[asterisk-dev] bug or feature (use From: instead of Digest username to match INVITE) ?

[Kevin P. Fleming]

----- Luigi Rizzo <rizzo at icir.org> wrote:
> I am not sure how to handle this. Maybe i miss that, but what's wrong
> in using the "username" entry in the Proxy-Authorization: line
> to lookup the matching entry in the users list ?

This is a design problem with the way that Asterisk handles SIP authentication. It should be domain-based, but it is not.

The simple answer to your question is: we need to know what user it is before we have asked for authentication, so we don't have the Proxy-Authorization information yet.

There are two options: either request authentication for all incoming INVITEs, or request authentication based on the target URI being requested and the domain of the requestor (this is 'domain based' authentication).

-- 
Kevin P. Fleming
Senior Software Engineer
Digium, Inc.