[Kamailio-Devel] [ openser-Bugs-2740437 ] PUBLISH authentication is wrong

Iñaki Baz Castillo ibc at aliax.net
Thu Apr 16 18:54:15 CEST 2009


2009/4/16 Iñaki Baz Castillo <ibc at aliax.net>:
> 2009/4/16 Juha Heinanen <jh at tutpro.com>:
>> Klaus Darilion writes:
>>
>>  > Wouldn't it be better to always derive the realm from the From header -
>>  > because the authorize/challenge function are actually just for
>>  > authentication - and authentication means to authenticate the party
>>  > which sends the request. (actually the problem is even complexer as an
>>  > realm needs not to be equivalent to the domain at all - stupid SIP).
>>
>> i agree.
>
> I don't agree at all. As I said, this would break authentication
> requeriment for thirdy party PUA's.

Well, it could be solved doing:


  if $fu != $ru
     proxy_authorize($fu);

-- 
Iñaki Baz Castillo
<ibc at aliax.net>



More information about the Devel mailing list