[OpenSIPS-Users] Multi-domain and reinvite authentications

Carlo Dimaggio jaasmailing at gmail.com
Mon Oct 26 17:13:33 CET 2009


Hi all,

I have a problem with an ITSP interconnection and my multi-domain  
opensips. Here my scenario:

ITSP -> my opensips (IP: 123.123.123.123) -> ATA SPA2102 (user at domainA.com 
)

When I receive a call to one of my numbers (for example 5555), the  
ITSP send me the INVITE always with the TO header 5555 at 123.123.123.123  
(the ATA has registered with user at domainA.com).
I have an alias_db configured from 5555 at 123.123.123.123 to user at domainA.com 
.
The problem arises when the ATA switch to T38 with a Reinvite (the  
 From header now is 5555 at 123.123.123.123): the opensips asks to a  
proxy_authorize("","subscriber") with realm="123.123.123.123" and the  
ATA reply with auth user at 123.123.123, but this user is invalid (it  
should be user at domainA.com...):

         if (loose_route()) {
             #Check authentication of re-invites
             if(method=="INVITE" && (!allow_trusted())) {
                 xlog ("L_INFO", "Re-Invite -  M=$rm RURI=$ru F=$fu T= 
$tu IP=$si ID=$ci\n");
                 if !(is_from_gw()) {
                    if (!proxy_authorize("","subscriber")) {
			[...]

I would like to know what could be the right behaviour for the proxy,  
I know that rewriting of the (first) TO header is not RFC-compliant...  
Should I store the domain aliased (domainA.com) and use it as variable  
to proxy_authorize?
Is there a better implementation?


Thanks and regards,
Carlo Dimaggio






More information about the Users mailing list