Question on auth-calls
Woof! It is my understanding, that if I set <param name="auth-calls" value="false"/> in a SIP profile, it shouldn't challenge for authentication under any circumstances. However, if an INVITE contains a a Proxy-Authorization header from another proxy, Sofia DOES challenge with a 407. I'm aware one can set accept-blind-auth to work around this, but I'm wondering if my understanding of auth-calls is wrong, or the behavior I'm seeing is wrong. --Woof!
accept-blind-auth is for this scenario.... /b On Jul 10, 2009, at 10:56 AM, Andy Spitzer wrote:
Woof!
It is my understanding, that if I set <param name="auth-calls" value="false"/> in a SIP profile, it shouldn't challenge for authentication under any circumstances.
However, if an INVITE contains a a Proxy-Authorization header from another proxy, Sofia DOES challenge with a 407.
I'm aware one can set accept-blind-auth to work around this, but I'm wondering if my understanding of auth-calls is wrong, or the behavior I'm seeing is wrong.
--Woof!
The way it works by default is that if you send a www-authenticate, we *always* try to process it. HOWEVER, we have a accept-blind-auth sofia profile param (in fact it was invented just for sipX) On Fri, Jul 10, 2009 at 10:56 AM, Andy Spitzer <woof@iwoof.org> wrote:
Woof!
It is my understanding, that if I set <param name="auth-calls" value="false"/> in a SIP profile, it shouldn't challenge for authentication under any circumstances.
However, if an INVITE contains a a Proxy-Authorization header from another proxy, Sofia DOES challenge with a 407.
I'm aware one can set accept-blind-auth to work around this, but I'm wondering if my understanding of auth-calls is wrong, or the behavior I'm seeing is wrong.
--Woof!
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire AIM: anthm MSN:anthony_minessale@hotmail.com <MSN%3Aanthony_minessale@hotmail.com> GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com<PAYPAL%3Aanthony.minessale@gmail.com> IRC: irc.freenode.net #freeswitch FreeSWITCH Developer Conference sip:888@conference.freeswitch.org <sip%3A888@conference.freeswitch.org> iax:guest@conference.freeswitch.org/888 googletalk:conf+888@conference.freeswitch.org<googletalk%3Aconf%2B888@conference.freeswitch.org> pstn:213-799-1400
Woof! On Fri, 10 Jul 2009 12:09:05 -0400, Anthony Minessale <anthony.minessale@gmail.com> wrote:
The way it works by default is that if you send a www-authenticate, we *always* try to process it. HOWEVER, we have a accept-blind-auth sofia profile param (in fact it was invented just for sipX)
Then my understanding was incorrect. Thanks for the clarification. --Woof!
participants (3)
-
Andy Spitzer
-
Anthony Minessale
-
Brian West