[Serusers] www_challange and proxy_challange

[Klaus Darilion]

Chris St Denis wrote:

> www_authorize/www_challenge should be used in register. 
> proxy_authorize/proxy_challenge in invite.
> 
> I don't see any need for the www_authorize in invite and I don't think any
> messages other than register and invite support authentication.

All SIP messages except CANCEL can be challenged. But due to broken SIP 
clients it is sometimes better to not authenticate BYE and ACK.

regards
klaus
> -----Original Message-----
> From: serusers-bounces at iptel.org [mailto:serusers-bounces at lists.iptel.org] On
> Behalf Of Thomas Britis
> Sent: Tuesday, August 23, 2005 12:16 PM
> To: serusers at lists.iptel.org
> Subject: [Serusers] www_challange and proxy_challange
> 
> Hi all,
> 
> 	Is it sane to use:
> 
> if (uri==myself) {
> 	if (method=="REGISTER") {
> 		if (!www_authorize("", "subscriber")) {
> 			www_challenge("", "0");
> 			break;
> 		};
> 	} else {
> 		if (!www_authorize("", "subscriber")) {
> 			if (!proxy_authorize("", "subscriber")) {
> 				proxy_challenge("", "0");
> 				break;
> 			};
> 		};
> 	};
> };
> 
> 	Or anything here appears to be wrong ?
> 
> 	Thank you.