Problem with "407 Proxy Authorization Required" in IMS: Missing "Authentication domain"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I'm not sure what caused the 480 response, but "domain" parameter is
is not part of Authorization/Proxy-Authorization header specification.
That's why you don't see it there.

 -benny

On Mon, Nov 2, 2009 at 7:57 PM, segalion <segalion at gmail.com> wrote:
> I have found in pjsip code a domain field in
> \pjproject-1.4.5\pjsip\include\pjsip\sip_auth_msg.h
>
> /**
> ?* This structure describes authentication challenge used in
> Proxy-Authenticate
> ?* or WWW-Authenticate for digest authentication scheme.
> ?*/
> struct pjsip_digest_challenge
> {
> ??? pj_str_t??? realm;??? ??? /**< Realm for the challenge.??? */
> ??? pjsip_param??? other_param;??? /**< Other parameters.??? ??? */
> ??? pj_str_t??? domain;??? ??? /**< Domain.??? ??? ??? */
> ??? pj_str_t??? nonce;??? ??? /**< Nonce challenge.??? ??? */
> ??? pj_str_t??? opaque;??? ??? /**< Opaque value.??? ??? */
> ??? int??? ??? stale;??? ??? /**< Stale parameter.??? ??? */
> ??? pj_str_t??? algorithm;??? /**< Algorithm parameter.??? */
> ??? pj_str_t??? qop;??? ??? /**< Quality of protection.??? */
> };
>
> If any knows how it work?
>
>
> ---------- Forwarded message ----------
> From: segalion <segalion@xxxxxxxxx>
> Date: 2009/11/2
> Subject: Problem with "407 Proxy Authorization Required" in IMS: Missing
> "Authentication domain"
> To: pjsip at lists.pjsip.org
>
>
> I was trying pjsua (1.4.5) with an IMS system, and I have a problem making
> outgoing calls, because IMS responds with 407 Proxy Authorization Required:
>
> [extract from wireshark inside 407 Proxy Authorization Required IMS response
> packet]
> ??????? Proxy-Authenticate: Digest
> realm="mydomain.net",domain="sip:mydomain.net",nonce="c803a53ff76b7e11d8615f0015adc4e2",stale=false,qop="auth",algorithm=MD5
> ??????????? Authentication Scheme: Digest
> ??????????? Realm: "mydomain.net"
> ??????????? Authentication Domain: "sip:domain.net"
> ??????????? Nonce Value: "c803a53ff76b7e11d8615f0015adc4e2"
> ??????????? Stale Flag: false
> ??????????? QOP: "auth"
> ??????????? Algorithm: MD5
>
> and pjsua make the second invite with proper MD5 authentication, but without
> "Authentication domain" field:
> [extract from wireshark pjsua Invite with MD5 auth]
>
> ??????? Authorization: Digest username="segalion at mydomain.es",
> realm="mydomain.net", nonce="", uri="sip:999999999 at mydomain.es", response=""
> ??????????? Authentication Scheme: Digest
> ??????????? Username: "segalion at mydomain.es"
> ??????????? Realm: "mydomain.net"
> ??????????? Nonce Value: ""
> ??????????? Authentication URI: "sip:999999999 at mydomain.es"
> ??????????? Digest Authentication Response: ""
> ??????? k: replaces, 100rel, timer, norefersub
> ??????? x: 1800
> ??????? Min-SE: 90
> ??????? User-Agent: PJSUA v1.4.5/i686-pc-mingw32
> ??????? [truncated] Proxy-Authorization: Digest
> username="segalion at mydomain.es", realm="mydomain.net",
> nonce="c803a53ff76b7e11d8615f0015adc4e2", uri="sip:999999999 at mydomain.es",
> response="9bd8fc0a1488f95f51df5aff69fc3c4a", algorithm=M
> ??????????? Authentication Scheme: Digest
> ??????????? Username: "segalion at mydomain.es"
> ??????????? Realm: "mydomain.net"
> ??????????? Nonce Value: "c803a53ff76b7e11d8615f0015adc4e2"
> ??????????? Authentication URI: "sip:999999999 at mydomain.es"
> ??????????? Digest Authentication Response:
> "9bd8fc0a1488f95f51df5aff69fc3c4a"
> ??????????? Algorithm: MD5
> ??????????? CNonce Value: "538f092c348f485cb882e34cb35924c5"
> ??????????? QOP: auth
> ??????????? Nonce Count: 00000001
>
>
> As you can see pjsua miss "Authentication Domain", so IMS is not abble to
> finish the call (responds with 480 Temporaly not available).
>
> Please help me if this is a bug, or not standard field, or how to change
> pjsua code to support this...
>
> Thanks in advance..
>
> PD: Finally, after a hard work, I could integrate voiceage g729 in pjsua
> w32-mingw enviroment!!!.
> Now, I need to solve this to test with IMS.
>
> Thanks in advance, and please help me with this....
>
>
>
>
>
> _______________________________________________
> Visit our blog: http://blog.pjsip.org
>
> pjsip mailing list
> pjsip at lists.pjsip.org
> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>
>



[Index of Archives]     [Asterisk Users]     [Asterisk App Development]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [Linux API]
  Powered by Linux