Kamailio 5.0.8 | authentification issue only with TCP/TLS - sr-users

26 Aug 2019

Dear all,

I have a kamailio running in version 5.0.8 and since fee weeks we have an issue with
different users connected in TCP or TLS, sometimes authorization like for REGISTER are
rejected and after a moment (can be few minute or hours) it work again and of course no
change was done in the password ....

We see this issue with different device, snom swyx, ...  and on UDP we have no issue.

I can see that when the Register is rejected it's with the error -2, so wrong
password...

# Authentication route
route[AUTH] {
        if (is_method("REGISTER"))
        {
                # authenticate requests
                if (!auth_check("$fd", "subscriber", "1"))
{

                        switch($retcode) {
                                case -1:
                                        sl_send_reply("503","Service not
available");
                                        exit;
                                case -2:
                                         xlog("L_WARN", "auth error -2
username $au - src ip: $si \n");
                                        auth_challenge("$fd", "0");
                                        exit;

I have attached an example of a trace where we can see a first REGISTER accepted and  less
than 2 minutes after a new one is rejected. ( in between they is a REGISTER without any
Authorization header)

Any idea ?

BR

Laurent