[asterisk-bugs] [JIRA] (ASTERISK-22471) Set default auth realm to challenge realm if auth object realm is empty

[George Joseph (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-22471?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

George Joseph updated ASTERISK-22471:
-------------------------------------

    Attachment: outbound_auth_realm_v3.patch

This patch sets the outbound realm to match that of the incoming challenge if the realm wasn't specifically set in the auth object.

A side effect of this is that for outgoing challenges and incoming responses, the default of "asterisk" can't be set at config read time.  It has to be set before the verify of the incoming auth or outgoing challenge.  This patch therefore also moves that action to res_pjsip_authenticator_digest.

                
> Set default auth realm to challenge realm if auth object realm is empty
> -----------------------------------------------------------------------
>
>                 Key: ASTERISK-22471
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-22471
>             Project: Asterisk
>          Issue Type: Improvement
>      Security Level: None
>          Components: Resources/res_pjsip_outbound_authenticator_digest
>    Affects Versions: 12.0.0-alpha1
>         Environment: Fedora 19 x86_64
>            Reporter: George Joseph
>         Attachments: outbound_auth_realm_v3.patch
>
>
> On an outgoing authentication response, set the realm to that of the incoming challenge if one wasn't explicitly set in the endpoint's auth object.
> Outbound authentications sent for register and invite will otherwise fail if you don't know the exact realm used by the remote ahead of time.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira