In ser-oob.cfg, the route[AUTHENTICATION] function has this code:
# Requests from non-local to local domains should be permitted.
# Remove this if you want a walled garden.
if (!$f.did) {
break;
}
I'm guessing that the code is permitting all invites that are
addressed to a local destination, regardless of the source of the
invite, so that the source is not required to authenticate itself. Is
that right?
Also, what is the tersely named $f variable, how does it get
initialized, and what is the meaning of the .did member?
Many thanks!
--
Mark Sidell
Partner
Forte, Inc.
919-942-7068
fax 919-969-2844
www.forteinc.com