<div dir="ltr">Hi,<div>I'm new to sip and kamailio, I have recently setup a docker container based on kamailio/kamailio:5.5.0-stretch to check things out.</div><div>While I was trying to authenticate an outbound call to a 3rd party sip provider from my kamailio container, I noticed there are times that the 2nd invite with the authorization header that's supposed to be sent from the failure route doesn't get sent out. </div><div>There's no error recorded in the log nor does wireshark picking up any reply to sip phone or message to 3rd party sip provider. Anyone know what might have caused this?</div><div><br></div><div>Some other things to note:</div><div>Kamailio does sent out the INVITE with authorization header and authenticated successfully when my sip phone sent the sip request with FROM ip set to the 3rd party sip server's ip. </div><div>When I change the sip phone to send INVITE with FROM Domain using kamailio container's ip, I'm able to see header is being built from the trace but no INVITE with authorization header is being sent. Changing the FROM uri using $fu or uac_replace_from() does help either.</div><div><br></div><div>----------------------------------------------------------------------------------------------------------------</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br>kamailio-kamailio-1  | 14(22) DEBUG: {1 11126 INVITE 6cda7ecf9aed4154bfb409224b84a876} uac [auth_hdr.c:408]: build_authorization_hdr(): hdr is <Authorization: Digest username="xxxxxxxx", realm="xxx.xxx.xxx.xxx", nonce="07f4a5779568", uri="sip:+0123456789@xxx.xxx.xxx.xxx", qop=auth, nc=00000001, cnonce="3782993246", response="d5ebd0ef00d44db2292c7b8508fa23bc", algorithm=MD5<br>...<br>...<br>kamailio-kamailio-1  | 14(22) exec: {1 11126 INVITE 6cda7ecf9aed4154bfb409224b84a876} *** cfgtrace:dbg_cfg_trace(): failure_route=[MANAGE_FAILURE] c=[/etc/kamailio/kamailio.cfg] l=1026 a=16 n=if<br>kamailio-kamailio-1  | 14(22) exec: {1 11126 INVITE 6cda7ecf9aed4154bfb409224b84a876} *** cfgtrace:dbg_cfg_trace(): failure_route=[MANAGE_FAILURE] c=[/etc/kamailio/kamailio.cfg] l=1021 a=24 n=t_relay<br>kamailio-kamailio-1  | 14(22) DEBUG: {1 11126 INVITE 6cda7ecf9aed4154bfb409224b84a876} <core> [core/msg_translator.c:1797]: check_boundaries(): no multi-part body<br>...<br>...<br>kamailio-kamailio-1  | 14(22) exec: {1 11126 INVITE 6cda7ecf9aed4154bfb409224b84a876} *** cfgtrace:dbg_cfg_trace(): failure_route=[MANAGE_FAILURE] c=[/etc/kamailio/kamailio.cfg] l=1030 a=2 n=exit<br>kamailio-kamailio-1  | 14(22) DEBUG: {1 11126 INVITE 6cda7ecf9aed4154bfb409224b84a876} dialog [dlg_var.c:97]: cb_dlg_locals_reset(): resetting the local dialog shortcuts on script callback: 2147483650<br>kamailio-kamailio-1  | 14(22) DEBUG: tm [t_reply.c:1564]: t_should_relay_response(): rps discarded - uas status: 100<br>kamailio-kamailio-1  | 14(22) DEBUG: tm [t_reply.c:1924]: relay_reply(): reply status=2 branch=0, save=0, relay=-1 icode=0 msg status=401<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/receive.c:596]: receive_msg(): reply-route executed in: 1753 usec<br>kamailio-kamailio-1  | 14(22) DEBUG: dialog [dlg_var.c:97]: cb_dlg_locals_reset(): resetting the local dialog shortcuts on script callback: 2147483652<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/usr_avp.c:637]: destroy_avp_list(): destroying list (nil)<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/usr_avp.c:637]: destroy_avp_list(): destroying list (nil)<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/usr_avp.c:637]: destroy_avp_list(): destroying list (nil)<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/usr_avp.c:637]: destroy_avp_list(): destroying list (nil)<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/usr_avp.c:637]: destroy_avp_list(): destroying list (nil)<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/usr_avp.c:637]: destroy_avp_list(): destroying list (nil)<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/xavp.c:541]: xavp_destroy_list(): destroying xavp list (nil)<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/xavp.c:541]: xavp_destroy_list(): destroying xavp list (nil)<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/xavp.c:541]: xavp_destroy_list(): destroying xavp list (nil)<br>kamailio-kamailio-1  | 14(22) DEBUG: <core> [core/receive.c:606]: receive_msg(): cleaning up</blockquote><div><br></div><div>---------------------------------------------- package capture ----------------------------</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">192.168.0.165      xxx.xxx.xxx.xxx   SIP/SDP   1383    Request: INVITE sip:+0123456789@

xxx.xxx.xxx.xxx   | <br>xxx.xxx.xxx.xxx    192.168.0.165     SIP 585     Status: 100 Trying | <br>xxx.xxx.xxx.xxx    192.168.0.165     SIP   820     Status: 401 Unauthorized | <br>192.168.0.165      xxx.xxx.xxx.xxx   SIP     396     Request: ACK sip:+0123456789  @

xxx.xxx.xxx.xxx   |</blockquote><div><br></div><div>------------------------------------------nothing more till sip phone cancel -----------------</div><div><br></div><div> <br></div><div># ----------------- below is failure route config ---------------------</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">failure_route[MANAGE_FAILURE] {<br></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">xlog("~~~~~ MANAGE_FAILURE ($rm) ($rs-$rr) (from $fu) (to $tu) (req :$ru) (dest $du)\r\n");</blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">if (t_is_canceled()) {</blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">exit;</blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">}</blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">xlog("Checking status code\r\n");</blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">#!ifdef WITH_UAC</blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">if(t_check_status("401|407")) {</blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">if (isflagset(7)) {</blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">t_reply("503","Authentication failed");</blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">exit;</blockquote></blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">}</blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">$avp(auser) = "xxxxxxxxxx";</blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">$avp(apass) = "xxxxxxxxxx;</blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">if(uac_auth()) {</blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">setflag(7);</blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">xlog("after uac_auth $rm (from $fu)(to $tu)(req $ru)(dest $du)\r\n");</blockquote></blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">if(!t_relay()) {</blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">xlog("Failed to relay ($rm) ($rs-$rr) (from $fu)(to $tu)(req $ru)\r\n");</blockquote></blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">t_reply("500","Error");</blockquote></blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> }</blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">} else {</blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">                             xlog("uac_auth() not available\r\n");</blockquote></blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">                                t_reply("503","Authentication invalid");</blockquote></blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">                 }</blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">                        exit;</blockquote></blockquote></blockquote><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">         }</blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> #!endif </blockquote></blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">}<br></blockquote><div># ----------- end failure route config --------------------</div><div><br></div></div>