Excuse me but I can't understand.
Take a look to example 3.1.3 "SIP to SIP with multi proxy authentication"
(draft-ietf-sip-call-flows-05)

[EMAIL PROTECTED] sends the INVITE.
I expect that uri parameter in Proxy-Authorization is:
    uri="sip:[EMAIL PROTECTED]"
instead I find
    uri="sip:ss1.wcom.com"
the same value I find in domain parameter in Proxy-Authentication

Please, help me?
Thanks
Lorenzo


F1 INVITE A -> Proxy 1

INVITE sip:[EMAIL PROTECTED] SIP/2.0
Via: SIP/2.0/UDP here.com:5060
From: BigGuy <sip:[EMAIL PROTECTED]>
To: LittleGuy <sip:[EMAIL PROTECTED]>
Call-ID: [EMAIL PROTECTED]
CSeq: 1 INVITE
Contact: <sip:[EMAIL PROTECTED]>
Content-Type: application/sdp
Content-Length: 147

v=0
o=UserA 2890844526 2890844526 IN IP4 here.com
s=Session SDP
c=IN IP4 100.101.102.103
t=0 0
m=audio 49172 RTP/AVP 0
a=rtpmap:0 PCMU/8000


F2 407 Proxy Authorization Required Proxy 1 -> User A

SIP/2.0 407 Proxy Authorization Required
Via: SIP/2.0/UDP here.com:5060
From: BigGuy <sip:[EMAIL PROTECTED]>
To: LittleGuy <sip:[EMAIL PROTECTED]>
Call-ID: [EMAIL PROTECTED]
CSeq: 1 INVITE
Proxy-Authenticate: Digest realm="WorldCom SIP",
domain="sip:ss1.wcom.com",nonce="wf84f1cczx41ae6cbeaea9ce88d359",
opaque="", stale=FALSE, algorithm=MD5
Content-Length: 0


F3 ACK A -> Proxy 1

ACK sip:[EMAIL PROTECTED] SIP/2.0
Via: SIP/2.0/UDP here.com:5060
From: BigGuy <sip:[EMAIL PROTECTED]>
To: LittleGuy <sip:[EMAIL PROTECTED]>
Call-ID: [EMAIL PROTECTED]
CSeq: 1 ACK
Content-Length: 0

F4 INVITE A -> Proxy 1

INVITE sip:[EMAIL PROTECTED] SIP/2.0
Via: SIP/2.0/UDP here.com:5060
From: BigGuy <sip:[EMAIL PROTECTED]>
To: LittleGuy <sip:[EMAIL PROTECTED]>
Call-ID: [EMAIL PROTECTED]
CSeq: 2 INVITE
Contact: <sip:[EMAIL PROTECTED]>
Proxy-Authorization:Digest username="UserA", realm="WorldCom SIP",
 nonce="wf84f1ceczx41ae6cbe5aea9c8e88d359", opaque="",
 uri="sip:ss1.wcom.com", response="42ce3cef44b22f50c6a6071bc8"
Content-Type: application/sdp
Content-Length: 147

v=0
o=UserA 2890844526 2890844526 IN IP4 here.com
s=Session SDP
c=IN IP4 100.101.102.103
t=0 0
m=audio 49172 RTP/AVP 0
a=rtpmap:0 PCMU/8000






____________________Reply Separator____________________
Subject:    Re: [Sip-implementors] Domain and Uri parameter in Digest Au
Author: Jonathan Rosenberg <[EMAIL PROTECTED]>
Date:       1/4/2002 12:28 PM



[EMAIL PROTECTED] wrote:

> Hi,
> 
> Suppose my username is 1234 and my domain is disneyland.com
> When I receive a 401 or 407 message with WWW-Authenticate or
> Proxy-Authenticate
> header without "domain" parameter I set the "uri" parameter with
> sip:[EMAIL PROTECTED]
> 
> uri="sip:[EMAIL PROTECTED]"
> 
> Instead, if i receive the "domain" parameter I have to substitute my uri
> with
> the contents of  domain parameter.
> 
> if      
>     domain="losangeles.com"
> then
>     uri="sip:losangeles.com"
> 
> Is this correct?


No. The uri parameter in the Authorization header is always equal to the 
value in the request uri, which is also used in the digest operation. It 
is unrelated to the domain in the challenge. RFC 2617 is very explicit 
on this one:

digest-uri
      The URI from Request-URI of the Request-Line; duplicated here
      because proxies are allowed to change the Request-Line in transit.



-Jonathan R.




-- 
Jonathan D. Rosenberg, Ph.D.            72 Eagle Rock Avenue
Chief Scientist                         First Floor
dynamicsoft                             East Hanover, NJ 07936
[EMAIL PROTECTED]                 FAX: (973) 952-5050
http://www.jdrosen.net                  PH:  (973) 952-5000
http://www.dynamicsoft.com

_______________________________________________
Sip-implementors mailing list
[EMAIL PROTECTED]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
_______________________________________________
Sip-implementors mailing list
[EMAIL PROTECTED]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors

Reply via email to