[pjsip] Problem with "407 Proxy Authorization Required" in IMS: Missing "Authentication domain"
segalion
segalion at gmail.com
Mon Nov 2 06:57:49 CST 2009
I have found in pjsip code a domain field in
\pjproject-1.4.5\pjsip\include\pjsip\sip_auth_msg.h
/**
* This structure describes authentication challenge used in
Proxy-Authenticate
* or WWW-Authenticate for digest authentication scheme.
*/
struct pjsip_digest_challenge
{
pj_str_t realm; /**< Realm for the challenge. */
pjsip_param other_param; /**< Other parameters. */
pj_str_t domain; /**< Domain. */
pj_str_t nonce; /**< Nonce challenge. */
pj_str_t opaque; /**< Opaque value. */
int stale; /**< Stale parameter. */
pj_str_t algorithm; /**< Algorithm parameter. */
pj_str_t qop; /**< Quality of protection. */
};
If any knows how it work?
---------- Forwarded message ----------
From: segalion <segalion at gmail.com>
Date: 2009/11/2
Subject: Problem with "407 Proxy Authorization Required" in IMS: Missing
"Authentication domain"
To: pjsip at lists.pjsip.org
I was trying pjsua (1.4.5) with an IMS system, and I have a problem making
outgoing calls, because IMS responds with 407 Proxy Authorization Required:
[extract from wireshark inside 407 Proxy Authorization Required IMS response
packet]
Proxy-Authenticate: Digest realm="mydomain.net",domain="sip:
mydomain.net
",nonce="c803a53ff76b7e11d8615f0015adc4e2",stale=false,qop="auth",algorithm=MD5
Authentication Scheme: Digest
Realm: "mydomain.net"
Authentication Domain: "sip:domain.net"
Nonce Value: "c803a53ff76b7e11d8615f0015adc4e2"
Stale Flag: false
QOP: "auth"
Algorithm: MD5
and pjsua make the second invite with proper MD5 authentication, but without
"Authentication domain" field:
[extract from wireshark pjsua Invite with MD5 auth]
Authorization: Digest username="segalion at mydomain.es", realm="
mydomain.net", nonce="",
uri="sip:999999999 at mydomain.es<sip%3A999999999 at mydomain.es>",
response=""
Authentication Scheme: Digest
Username: "segalion at mydomain.es"
Realm: "mydomain.net"
Nonce Value: ""
Authentication URI:
"sip:999999999 at mydomain.es<sip%3A999999999 at mydomain.es>
"
Digest Authentication Response: ""
k: replaces, 100rel, timer, norefersub
x: 1800
Min-SE: 90
User-Agent: PJSUA v1.4.5/i686-pc-mingw32
[truncated] Proxy-Authorization: Digest username="
segalion at mydomain.es", realm="mydomain.net",
nonce="c803a53ff76b7e11d8615f0015adc4e2",
uri="sip:999999999 at mydomain.es<sip%3A999999999 at mydomain.es>",
response="9bd8fc0a1488f95f51df5aff69fc3c4a", algorithm=M
Authentication Scheme: Digest
Username: "segalion at mydomain.es"
Realm: "mydomain.net"
Nonce Value: "c803a53ff76b7e11d8615f0015adc4e2"
Authentication URI:
"sip:999999999 at mydomain.es<sip%3A999999999 at mydomain.es>
"
Digest Authentication Response:
"9bd8fc0a1488f95f51df5aff69fc3c4a"
Algorithm: MD5
CNonce Value: "538f092c348f485cb882e34cb35924c5"
QOP: auth
Nonce Count: 00000001
As you can see pjsua miss "Authentication Domain", so IMS is not abble to
finish the call (responds with 480 Temporaly not available).
Please help me if this is a bug, or not standard field, or how to change
pjsua code to support this...
Thanks in advance..
PD: Finally, after a hard work, I could integrate voiceage g729 in pjsua
w32-mingw enviroment!!!.
Now, I need to solve this to test with IMS.
Thanks in advance, and please help me with this....
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20091102/45c52f34/attachment.html>
More information about the pjsip
mailing list