Hi,

we came across a very similar problem in a project we are working on and had to fix it by supplying two sets of credentials.

However,  sipXtapi is the only UA I found that has this "strict" mapping between realm and username/password.
In fact it was the only one that explicitly asks for a realm from the user.

Every other UA I tried (linphone, kphone, xlite (windows and linux), several hardphones and ata's) seem to have a "default" set of username and password and uses it to respond to the realm presented by the server.  This way the UA does not need advance knowledge of the realm which simplifies configuration.

Would it not be a good idea to allow sipXtapi to set a "default" username and password that will be used to respond to any realm for which it does not explicitly have credentials.  I have seen a couple of messages where people struggle to get the auth working and I'm convinced it is because of this difficulty as opposed to other UA's they may have used before.  There is also nothing in the RFC to suggest the realm MUST match the domain from the URI or SRV lookups.  The RFC just says the realm MUST be globally unique.

Tx

M

PS: Also if you look at the RFCs, SIP digest auth was based on http digest auth where the browser has no prior knowledge of the realm in the challenge.


Alexander Chemeris wrote:
Hello,

On 11/24/06, Andrea Fileccia <[EMAIL PROTECTED]> wrote:
  
I used ethereal to see the packets and I found that sipxtapi after the
register request, don't reply to 401 unauthorized response with the second
register request and the authentication string.
    
You should pass correct realm to AddCredential function to proceed
authentification. In your case realm is '[EMAIL PROTECTED]' - look into
WWW-Authenticate field of 401 message.

  

_______________________________________________
sipxtapi-dev mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipxtapi-dev/

Reply via email to