[SR-Users] Setting up Kamailio as Teams SBC

[Daniel-Constantin Mierla]

Hello,

I can suggest that you run with debug=3 in kamailio.cfg and watch the
logs printed by kamailio in syslog to see what happens.

If you need to look at the traffic sent over the tls connection, load
sipdump module and enable it to write traffic in a file.

Cheers,
Daniel

On 07.07.20 16:11, Роман С. wrote:
> OK, spent some time around tls configuration. OpenSSL shows no error
> now, but dispatcher continues to show me IP or AX.
>
> openssl s_client -showcerts -debug -connect servername.com:5061
> <http://servername.com:5061> -no_ssl2 -bugs -servername 
> servername.com <http://servername.com> -CAfile /root/intermediate.crt
> <goodgoodgoodnoerrors>
>
> kamalio.cfg
> ....
> ####### Routing Logic ########
>
> event_route[tm:local-request] {
>
> Â  Â  Â  Â  if(is_method("OPTIONS") && $ru =~ "pstnhub.microsoft.com
> <http://pstnhub.microsoft.com>") {
> Â  Â  Â  Â  Â  Â  Â  Â append_hf("Contact:
> <sip:servername.com:5061;transport=tls>\r\n");
> Â  Â  Â  Â  }
> Â  Â  Â  Â  xlog("L_INFO", "Sent out tm request: $mb\n");
> }
>
> request_route {
> ...
> Â  Â  Â  Â  if (is_method("INVITE|SUBSCRIBE")) {
> Â  Â  Â  Â  Â  Â  Â  Â 
> record_route_preset("servername.com:5061;transport=tls", "my_ip:5060");
> Â  Â  Â  Â  Â  Â  Â  Â  #record_route();
> Â  Â  Â  Â  }
> ...
> }
>
> route[WITHINDLG] {
> Â  Â  Â  Â  if (!has_totag()) return;
>
> Â  Â  Â  Â  # sequential request withing a dialog should
> Â  Â  Â  Â  # take the path determined by record-routing
> Â  Â  Â  Â  if (loose_route()) {
> Â  Â  Â  Â  Â  Â  Â  Â  route(DLGURI);
> Â  Â  Â  Â  Â  Â  Â  Â  if (is_method("BYE")) {
> Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  setflag(FLT_ACC); # do accounting ...
> Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  setflag(FLT_ACCFAILED); # ... even if the
> transaction fails
> Â  Â  Â  Â  Â  Â  Â  Â  } else if ( is_method("ACK") ) {
> Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  # ACK is forwarded statelessly
> Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  route(NATMANAGE);
> Â  Â  Â  Â  Â  Â  Â  Â  } else if ( is_method("NOTIFY") ) {
> Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  # Add Record-Route for in-dialog NOTIFY as per
> RFC 6665.
> Â  Â  Â  Â  Â  Â  Â  Â 
> record_route_preset("servername.com:5061;transport=tls", "my_ip:5060");
> Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  #record_route();
> Â  Â  Â  Â  Â  Â  Â  Â  }
> Â  Â  Â  Â  Â  Â  Â  Â  route(RELAY);
> Â  Â  Â  Â  Â  Â  Â  Â  exit;
> Â  Â  Â  Â  }
>
> Teams web-interface shows inactive. Kamcmd's same as previous output.
> What do I do :(?
>
> вт, 7 июл. 2020 г. в 12:43, Роман С. <highlandy at gmail.com
> <mailto:highlandy at gmail.com>>:
>
>     Hello.
>     I'm trying to set up Kamailio as SBC for Teams using
>     https://skalatan.de/en/blog/kamailio-sbc-teams.
>     Setup is completely default (except things mentioned at article),
>     but I use wildcard certificate for TLS. Well, I can't even pass
>     dispatcher:
>
>     kamcmd dispatcher.list | egrep "RI|FLAG"
>     Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  URI:
>     sip:sip.pstnhub.microsoft.com
>     <http://sip.pstnhub.microsoft.com>;transport=tls
>     Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  FLAGS: IP
>     Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  PRIORITY: 3
>     Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  URI:
>     sip:sip2.pstnhub.microsoft.com
>     <http://sip2.pstnhub.microsoft.com>;transport=tls
>     Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  FLAGS: IP
>     Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  PRIORITY: 2
>     Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  URI:
>     sip:sip3.pstnhub.microsoft.com
>     <http://sip3.pstnhub.microsoft.com>;transport=tls
>     Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  FLAGS: IP
>     Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  Â  PRIORITY: 1
>
>     Where do I start to dig?
>
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Funding: https://www.paypal.me/dcmierla

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200707/01060216/attachment.html>