2009/1/5 Andrew Rechenberg Lists <flux...@resurgent.com>:
>> > There are some other things that need to get added to the header for
>> > OCS. Can I just use TAGs to add those? Can I add those tags in
>> > nua_authenticate?
>>
>> That depends on the things to add? You can add SIP headers with
>> nua_authenticate(), but the extra tags are not passed to auc*
>> functions.
>
> Here is a valid REGISTER with Authorization header for OCS2007:
>
> http://dpaste.com/hold/103780/
>
> Could I add the "Supported" and "ms-keep-alive" portions of that header?
Sure, SIPTAG_SUPPORTED_STR("gruu-10, adhoclist"),
SIPTAG_HEADER_STR("ms-keep-alive: uac;hop-hop=yes")
> According to page 35 of the MS-SIPAE document
> (http://msdn.microsoft.com/en-us/library/cc431510.aspx), the client
> "calls the NTLM authentication protocol implementation with [the user's]
> credentials (user name, domain, and password) and Datagram, Identify,
> and Integrity parameters, to initialize the security context and
> generate NEGOTIATE_MESSAGE. Because in the current NTLM implementation,
> this message is not generated for datagram NTLM contexts, the output
> from NTLM is an empty buffer."
>
> What all that means is that the first re-REGISTER sent back to the
> server has an empty gssapi-data parameter in the Authorization header.
>
> Is there any way to do that with the current nua_authenticate code or
> will I have to hack that in order to get it to resend the REGISTER with
> an empty gssapi-data param?
You need 3 request-responses for authentication? Or should we include
something in the first REGISTER. Nua should retry with new
auc_authorize results if auc_challenge returns something > 0.
> Oh, another thing, should sip->sip_www_authenticate->au_next contain the
> next WWW-Authenticate header if there are multiple authenticate headers?
> Because in my case the NTLM header is the only one in the sip pointer;
> au_next is null.
Yes, if there are several WWW-Authenticate challenges they are linked
via au_next.
--
Pekka.Pessi mail at nokia.com
------------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It is the best place to buy or sell services for
just about anything Open Source.
http://p.sf.net/sfu/Xq1LFB
_______________________________________________
Sofia-sip-devel mailing list
Sofia-sip-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sofia-sip-devel
