----- Luigi Rizzo <[EMAIL PROTECTED]> wrote:
> I am not sure how to handle this. Maybe i miss that, but what's wrong
> in using the "username" entry in the Proxy-Authorization: line
> to lookup the matching entry in the users list ?

This is a design problem with the way that Asterisk handles SIP authentication. 
It should be domain-based, but it is not.

The simple answer to your question is: we need to know what user it is before 
we have asked for authentication, so we don't have the Proxy-Authorization 
information yet.

There are two options: either request authentication for all incoming INVITEs, 
or request authentication based on the target URI being requested and the 
domain of the requestor (this is 'domain based' authentication).

-- 
Kevin P. Fleming
Senior Software Engineer
Digium, Inc.

_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --

asterisk-dev mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-dev

Reply via email to