Ya, Thanks for more clarification. I do was taking about the response to a challenge. I do missed the fact that in challenge the qop-value must remain in quotes. Regards Ajit
-----Original Message----- From: Attila Sipos [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 08, 2006 4:45 PM To: Ajit Kumar; [EMAIL PROTECTED]; [email protected] Subject: RE: [Sip-implementors] Regarding the qop parameter in response tothe407 Proxy Authentication. OK, let's clear this up. Maybe I didn't read the original question correctly. Any WWW-Authenticate or Proxy-Authenticate header with the qop MUST have the qop-value surrounded by quotes: Proxy-Authenticate = "Proxy-Authenticate" HCOLON challenge WWW-Authenticate = "WWW-Authenticate" HCOLON challenge challenge = ("Digest" LWS digest-cln *(COMMA digest-cln)) / other-challenge other-challenge = auth-scheme LWS auth-param *(COMMA auth-param) digest-cln = realm / domain / nonce / opaque / stale / algorithm / qop-options / auth-param qop-options = "qop" EQUAL LDQUOT qop-value *("," qop-value) RDQUOT qop-value = "auth" / "auth-int" / token Any Authorization or Proxy-Authorization header with a message-qop is not allowed quotes. Proxy-Authorization = "Proxy-Authorization" HCOLON credentials Authorization = "Authorization" HCOLON credentials credentials = ("Digest" LWS digest-response) / other-response digest-response = dig-resp *(COMMA dig-resp) dig-resp = username / realm / nonce / digest-uri / dresponse / algorithm / cnonce / opaque / message-qop / nonce-count / auth-param message-qop = "qop" EQUAL qop-value So, in summary, if you're using a Proxy-Authenticate or WWW-Authenticate header then you must ALWAYS uses quotes for the qop="whatever" bit. The number of values is irrelevant. However, the Authorization or Proxy-Authorization header, you don't use quotes, so you have qop=whatever. Regards, Attila >> -----Original Message----- >> From: Ajit Kumar [mailto:[EMAIL PROTECTED] >> Sent: 08 February 2006 10:42 >> To: Attila Sipos; [EMAIL PROTECTED]; >> [email protected] >> Subject: RE: [Sip-implementors] Regarding the qop parameter >> in response >> tothe407 Proxy Authentication. >> >> >> No I don't think so, quotes are only required if we are providing >> multiple values, if in authentication response we are sending only >> option than we need not use double quotes. I don't know if its >> implementation specific or not but I have seen the same. >> Though it will always be right if we are using double quotes. >> >> Regards >> >> Ajit >> >> >> -----Original Message----- >> From: Attila Sipos [mailto:[EMAIL PROTECTED] >> Sent: Wednesday, February 08, 2006 3:35 PM >> To: Ajit Kumar; [EMAIL PROTECTED]; >> [email protected] >> Subject: RE: [Sip-implementors] Regarding the qop parameter >> in response >> tothe407 Proxy Authentication. >> >> >> No, the options must be in quotes. >> >> Look at the ABNF... >> qop-options = "qop" EQUAL LDQUOT qop-value >> *("," qop-value) RDQUOT >> >> the LDQUOT and RDQUOT are required. >> >> Regards, >> >> Attila >> >> Attila Sipos >> Software Engineer >> >> Let's talk Business, Let's talk VoIP >> VegaStream, The Western Centre, Western Road, Bracknell, >> Berkshire. RG12 >> 1RW >> www.vegastream.com >> >> >> >> -----Original Message----- >> >> From: [EMAIL PROTECTED] >> >> [mailto:[EMAIL PROTECTED] Behalf >> >> Of Ajit Kumar >> >> Sent: 08 February 2006 04:03 >> >> To: [EMAIL PROTECTED]; [email protected] >> >> Subject: Re: [Sip-implementors] Regarding the qop parameter >> >> in response >> >> tothe407 Proxy Authentication. >> >> >> >> >> >> It should be without quotes, quotes are used only for >> >> multiple option, >> >> as seen in 407 proxy authorization. In response since you >> >> are going to >> >> provide only one of the multiple options provided in 407 so >> >> you need not >> >> use quotes. >> >> >> >> Regards >> >> Ajit >> >> >> >> >> >> -----Original Message----- >> >> From: [EMAIL PROTECTED] >> >> [mailto:[EMAIL PROTECTED] On Behalf Of >> >> [EMAIL PROTECTED] >> >> Sent: Tuesday, February 07, 2006 4:11 PM >> >> To: [email protected] >> >> Subject: [Sip-implementors] Regarding the qop parameter in >> >> response to >> >> the407 Proxy Authentication. >> >> >> >> >> >> Hi, >> >> >> >> In reply to the SIP/2.0 407 Proxy Authentication >> >> required What should be the state of paramater qop=auth-int >> >> contained in the response , whether it should be in >> quotes or without >> >> quotes. >> >> Could you please tell me about this. >> >> >> >> Thanks and Regards >> >> Bhanuprakash Singh >> >> >> >> >> >> The information contained in this electronic message and any >> >> attachments >> >> to this message are intended for the exclusive use of the >> >> addressee(s) >> >> and may contain proprietary, confidential or privileged >> >> information. If >> >> you are not the intended recipient, you should not disseminate, >> >> distribute or copy this e-mail. Please notify the sender >> >> immediately and >> >> destroy all copies of this message and any attachments. >> >> >> >> WARNING: Computer viruses can be transmitted via email. >> The recipient >> >> should check this email and any attachments for the presence >> >> of viruses. >> >> The company accepts no liability for any damage caused by >> any virus >> >> transmitted by this email. >> >> >> >> www.wipro.com >> >> >> >> _______________________________________________ >> >> Sip-implementors mailing list >> >> [email protected] >> >> https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors >> >> >> >> _______________________________________________ >> >> Sip-implementors mailing list >> >> [email protected] >> >> https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors >> >> >> >> _______________________________________________ Sip-implementors mailing list [email protected] https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
