[SR-Users] [sr-dev] MSRP relay authentication

[Daniel-Constantin Mierla]

Hello,

just remembered about this one ...

hmm, I would say now that the right method would be AUTH, not MSRP, but 
as you pointed, in SIP and HTTP the method is the first token in 
request. I guess you had no chance to test with some client or look at 
specs to see if they clarify somehow.

In both cases, the method seems to be static anyhow, either AUTH or MSRP 
(iirc, the authentication is done only for AUTH). Both have the same 
length, so a quick hack would be to replace internally MSRP with AUTH 
for this case. But probably the safest is to extend the auth api with a 
function that takes the method as parameter, which is eventually used 
from inside msrp module.

Probably before the next release I will put some efforts in this module, 
as the interest on it seems to increase, one of the goals being to add 
an internal hash table to track the connections - it should bring some 
performance improvement versus using htable in config...

Cheers,
Daniel

On 10/19/12 3:58 PM, Peter Dunkley wrote:
> Hi,
>
> MSRP AUTH requests must be authenticated using HTTP Digest 
> authentication.  Part of the concatenated data when doing this 
> authentication is the method name.  Because of the way MSRP requests 
> are formatted, the part of the request-line that would contain the 
> method name in HTTP or SIP requests is always MSRP. The MSRP method 
> name (AUTH in this case) is at the end of the request-line.  When 
> Kamailio converts an MSRP request to SIP it has a method name of MSRP.
>
> This means that when Kamailio authenticates an MSRP request it uses 
> "MSRP" as the method name, not the actual MSRP method name (AUTH).
>
> Is this correct?
>
> Should MSRP requests be authenticated with a method name of "MSRP" 
> (which kind-of makes sense as this is the string at the start of the 
> MSRP request line - which is where the method names are in HTTP and 
> SIP) or should the MSRP method name of "AUTH" be used?
>
> If it is the later, does anyone know of an easy way to add this to 
> Kamailio?
>
> Regards,
>
> Peter
>
> -- 
> Peter Dunkley
> Technical Director
> Crocodile RCS Ltd
>
>
>
> _______________________________________________
> sr-dev mailing list
> sr-dev at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev

-- 
Daniel-Constantin Mierla - http://www.asipto.com
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Kamailio Advanced Training, Berlin, Nov 5-8, 2012 - http://asipto.com/u/kat
Kamailio Advanced Training, Miami, USA, Nov 12-14, 2012 - http://asipto.com/u/katu

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20121025/a0d2112b/attachment.htm>