How does Asterisk authenticate the user to make calls? The issue I am running into is that when the user sends an Invite to the asterisk which is returned by a 407, which is in turn is replied with a new Invite and the proper authentication information included in it, the Asterisk sends a second 407...and the call does not go through... The setup is as follows: X-Lite <-> SBC <-> Asterisk The problem only occurs when I have the SBC in the middle, and from what I can see, the only difference with the SBC in place is that the second Invite which has the proper authentication in it, is sent from the SBC to the Asterisk with a NEW call-ID and Cseq # instead of using the initial INVITE. Therefore, the SBC is actually changing this information and treats it as a new call when the client does send it with the same call-ID and an incremented Cseq as the first Invite. So the question in mind is the following: Is it REQUIRED for Asterisk that thesecond Invite which is a response to the 407 that has the proper authentication information to use the same call ID and Cseq or this should not matter? thanks, --------------------------------- Yahoo! Mail Use Photomail to share photos without annoying attachments. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20060222/c69e89f6/attachment.htm
Kevin P. Fleming
2006-Feb-22 10:17 UTC
[Asterisk-Users] "Proxy Authentication Required" issue
Tim Chase wrote:> Is it REQUIRED for Asterisk that thesecond Invite which is a response to the 407 that has the proper authentication information to use the same call ID and Cseq or this should not matter?This is not an Asterisk requirement, it's a SIP RFC compliance requirement. The random value (nonce) that is sent as part of the initial 407 response is specific to that Call-ID, as the RFC mandates. If Asterisk receives an INVITE for a different Call-ID, it will generate a new nonce, thus ignoring the authentication info including in the INVITE. In other words: your SBC is broken.