[OpenSIPS-Users] Nextone - Proxy-Authorization and AuthorizationHeader

[Bogdan-Andrei Iancu]

Hi Julien,

It most of the cases, your approach is correct , but to be 100% safe, 
use "remove_credentials()" instead of "remove_hf()" - remove_credentials 
will remove only the credentials/headers that were using on the local 
authentication, which is useful when a requests carries more than one 
auth sets (multi stage authentication)

Regards,
Bogdan

Julien Chavanton wrote:
> We need to deal with the fact that the remote Nextone UA does not 
> reply when Proxy-Authorization or Authorization is present in the body
> In this example, removing the Proxy-Authorization after authentication 
> as been done on Opensips seems to work.
>  
>  # local and authenticated user ? route the call, else challenge 
> authentication
>  if(is_from_local()){
>         if (proxy_authorize("", "subscriber")){
>                 remove_hf("Proxy-Authorization");
>                 t_relay();
>                 exit;
>         }
>         else{
>                proxy_challenge("", "1");
>                exit;
>         }
>  }
>
> ------------------------------------------------------------------------
> *From:* users-bounces at lists.opensips.org on behalf of Julien Chavanton
> *Sent:* Mon 07/09/2009 4:06 PM
> *To:* Users at lists.opensips.org
> *Subject:* [OpenSIPS-Users] Nextone - Proxy-Authorization and 
> AuthorizationHeader
>
> Hi, when forwarding call to Nextone SBC if there is
>  
> Proxy-Authorization or Authorization header it does not reply to INVITE
>  
> Can I configure Opensip not to forward the authentication information 
> used with his clients softphones ?
> ------------------------------------------------------------------------
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>