Authentication of in-dialog requests in SIP is borken - you can not rely
on the From/To headers.
klaus
IƱaki Baz Castillo schrieb:
Hi, I've a multidomain OpenSer and I want to allow
REFER (with authenticacion
before) just in calls between users of same domain, but it's quite complex:
- userA(a)domainA.com INVITE's userB(a)domainB.com.
- During the call userA(a)domainA.com does an in-dialog REFER.
Because the REFER is in-dialog the message is like:
--------------------
REFER sip:userB@80.98.123.23:5060 SIP/2.0
From: sip:userA@domainA.com
To: userB(a)domainB.com
Refer-To: ...
...
--------------------
How can my OpenSer know which domain this REFER goes? of course the "To"
header is not valid at all.
Could be a solution a SQL query to "location" table looking for the URI
(sip:userB@80.98.123.23:5060) and getting the username and domain of this?
Any other option?
Thanks a lot.