[SR-Users] Kamailio 5.0.8 | authentification issue only with TCP/TLS

[Laurent Schweizer]

Dear all,

I have a kamailio running in version 5.0.8 and since fee weeks we have an issue with different users connected in TCP or TLS, sometimes authorization like for REGISTER are rejected and after a moment (can be few minute or hours) it work again and of course no change was done in the password ....

We see this issue with different device, snom swyx, ...  and on UDP we have no issue.

I can see that when the Register is rejected it's with the error -2, so wrong password...

# Authentication route
route[AUTH] {
        if (is_method("REGISTER"))
        {
                # authenticate requests
                if (!auth_check("$fd", "subscriber", "1")) {

                        switch($retcode) {
                                case -1:
                                        sl_send_reply("503","Service not available");
                                        exit;
                                case -2:
                                         xlog("L_WARN", "auth error -2 username $au - src ip: $si \n");
                                        auth_challenge("$fd", "0");
                                        exit;


I have attached an example of a trace where we can see a first REGISTER accepted and  less than 2 minutes after a new one is rejected. ( in between they is a REGISTER without any Authorization header)

Any idea ?

BR

Laurent
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20190826/d82a531f/attachment.html>