[SR-Users] Kamailio 5.0.8 | authentification issue only with TCP/TLS

[Laurent Schweizer]

Wireshark was missing .

From: Laurent Schweizer
Sent: lundi, 26 août 2019 10:25
To: 'Kamailio (SER) - Users Mailing List' <sr-users at lists.kamailio.org>
Subject: Kamailio 5.0.8 | authentification issue only with TCP/TLS

Dear all,

I have a kamailio running in version 5.0.8 and since fee weeks we have an issue with different users connected in TCP or TLS, sometimes authorization like for REGISTER are rejected and after a moment (can be few minute or hours) it work again and of course no change was done in the password ....

We see this issue with different device, snom swyx, ...  and on UDP we have no issue.

I can see that when the Register is rejected it's with the error -2, so wrong password...

# Authentication route
route[AUTH] {
        if (is_method("REGISTER"))
        {
                # authenticate requests
                if (!auth_check("$fd", "subscriber", "1")) {

                        switch($retcode) {
                                case -1:
                                        sl_send_reply("503","Service not available");
                                        exit;
                                case -2:
                                         xlog("L_WARN", "auth error -2 username $au - src ip: $si \n");
                                        auth_challenge("$fd", "0");
                                        exit;


I have attached an example of a trace where we can see a first REGISTER accepted and  less than 2 minutes after a new one is rejected. ( in between they is a REGISTER without any Authorization header)

Any idea ?

BR

Laurent
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20190826/33c565e9/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Example_Swyx_119193_90713621581.zip
Type: application/x-zip-compressed
Size: 1273 bytes
Desc: Example_Swyx_119193_90713621581.zip
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20190826/33c565e9/attachment.bin>