA module compile errors
by Koray Vatansever 23 Aug '22

23 Aug '22

Hi everyone, I'm trying to build tlsa module on redhat 7.9 server. But I'm encountering the following compile errors. Any ideas on how I can deal with this? CC (gcc) [M tlsa.so] tls_util.o CC (gcc) [M tlsa.so] tls_domain.o CC (gcc) [M tlsa.so] tls_locking.o CC (gcc) [M tlsa.so] tls_rand.o CC (gcc) [M tlsa.so] tls_map.o CC (gcc) [M tlsa.so] tls_cfg.o CC (gcc) [M tlsa.so] tls_select.o CC (gcc) [M tlsa.so] tls_dump_vf.o CC (gcc) [M tlsa.so] tls_init.o CC (gcc) [M tlsa.so] tls_bio.o CC (gcc) [M tlsa.so] tls_config.o CC (gcc) [M tlsa.so] tls_server.o CC (gcc) [M tlsa.so] tls_rpc.o CC (gcc) [M tlsa.so] tls_ct_wrq.o CC (gcc) [M tlsa.so] tlsa_mod.o CC (gcc) [M tlsa.so] tls_verify.o LD (gcc) [M tlsa.so] tlsa.so /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(deflate.o): relocation R_X86_64_32S against hidden symbol `_length_code' can not be used when making a shared object /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(inflate.o): relocation R_X86_64_32S against hidden symbol `zcfree' can not be used when making a shared object /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(inftrees.o): relocation R_X86_64_32 against `.rodata' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(trees.o): relocation R_X86_64_32S against hidden symbol `_length_code' can not be used when making a shared object /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(zutil.o): relocation R_X86_64_32 against `.rodata.str1.1' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(crc32.o): relocation R_X86_64_32 against `.rodata' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(inffast.o): relocation R_X86_64_32S against `.rodata.str1.1' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: tlsa.so: version node not found for symbol SSLeay_version(a)OPENSSL_1.0.1 /usr/bin/ld: failed to set dynamic section sizes: Bad value collect2: error: ld returned 1 exit status make[2]: *** [tlsa.so] Error 1 make[1]: *** [modules] Error 1

2 2

TLS issue
by M Arqum CH 22 Aug '22

22 Aug '22

Dear All, Thank you in advance . Facing issue is setting up tls with kamailio 5.5.4 on ec2 Amazon linux server. Getting this error. Aug 18 20:36:33 abc.domain /usr/local/mykamailio/sbin/kamailio[10772]: ERROR: tls [tls_server.c:1329]: tls_h_read_f(): protocol level error Aug 18 20:36:33 abc.domain /usr/local/mykamailio/sbin/kamailio[10772]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca Aug 18 20:36:33 abc.domain /usr/local/mykamailio/sbin/kamailio[10772]: ERROR: tls [tls_server.c:1333]: tls_h_read_f(): src addr: 143.198.11.1:62033 ///client ip Aug 18 20:36:33 abc.domain /usr/local/mykamailio/sbin/kamailio[10772]: ERROR: tls [tls_server.c:1336]: tls_h_read_f(): dst addr: 172.36.53.1:5061 ///ec2 local ip Aug 18 20:36:33 abc.domain /usr/local/mykamailio/sbin/kamailio[10772]: ERROR: <core> [core/tcp_read.c:1481]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0xffff80d78a10 r: 0xffff80d78b38 (-1) TLS Config [server:default] method = TLSv1+ verify_certificate = no require_certificate = nocertificate=/usr/local/ssl/certs/cert.pem private_key=/usr/local/ssl/certs/fullkey.pem server_name = abc.domain Also tried this conf [server:default] method = TLSv1+ ///tries all version options verify_certificate = no require_certificate = no certificate=/usr/local/ssl/certs/ abc.domain.crt private_key=/usr/local/ssl/certs/ abc.domain.key server_name = abc.domain.link openssl version OpenSSL 1.0.2k-fips 26 Jan 2017 please guide. -- Regards Arqum

3 3

remove header from reply?
by Brett Nemeroff 19 Aug '22

19 Aug '22

Hello, I'm receiving calls which I forward to a server I KNOW will reply with a 302. When I get that 302, I parse some information and then t_reply(302) the originator. The 302 I create needs to have it's own contact header which I am adding with append_to_reply(). That works great. BUT the contact header from the original 302 is hanging around. Now I have two contact headers :( How can I get rid of the original 302's contact header? remove_hf() doesn't work in this context since it's a reply. So I need a kind of "remove_header_from_reply()". Thanks, Brett

2 3

Processing Async HTTP Requests in Real-time
by Brett Nemeroff 19 Aug '22

19 Aug '22

Hello Kamailio Team! I've tried following the documentation for http_async_query() with suspend=1 and not getting results I'm expecting. Perhaps I'm misunderstanding the documentation. Basically I'm performing a http_async_query() with suspend set to 1 and a "route_name" set to HTTP_REPLY. When my query executes, it appears that Kamailio stops processing in that route block, suspends, and then when a reply is available, it continues in HTTP_REPLY. That makes sense. I pull the return value and set some $var and $avp. When I get to the end of the HTTP_REPLY block, I'm EXPECTING it to RESUME FROM the suspended location from the original route block, which it does NOT seem to do. Is that expected? For what it's worth, I did test just continuing my route logic in HTTP_REPLY and just forgetting about the original route block (moved all the remaining processing logic into HTTP_REPLY) However, existing $avp and $vars that were already set within the transaction were not set. So that's not possible either. I'm pretty sure there is a right way to do this without getting hacky. Can someone help me out? And yes, I know what I'm trying to do sounds like sync, but I want async to handle high volume and the potential for my external URL to lightly block. I believe the right way to do this is with async+suspending. Thank you, Brett

2 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users