October 2025 - sr-users

dynamic selection of authentication algorithm
by Juha Heinanen 28 Oct '25

28 Oct '25

How about this new function that sets the algorithm? -- Juha iff --git a/src/modules/auth/auth_mod.c b/src/modules/auth/auth_mod.c index 534ad9e20f..4e3a584d22 100644 --- a/src/modules/auth/auth_mod.c +++ b/src/modules/auth/auth_mod.c @@ -74,6 +74,10 @@ int w_consume_credentials(struct sip_msg *msg, char *s1, char *s2); * Check for credentials with given realm */ int w_has_credentials(struct sip_msg *msg, char *s1, char *s2); +/* + * Set authentication algorithm + */ +int w_auth_algorithm(struct sip_msg *msg, char *alg, char* s2); static int pv_proxy_authenticate( struct sip_msg *msg, char *realm, char *passwd, char *flags); @@ -170,6 +174,8 @@ static cmd_export_t cmds[] = { REQUEST_ROUTE}, {"pv_auth_check", (cmd_function)w_pv_auth_check, 4, fixup_pv_auth_check, 0, REQUEST_ROUTE}, + {"auth_algorithm", w_auth_algorithm, 1, fixup_spve_null, 0, + REQUEST_ROUTE}, {"bind_auth_s", (cmd_function)bind_auth_s, 0, 0, 0}, {0, 0, 0, 0, 0, 0} @@ -475,6 +481,35 @@ int w_has_credentials(sip_msg_t *msg, char *realm, char *s2) return -1; } return ki_has_credentials(msg, &srealm); + +} +/** + * + */ +int w_auth_algorithm(sip_msg_t *msg, char* alg, char* s2) +{ + if (fixup_get_svalue(msg, (gparam_t*)alg, &auth_algorithm) < 0) { + LM_ERR("failed to get algorithm value\n"); + return -1; + } + + if (strcmp(auth_algorithm.s, "MD5") == 0) { + hash_hex_len = HASHHEXLEN; + calc_HA1 = calc_HA1_md5; + calc_response = calc_response_md5; + } + else if (strcmp(auth_algorithm.s, "SHA-256") == 0) { + hash_hex_len = HASHHEXLEN_SHA256; + calc_HA1 = calc_HA1_sha256; + calc_response = calc_response_sha256; + } + else { + LM_ERR("Invalid algorithm provided." + " Possible values are \"\", \"MD5\" or \"SHA-256\"\n"); + return -1; + } + + return 1; } #ifdef USE_NC

5 13

Kamailio WebSocket configuration error
by tjgcourage11 28 Oct '25

28 Oct '25

Hi, could you please help me check this issue? Or provide tutorial links for WebSocket installation and configuration. Requirement: Support WebSocket signaling Configuration in Kamailio.cfg as follows: [Please paste your specific configuration here] 3. I keep getting the following syntax error in my Kamailio configuration: 4. We suspect it might be because WebSocket is not supported during compilation and installation. 5. Additional information: The websocket.so file exists in /usr/local/lib64/kamailio/modules/, along with other dependencies like xhttp, etc. Best regards, Kamailio User

5 5

Whitelisting and Blacklisting IPs Without Using a Database
by Fernando Lopes 25 Oct '25

25 Oct '25

Hello everyone, I have a question: is there a way to whitelist and blacklist IP addresses without using a database table? I’m currently using the permissions module to block some traffic, but I’d also like to ban specific IPs. Ideally, I’d prefer not to use a database — I’d rather use a file-based approach, something like a permissions.allow file. Thank you.

6 5

Info: Updates to Kamailio management group
by Daniel-Constantin Mierla 15 Oct '25

15 Oct '25

Hello, Juha Heinanen has decided to retire from the Kamailio management group, being now replaced by Federico Cabiddu: - https://www.kamailio.org/w/management/ Juha is one of the very early contributors to the SER/Kamailio project, his activity going back to 2002, only a few months after the project has been released open source -- tracking based on git commits: commit 1d98277a960161528cf01844e9eec75a9910ee75 Author: Jan Janak <jan(a)iptel.org> Date: Sun Dec 8 00:11:50 2002 +0000 get_from macro contributed by Juha Heinanen Directly committing not long after, on: commit dcd0a103ea8ae8c08ad0e59ec90d241a657e14f8 Author: Juha Heinanen <jh(a)tutpro.com> Date: Sun Jan 19 13:59:51 2003 +0000 Used get_parsed_from_body for From header access LCR, Enum, Radius modules, to name a few, are among those mainly authored by Juha. We are very grateful for all his contributions to the project so far, as developer and all the other roles! Federico is a long term contributor as well, with modules such as http_async_client and tsilo mainly authored by him, with many commits to other components of Kamailio. He presented about Kamailio at events like FOSDEM or Kamailio World, being a frequent participant to Kamailio Development Meetings as well. Cheers, Daniel PS: A quick reminder that the next Kamailio Development Meeting in scheduled to happen in less than two months: https://www.kamailio.org/w/developers-meeting/) -- Daniel-Constantin Mierla (@ asipto.com) twitter.com/miconda -- linkedin.com/in/miconda Kamailio Consultancy, Training and Development Services -- asipto.com

2 1

Help with lookup() and save() for WebRTC traffic (dynamic instance ID issue)
by Fernando Lopes 15 Oct '25

15 Oct '25

Hello Everyone, I'm having an issue with lookup() and save() when handling WebRTC traffic. I need to send the SIP response back to my client, but this client uses an instance ID that isn’t fixed — it changes between browsers and sessions. I’ve been trying to save the location using a custom URI, like this: xlog("L_INFO", "Instance ID: $fn\n"); save("location", "0x00", "sip:$fn@accelerat.net"); and for lookup I’m using a simple: lookup("location"); but get this error: lookup failed: Location lookup failed for user: 894aa72f-d7a3-437b-ac20-62b3943f7b5e I’ve checked the module docs here but I’m still unclear on how the lookup process works internally or what’s missing in my configuration.: https://kamailio.org/docs/modules/4.2.x/modules/registrar.html#registrar.f.… Here are my my logs: INFO: <script>: Instance ID: "bad2be9e-d9ff-41a8-8a19-5010acceb09d" kamcmd ul.dump { Domains: { Domain: { Domain: location Size: 1024 AoRs: { Info: { AoR: "894aa72f-d7a3-437b-ac20-62b3943f7b5e" HashID: -680662917 Contacts: { Contact: { Address: sip:894aa72f-d7a3-437b-ac20-62b3943f7b5e@kfea73lbnajh.invalid Expires: 480 Q: -1 Call-ID: fkjjsrvt84dkc6a33dsb CSeq: 4 User-Agent: n/a Received: sip:172.31.208.1:64941;transport=ws Path: [not set] State: CS_NEW Flags: 0 CFlags: 0 Socket: udp:10.5.0.8:5060 Methods: -1 Ruid: uloc-68ed19b3-31-1 Instance: [not set] Reg-Id: 0 Server-Id: 0 Tcpconn-Id: -1 Keepalive: 0 Last-Keepalive: 1760369199 KA-Roundtrip: 0 Last-Modified: 1760369199 } } } Stats: { Records: 2 Max-Slots: 1 } } } } Any ideas on how to make lookup() find the right record or how to properly handle this dynamic instance ID scenario for WebRTC clients? Thank you.

2 2

out of dialog requests
by Robert Boardman 15 Oct '25

15 Oct '25

Hi, I'm trying to send a refer from a rtpengine dtmf event, its mostly working but the uac_req_send always seems to append new tags for the from /to even though I specify the origionals in the . The far end uses the tags and the callid to match the dialogs so these need to be in the refer. Example # REFER to callee xlog("L_INFO", "Sending REFER using from uri $var(to_uri)\n"); $uac_req(method)="REFER"; $uac_req(ruri)="sip:"+$var(to_uriU)+"@"+$var(SourceIP); $uac_req(furi)=$var(from_uri)+";tag="+$var(fromTAG); $uac_req(turi)=$var(to_uri)+";tag="+$var(toTAG); $uac_req(callid)=$var(callid); $uac_req(hdrs)="Refer-To:" + $var(conf_uri2) + "\r\nReferred-By: " + $var(to_uri) + "\r\nContent-Length: 0\r\n\r\n"; uac_req_send(); Is this possible? Thanks for your help Regards Rob Robert Boardman Solution Architect Tel: 03330147908 Email: Robert.Boardman(a)gamma.co.uk This is an email from Gamma Telecom Ltd, trading as “Gamma”. The contents of this email are confidential to the ordinary user of the email address to which it was addressed. This email is not intended to create any legal relationship. No one else may place any reliance upon it, or copy or forward all or any of it in any form (unless otherwise notified). If you receive this email in error, please accept our apologies, we would be obliged if you would telephone our postmaster on +44 (0) 808 178 9652 or email postmaster(a)gamma.co.uk Gamma Telecom Limited, a company incorporated in England and Wales, with limited liability, with registered number 04340834, and whose registered office is at The Scalpel, 18th Floor, 52 Lime Street, London EC3M 7AF and whose principal place of business is at Kings House, Kings Road West, Newbury, Berkshire, RG14 5BY.

4 6

rtpengine. Unknown codecs
by disa_369＠msn.com 14 Oct '25

14 Oct '25

After upgrading minor version Debian 12, Kamailio and rtpengine stopped proxying media traffic. (The combination works exclusively as a SIP proxy.) Systemctl status kamailio and rtpengine is ok (enabled, activating). No configuration errors. Call flow. PBX --> Kamailio\rtpengine ---> Video conference system. Internal audio calls only. When calling, there's silence and the connection hangs up. Found some strange rtpengine logs. Unknown codecs? How is it?-) ``` Oct 09 15:01:14 zaks-sbc01-op rtpengine[1158181]: DEBUG: [83d0bc50a50711f09a58e0071bf41f9b]: [core] --- subscription for media with monologue tag '' (index: 1) Oct 09 15:01:14 zaks-sbc01-op rtpengine[1158181]: INFO: [83d0bc50a50711f09a58e0071bf41f9b]: [core] ------ Media #1 (audio over RTP/AVP) using unknown codec Oct 09 15:01:14 zaks-sbc01-op rtpengine[1158181]: INFO: [83d0bc50a50711f09a58e0071bf41f9b]: [core] --------- Port 10.192.32.185:34704 <> 10.18.4.150:19196, SSRC 0, in 0 p, 0 b, 0 e, 60 ts, out 0 p, 0 b, 0 e Oct 09 15:01:14 zaks-sbc01-op rtpengine[1158181]: INFO: [83d0bc50a50711f09a58e0071bf41f9b]: [core] --------- Port 10.192.32.185:34705 <> 10.18.4.150:19197 (RTCP), SSRC 0, in 0 p, 0 b, 0 e, 60 ts, out 0 p, 0 b, 0 e Oct 09 15:01:14 zaks-sbc01-op rtpengine[1158181]: INFO: [83d0bc50a50711f09a58e0071bf41f9b]: [core] --- Tag '', created 1:00 ago for branch '' Oct 09 15:01:14 zaks-sbc01-op rtpengine[1158181]: DEBUG: [83d0bc50a50711f09a58e0071bf41f9b]: [core] --- subscribed to media with monologue tag 'g6y6ceEKEgSXE8bhChIElxPETPE5hQAq' (index: 1) Oct 09 15:01:14 zaks-sbc01-op rtpengine[1158181]: DEBUG: [83d0bc50a50711f09a58e0071bf41f9b]: [core] --- subscription for media with monologue tag 'g6y6ceEKEgSXE8bhChIElxPETPE5hQAq' (index: 1) Oct 09 15:01:14 zaks-sbc01-op rtpengine[1158181]: INFO: [83d0bc50a50711f09a58e0071bf41f9b]: [core] ------ Media #1 (audio over RTP/AVP) using unknown codec Oct 09 15:01:14 zaks-sbc01-op rtpengine[1158181]: INFO: [83d0bc50a50711f09a58e0071bf41f9b]: [core] --------- Port 10.192.32.185:37950 <> :0 , SSRC 0, in 0 p, 0 b, 0 e, 60 ts, out 0 p, 0 b, 0 e Oct 09 15:01:14 zaks-sbc01-op rtpengine[1158181]: INFO: [83d0bc50a50711f09a58e0071bf41f9b]: [core] --------- Port 10.192.32.185:37951 <> :0 (RTCP), SSRC 0, in 0 p, 0 b, 0 e, 60 ts, out 0 p, 0 b, 0 e ``` Any help? Thx

3 6

SIP Trunk registration In Kamailio
by tanmoykarmakar10＠gmail.com 14 Oct '25

14 Oct '25

I want to register SIP Trunk directly in Kamailio. How can I register the SIP trunk in Kamailio. Please find the below sample SIP trunk details. Network IP 10.2.2.2 Subnet Mask 255.255.255.252 Customer IP 10.3.3.3 Gateway IP 10.1.1.1 SBCIP 10.4.4.4 Username 12345678 Password 1234 Please help me with configuration to register SIP trunk in kamailio.

4 4

set_body and set_reply_body is not working
by msd.mazarei＠gmail.com 14 Oct '25

14 Oct '25

I have setup rtpengine to read and write to specific AVP: ``` modparam("rtpengine", "read_sdp_pv", "$avp(rt_sdp_r)") modparam("rtpengine", "write_sdp_pv", "$avp(rt_sdp_w)") ``` and in RTPMANAGAE route which would be called just before RELAY and on_reply as: ``` route(REMOVE_SECOND_M_LINE); $avp(rt_sdp_w) = $null; if (is_reply()){ remove_body(); set_reply_body("$avp(rt_sdp_r)", "application/sdp"); } else { remove_body(); set_body("$avp(rt_sdp_r)", "application/sdp") } if (!rtpengine_manage($var(flag))){ }) ``` there are some issue: 1. rtpengine is not reading SDP content from AVP for REPLY messages b/c of this I had to remove body and set modified content again 2. rtnengine set_body and set_reply_body is making changes but in bad way specially setting Content-Header instead of 123 to 123123 or similar changes and seems rtpengine set its content to message body with having `Content-Length: 211211211` is there any way to properly modify SIP REPLY MESSAGE with having everything in place (Content-Legnth) withiout malforming sip message?(specially with using rtpengine)

2 2

ndb_redis behavior
by Володимир Іванець 13 Oct '25

13 Oct '25

Hello everyone! Can someone please tell if this is expected behavior and I should remove authentication? I have a Redis cluster with authentication enabled. Kamailio configuration is as follows: modparam("ndb_redis", "server", "name=redis-cluster;addr=redis-redis-cluster ;port=6379;pass=mypassword") modparam("ndb_redis", "init_without_redis", 1) modparam("ndb_redis", "connect_timeout", 1000) modparam("ndb_redis", "cmd_timeout", 1000) modparam("ndb_redis", "cluster", 1) modparam("ndb_redis", "allow_dynamic_nodes", 1) modparam("ndb_redis", "flush_on_reconnect", 0) Kamailio stops request to Redis with "NOAUTH Authentication required" error when it tries to execute redis_cmd("redis-cluster", "HGET cnf:accounts:$AU password", "r"); 4(1630) DEBUG: ndb_redis [redis_client.c:439]: redisc_get_server(): Hash 1969359015 (redis-cluster) 4(1630) DEBUG: ndb_redis [redis_client.c:442]: redisc_get_server(): Entry 1969359015 (redis-cluster) 4(1630) DEBUG: ndb_redis [redis_client.c:446]: redisc_get_server(): Using entry 1969359015 (redis-cluster) 4(1630) DEBUG: ndb_redis [redis_client.c:1033]: redisc_exec(): rsrv->ctxRedis = 0x55563cd13c30 4(1630) DEBUG: ndb_redis [redis_client.c:1039]: redisc_exec(): rsrv->ctxRedis = 0x55563cd13c30 4(1630) DEBUG: ndb_redis [redis_client.c:898]: check_cluster_reply(): Redis replied: "MOVED 1875 10.42.0.36:6379" 4(1630) DEBUG: ndb_redis [redis_client.c:906]: check_cluster_reply(): Port "6379" [4] => 6379 4(1630) DEBUG: ndb_redis [redis_client.c:916]: check_cluster_reply(): Host "10.42.0.36" [10] 4(1630) DEBUG: ndb_redis [redis_client.c:927]: check_cluster_reply(): Name of new connection: 10.42.0.36:6379 4(1630) DEBUG: ndb_redis [redis_client.c:439]: redisc_get_server(): Hash 2703334398 (10.42.0.36:6379) 4(1630) DEBUG: ndb_redis [redis_client.c:442]: redisc_get_server(): Entry 1969359015 (redis-cluster) 4(1630) DEBUG: ndb_redis [redis_client.c:452]: redisc_get_server(): No entry found. 4(1630) DEBUG: ndb_redis [redis_client.c:439]: redisc_get_server(): Hash 2703334398 (10.42.0.36:6379) 4(1630) DEBUG: ndb_redis [redis_client.c:442]: redisc_get_server(): Entry 2703334398 (10.42.0.36:6379) 4(1630) DEBUG: ndb_redis [redis_client.c:446]: redisc_get_server(): Using entry 2703334398 (10.42.0.36:6379) 4(1630) DEBUG: ndb_redis [redis_client.c:595]: redisc_reconnect_server(): rsrv->ctxRedis = (nil) 4(1630) DEBUG: ndb_redis [redis_client.c:628]: redisc_reconnect_server(): rsrv->ctxRedis = 0x55563cd1bce0 4(1630) DEBUG: ndb_redis [redis_client.c:969]: check_cluster_reply(): Connected to the new server with name: 10.42.0.36:6379 4(1630) DEBUG: ndb_redis [redis_client.c:1084]: redisc_exec(): rsrv->ctxRedis = 0x55563cd1bce0 4(1630) DEBUG: ndb_redis [redis_client.c:1090]: redisc_exec(): rsrv->ctxRedis = 0x55563cd1bce0 4(1630) DEBUG: ndb_redis [redis_client.c:1118]: redisc_exec(): rpl->rplRedis->type:6 4(1630) ERROR: ndb_redis [redis_client.c:1120]: redisc_exec(): Redis error:NOAUTH Authentication required. Thank you!

2 5