[SR-Users] sip digest authentication

[eyas barhouk]

Dear Daniel
appreciate your kind reply ..
After updating the configuration from HSS side to support the SIP-Digest,
i found the result as following :

  1.  when the register message passed form the s-cscf to the hss and in the diameter trace I found the

            “SIP-AUTHENTICATION-SCHEME” in the MAR request as “HSS-Selected”

  1.  After that the HSS send MAA message “DIAMETER-SUCCESS" with auth schema "SIP-DIGEST  ”
  2.  S-cscf reply to the user with "401 unauthorized - challenge UE "
  3.  on the second register S-cscf reply with the message “Forbidden – private  identity not found (Authorization : username) and the registration fails.

So i am Still unable to register successfully with the SIP-digest schema.
could anyone guide me please to solve this issue or where to start ??

thanks in advance

________________________________
From: Daniel-Constantin Mierla <miconda at gmail.com>
Sent: Monday, June 11, 2018 6:37 AM
To: eyas barhouk; Kamailio (SER) - Users Mailing List
Subject: Re: [SR-Users] sip digest authentication


Then (not being an IMS user, though), the error message you received from HSS indicated that it doesn't support this auth scheme, so either you need to configure something on HSS to enable it or that HSS simply doesn't implement it.

Cheers,
Daniel

On 08.06.18 17:24, eyas barhouk wrote:
thanks for your replay
yes i need to deploy it on IMS



Sent from my Samsung Galaxy smartphone.


-------- Original message --------
From: Daniel-Constantin Mierla <miconda at gmail.com><mailto:miconda at gmail.com>
Date: 08/06/2018 12:31 pm (GMT+02:00)
To: "Kamailio (SER) - Users Mailing List" <sr-users at lists.kamailio.org><mailto:sr-users at lists.kamailio.org>, eyas barhouk <eyas37 at hotmail.com><mailto:eyas37 at hotmail.com>
Subject: Re: [SR-Users] sip digest authentication


Hello,

do you need it in an IMS deployment? If not, you should look at auth and auth_db modules instead.

Cheers,
Daniel

On 07.06.18 21:45, eyas barhouk wrote:

Hello dears



I’m trying to setup Kamailio with sip digest authentication scheme by using  the following configuration from s-cscf side :



modparam("ims_auth", "registration_default_algorithm", "HSS-Selected")



and the result was as following :

  1.  when the register message passed form the s-cscf to the hss and in the diameter trace I found the

“SIP-AUTHENTICATION-SCHEME” in the MAR request as “Digest-MD5”

  1.  After that the HSS send MAA message with “DIAMETER-ERROR-AUTH-SCHEME-NOT-SUPPORTED”
  2.  S-cscf replay with the message “Forbidden – privet identity not found (Authorization : username)”



So based on that could any one tell where was my mistake or how can I setup Kamailio with SIP-DIGEST scheme



Thanks





_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users at lists.kamailio.org<mailto:sr-users at lists.kamailio.org>
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users



--
Daniel-Constantin Mierla -- www.asipto.com<http://www.asipto.com>
www.twitter.com/miconda<http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda<http://www.linkedin.com/in/miconda>
Kamailio World Conference -- www.kamailioworld.com<http://www.kamailioworld.com>


--
Daniel-Constantin Mierla -- www.asipto.com<http://www.asipto.com>
www.twitter.com/miconda<http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda<http://www.linkedin.com/in/miconda>
Kamailio World Conference -- www.kamailioworld.com<http://www.kamailioworld.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20180611/ef5c73f7/attachment.html>