[SR-Users] SIP Auth Realm - From domain or Request domain ?

[Alex Balashov]

‎Hello,

There is standards-based support for the notion that the "identity" of the source of an INVITE request is equal to the value of the From URI, much as the To header indicates the AOR to register in a REGISTER request.

However, a digest challenge realm can be whatever you like. The choice of $fd for authentication realm is based on the fact that most UAs will populate the target SIP domain in the domain of From. For instance, most end-user type endpoints, when configured to register and send calls to 'sip.evaristesys.com', will put that domain in the From URI. Some won't, however, and in that case, as your example typifies, they are most apt to use their local IP.

Therefore, you can make the realm whatever you like. You can force it using a static value like 'sip.evaristesys.com'. We commonly use $Ri, the IP address of the server interface on which the request was received, for challenges. 

So, I don't know that there is any real consensus or standard behaviour here. Defining the realm is up to the challenging proxy or UAS. Kamailio ships with $fd because it's a reasonable default given what was stated above. You should feel comfortable using whatever realm you like.

Hope that helps,

-- Alex
‎
--
Alex Balashov | Principal | Evariste Systems LLC
303 Perimeter Center North, Suite 300
Atlanta, GA 30346
United States

Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct)
Web: http://www.evaristesys.com/, http://www.csrpswitch.com/

Sent from my BlackBerry.
  Original Message  
From: jay binks
Sent: Thursday, June 4, 2015 02:53
To: Kamailio (SER) - Users Mailing List
Reply To: Kamailio (SER) - Users Mailing List
Subject: [SR-Users] SIP Auth Realm - From domain or Request domain ?