13 Jun
2008
13 Jun
'08
6:43 p.m.
In ser-oob.cfg, the route[AUTHENTICATION] function has this code:
# Requests from non-local to local domains should be permitted. # Remove this if you want a walled garden. if (!$f.did) { break; }
I'm guessing that the code is permitting all invites that are addressed to a local destination, regardless of the source of the invite, so that the source is not required to authenticate itself. Is that right?
Also, what is the tersely named $f variable, how does it get initialized, and what is the meaning of the .did member?
Many thanks!
--
Mark Sidell
Partner
Forte, Inc.
919-942-7068
fax 919-969-2844
www.forteinc.com