[Serusers] 407 Proxy Authentication Required to a subscribed user

[flavio]

Hi all,
I'm testing Blind Trasfer with my IP Phones, SER and GW, in this scenario:

AnalogPhone (GW) is the Transferee
IP Phone1, registred to SER, is the Transferor
IP Phone 2, registred to SER, is the Transfer Target

When the Transferor send INVITE to put on hold the Trasferee, SER
reply with 407 Proxy Authentication Requrire, as follow reported:

 2007/05/17 12:45:49.370808 10.28.19.124:5060 -> 10.28.19.202:5060
INVITE sip:06XXXXXX15 at 10.28.19.230 SIP/2.0.
Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954.
Route: <sip:10.28.19.202;ftag=1c1272914830;lr=on>.
From: <sip:06XXXXXX14 at 10.28.19.202>;tag=9bb7a2279efa8707.
To: <sip:06XXXXXX15 at 10.28.19.230>;tag=1c1272914830.
Contact: <sip:06XXXXXX14 at 10.28.19.124;user=phone>.
Supported: replaces.
Call-ID: 127291448221200023114 at 10.28.19.230.
CSeq: 21593 INVITE.
User-Agent: Grandstream BT110 1.0.8.12.
Max-Forwards: 70.
Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE.
Content-Type: application/sdp.
Content-Length: 206.
.
v=0.
o=0660522014 8000 8001 IN IP4 10.28.19.124.
s=SIP Call.
c=IN IP4 0.0.0.0.
t=0 0.
m=audio 5004 RTP/AVP 8 18 0.
a=sendonly.
a=rtpmap:8 PCMA/8000.
a=rtpmap:18 G729/8000.
a=rtpmap:0 PCMU/8000.
a=ptime:20.

#
U 2007/05/17 12:45:49.371204 10.28.19.202:5060 -> 10.28.19.124:5060
SIP/2.0 407 Proxy Authentication Required.
Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954.
From: <sip:06XXXXXX14 at 10.28.19.202>;tag=9bb7a2279efa8707.
To: <sip:06XXXXXX15 at 10.28.19.230>;tag=1c1272914830.
Call-ID: 127291448221200023114 at 10.28.19.230.
CSeq: 21593 INVITE.
Proxy-Authenticate: Digest realm="10.28.19.202",
nonce="464c4fa95f251088d01666190944e53313bab22e".
Server: Sip EXpress router (0.9.6 (i386/linux)).
Content-Length: 0.
Warning: 392 10.28.19.202:5060 "Noisy feedback tells:  pid=15940
req_src_ip=10.28.19.124 req_src_port=5060
in_uri=sip:0660522015 at 10.28.19.230 out_uri=sip:0660522015 at 10.28.19.230
via_cnt==1".

My question is: why SER reply with an authentication request to
INVITE, if the Transferor party is a registred user? Have you any
suggestion about?

I verify user subscribtion in my ser.cfg file as follow:

if (!allow_trusted()) {
if (!proxy_authorize("","subscriber")) {
proxy_challenge("","0");
break;
} else if (!check_from()) {
sl_send_reply("403", "Use From=ID");
break;
};
consume_credentials();
}

Thanks for support,

Flavio


-- 
********************************
* (o<     ing. Patria Flavio
* //\      phone 0823451358
* V_/_  mobile 3407873357
*
********************************