[OpenSIPS-Users] B2B/Proxy Authentication

[Ovidiu Sas]

Yes, it should (at least it's working for INVITE).  You will need to
define the headers that are passed between entities:
http://www.opensips.org/html/docs/modules/1.8.x/b2b_logic.html#id250020
You will really need to test this out by yourself and evaluate if this
is the path that you want to go.

Regards,
Ovidiu Sas

-- 
VoIP Embedded, Inc.
http://www.voipembedded.com

On Wed, May 23, 2012 at 10:22 AM, Marwan El-Sadek
<marwan_sadek at hotmail.com> wrote:
>
> Hello again,
>
> Another input is the OpenSIPS will need to regenerate the second REGISTER
> containing the digest response based on the first REGISTER sent from the
> caller, this means that it will also contains all the headers previously
> sent in the first REGISTER and not a new clean One! I hope I made myself
> clear on this point.
>
> Thanks,
> Marwan
>
> ________________________________
> From: marwan_sadek at hotmail.com
> To: users at lists.opensips.org
> Subject: RE: B2B/Proxy Authentication
> Date: Wed, 23 May 2012 17:15:02 +0300
>
>
> Hello Ovidiu,
>
> Ok, I will look into these modules. Should I provision all the users within
> the script? I'll be having the same password for all users, but usernames
> are dynamically and regulary provisioned, it's not be practical to do it
> this way. Can I store/retrieve user credentials dynamically from a database
> for example?
>
> Thanks,
> Marwan
>
> ________________________________
>
> Hello Marwan,
>
> You can implement the scenario that you want using b2b modules in "top
> hiding" mode:
> http://www.opensips.org/html/docs/modules/1.8.x/b2b_entities.html
> http://www.opensips.org/html/docs/modules/1.8.x/b2b_logic.html
>
> You will need to load first the uac_auth module and provision there
> all the credentials that you want to use:
> http://www.opensips.org/html/docs/modules/1.8.x/uac_auth.html
>
> There are some restrictions:
>  - if you need to add new credentials, you will need to restart the server
>  - authentication in this mode will work for REGISTER and INVITE only
> (in dialog requests will not be authenticated AFAIR).
>
> Regards,
> Ovidiu Sas