17 May
2007
17 May
'07
4:24 p.m.
In pratice,
proxy_authorize function ALWAYS requires INVITE message to have digest
credentials included.
If they lack, proxy_authorize does not check from user into subcriber
table, but sends 407 Authentication Request message: is correct so?
txs,
f.
2007/5/17, SIP <sip(a)arcdiv.com>om>:
Well... if you have an authentication requirement in
your INVITE block,
then you're going to get authentication requests as a response to an
INVITE.
If you understand this, then, well... then I'm just not sure I
understand your question.
N.
flavio wrote:
--
********************************
* (o< ing. Patria Flavio
* //\ phone 0823451358
* V_/_ mobile 3407873357
*
********************************
Yes I do, accordig example in Getting Started
(Chapter 7), in order
to avoid my SER becomes an open relay.
What do you think about?
Thanks,
f.
2007/5/17, SIP <sip(a)arcdiv.com>om>:
Looks like you have an auth request block in your
INVITE block.
Do you?
flavio wrote:
Hi all,
I'm testing Blind Trasfer with my IP Phones, SER and GW, in this
scenario:
AnalogPhone (GW) is the Transferee
IP Phone1, registred to SER, is the Transferor
IP Phone 2, registred to SER, is the Transfer Target
When the Transferor send INVITE to put on hold the Trasferee, SER
reply with 407 Proxy Authentication Requrire, as follow reported:
2007/05/17 12:45:49.370808 10.28.19.124:5060 -> 10.28.19.202:5060
INVITE sip:06XXXXXX15@10.28.19.230 SIP/2.0.
Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954.
Route: <sip:10.28.19.202;ftag=1c1272914830;lr=on>.
From: <sip:06XXXXXX14@10.28.19.202>;tag=9bb7a2279efa8707.
To: <sip:06XXXXXX15@10.28.19.230>;tag=1c1272914830.
Contact: <sip:06XXXXXX14@10.28.19.124;user=phone>.
Supported: replaces.
Call-ID: 127291448221200023114(a)10.28.19.230.
CSeq: 21593 INVITE.
User-Agent: Grandstream BT110 1.0.8.12.
Max-Forwards: 70.
Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE.
Content-Type: application/sdp.
Content-Length: 206.
.
v=0.
o=0660522014 8000 8001 IN IP4 10.28.19.124.
s=SIP Call.
c=IN IP4 0.0.0.0.
t=0 0.
m=audio 5004 RTP/AVP 8 18 0.
a=sendonly.
a=rtpmap:8 PCMA/8000.
a=rtpmap:18 G729/8000.
a=rtpmap:0 PCMU/8000.
a=ptime:20.
#
U 2007/05/17 12:45:49.371204 10.28.19.202:5060 -> 10.28.19.124:5060
SIP/2.0 407 Proxy Authentication Required.
Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954.
From: <sip:06XXXXXX14@10.28.19.202>;tag=9bb7a2279efa8707.
To: <sip:06XXXXXX15@10.28.19.230>;tag=1c1272914830.
Call-ID: 127291448221200023114(a)10.28.19.230.
CSeq: 21593 INVITE.
Proxy-Authenticate: Digest realm="10.28.19.202",
nonce="464c4fa95f251088d01666190944e53313bab22e".
Server: Sip EXpress router (0.9.6 (i386/linux)).
Content-Length: 0.
Warning: 392 10.28.19.202:5060 "Noisy feedback tells: pid=15940
req_src_ip=10.28.19.124 req_src_port=5060
in_uri=sip:0660522015@10.28.19.230 out_uri=sip:0660522015@10.28.19.230
via_cnt==1".
My question is: why SER reply with an authentication request to
INVITE, if the Transferor party is a registred user? Have you any
suggestion about?
I verify user subscribtion in my ser.cfg file as follow:
if (!allow_trusted()) {
if (!proxy_authorize("","subscriber")) {
proxy_challenge("","0");
break;
} else if (!check_from()) {
sl_send_reply("403", "Use From=ID");
break;
};
consume_credentials();
}
Thanks for support,
Flavio