[OpenSER-Users] Multidomain and in-dialog REFER auth issue

[Klaus Darilion]

Authentication of in-dialog requests in SIP is borken - you can not rely 
on the From/To headers.

klaus

Iñaki Baz Castillo schrieb:
> Hi, I've a multidomain OpenSer and I want to allow REFER (with authenticacion 
> before) just in calls between users of same domain, but it's quite complex:
> 
> - userA at domainA.com INVITE's userB at domainB.com.
> - During the call userA at domainA.com does an in-dialog REFER.
> 
> Because the REFER is in-dialog the message is like:
> 
> --------------------
> REFER sip:userB at 80.98.123.23:5060 SIP/2.0
> From: sip:userA at domainA.com
> To: userB at domainB.com
> Refer-To: ...
> ...
> --------------------
> 
> 
> How can my OpenSer know which domain this REFER goes? of course the "To" 
> header is not valid at all.
> 
> Could be a solution a SQL query to "location" table looking for the URI 
> (sip:userB at 80.98.123.23:5060) and getting the username and domain of this?
> 
> Any other option?
> 
> 
> Thanks a lot.
> 
>