5 Jun
2008
5 Jun
'08
6:45 p.m.
Hi!
Do you have the domain hardcoded in the authenticate function? If not
openser tries to detect it from the from header (anonymous.invalid) and
thus may not find the authorization header.
regards
klaus
Iñaki Baz Castillo schrieb:
Hi, when I do a call with hiddn callerid from my
Twinkle it sends an INVITE
with:
-----------
INVITE sip:1414@my_domain.net SIP/2.0
From: "Anonymous" <sip:anonymous@anonymous.invalid>;tag=emirn
Privacy: id
P-Preferred-Identity: "IBC" <sip:ibc@my_domain.net>
-----------
and of course my Openser asks Twinkle for authentication:
-----------
SIP/2.0 407 Proxy Authentication Required
Proxy-Authenticate: Digest realm="my_domain.net",
nonce="4838005d57e5ee0a1f96430d63696fe1407ef93e", qop="auth"
-----------
and I see the $rc code of "proxy-authentication()" is -4 (no credentials).
So my Twinkle sends a correct INVITE (CSeq + 1 and "Proxy-Authorization"
header):
-----------
INVITE sip:1414@my_domain.net SIP/2.0
From: "Anonymous" <sip:anonymous@anonymous.invalid>;tag=emirn
Privacy: id
P-Preferred-Identity: "IBC" <sip:ibc@my_domain.net>
Proxy-Authorization: Digest username="ibc", realm="mt_domain.net",
nonce="4838005d57e5ee0a1f96430d63696fe1407ef93e",
uri="sip:1414@my_domain.net",
response="061d82967778669a01e53d168f2da93b",
algorithm=MD5, cnonce="9n7ln49l46", qop=auth, nc=00000001
-----------
But "proxy-authentication()" replies again with -4 (no credentials).
-----------
SIP/2.0 407 Proxy Authentication Required
Proxy-Authenticate: Digest realm="my_domain.net",
nonce="4838005d57e5ee0a1f96430d63696fe1407ef93e", qop="auth"
-----------
Why? Obviously the INVITE **does include** Proxy-Authorization.
Maybe RC3261 says that a server must not challenge for authentication a user
with From "Anonymous" <sip:anonymous@anonymous.invalid> ?
Of course authentication works properly when not hidding callerid.
Thanks for any explanation.