Re: [Asterisk-Users] chan_sip and Digest realm

[Olle E. Johansson]

James Sizemore wrote:

I am going to change my Digest realm to match my DNS SVR record.
I dug through the code  in chan_sip.c and on line 2748 I found it hard 
coded frown :
 snprintf(tmp, sizeof(tmp), Digest realm=\asterisk\, nonce=\%s\, 
r\anddata);
I'm going to change this to :
snprintf(tmp, sizeof(tmp), Digest realm=\isdn.net\, nonce=\%s\, 
r\anddata);

I looked through the code and this does not look like it will cause me 
any problems.
Has anyone else changed the Digest realm? Did you have any odd problems?
In CVS HEAD there's no a config option in the [general] section of sip.conf
where you can set realm to anything.
The recommendation from RFC3261 is to set the realm to a globally unique
name, your host name or domain depending on implementation. The realm is
the service the user authenticates to. A realm may apply to one or more
servers, as long as the same authentication (username/secret) works.
/O
___
Asterisk-Users mailing list
[EMAIL PROTECTED]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [Asterisk-Users] chan_sip and Digest realm

[James Sizemore]

Olle E. Johansson wrote:

James Sizemore wrote:

Has anyone else changed the Digest realm? Did you have any odd 
problems?
In the chan_sip2 module, I've a setting called realm= in sip.conf
Time to port that over to chan_sip.
No, it doesn't cause any harm. On the contrary, the RFC states that this
should be unique for your service. The password belongs to the realm, not
really the from: domain or your server's name. One server could handle
multiple realms and one user could actually have to authenticate to 
multiple
realms for one call.

Thanks, I see that the patch went into cvs today, I'll pull it out a give
it a test (Not that there is much chance of this patch messing 
any-e-thing up.)

___
Asterisk-Users mailing list
[EMAIL PROTECTED]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users