[Users] UAC module use and REGISTER problem

[Bogdan-Andrei Iancu]

Hi Christophe,

the contact header has nothing to do with the authentication process. 
Contact describe the IP location of the device, while credentials 
describe the auth access.

so, the contact should not be changed at all - of course this does not 
rule out the possibility for some servers to implement some very strange 
auth checks ;).

regarding the point 2) - there is no standard policy if a user is 
allowed to place calls when not registered. Logically I would say is 
should be no dependency between (as time you are able to authenticate 
both INVITEs and REGISTERs) - the registration process is related to 
incoming calls and it should not restrict the ability to place outbound 
calls.....but again, it is a matter of policy....

better ask the provider about this.

regards,
bogdan

Christophe Irles wrote:

> Hi,
>
>       I'm using UAC module in order to centralized authentication when
>       I need to use an external proxy server to call PSTN numbers. To
>       use it, I use a unique tuple login/pwd/domain
>
>       The environment is:
>       My openser handles the domain: "myopenserdomain.com"
>       For each INVITE or REGISTER of SIP client of this domain, I
>       force the authentication
>       The external proxy handles the domain "externaldomain.com"
>
>       Now I have two questions:
>       1) before to send an INVITE to the external proxy, must I change
>       the contact header with the correct information of the tuple
>       login/pwd/domain ? Or I must wait the 401 or 407 message before
>       ? In fact I tests several external proxy. Some are waiting a
>       contact header with the information of the tuple and some don't.
>       What is the correct way to do this ?
>
>       2) Some of this external proxy accept only my INVITE (with or
>       without contact header modified) if I registered first on it ! I
>       receive 403 message in this situation. But I don't know how to
>       REGISTER first since I don't find any openser module to that …
>       How can I handle this situation ?
>
> Thanks,
> Regards,
> Christophe
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Users mailing list
>Users at openser.org
>http://openser.org/cgi-bin/mailman/listinfo/users
>  
>