Version 5.2
351
August 2007
SIP User's Manual
7. Telephony Capabilities
7.12.2 SIP Authentication Example
The gateway supports basic and digest (MD5) authentication types, according to SIP RFC
3261 standard. A proxy server might require authentication before forwarding an INVITE
message. A Registrar/Proxy server may also require authentication for client registration. A
proxy replies to an unauthenticated INVITE with a 407 Proxy Authorization Required
response, containing a Proxy-Authenticate header with the form of the challenge. After
sending an ACK for the 407, the user agent can then resend the INVITE with a Proxy-
Authorization header containing the credentials.
User agent, redirect or registrar servers typically use 401 Unauthorized response to
challenge authentication containing a WWW-Authenticate header, and expect the re-
INVITE to contain an Authorization header.
The following example describes the Digest Authentication procedure including
computation of user agent credentials.
1.
The REGISTER request is sent to Registrar/Proxy server for registration, as follows:
REGISTER sip:10.2.2.222 SIP/2.0
Via: SIP/2.0/UDP 10.1.1.200
From: <sip: [email protected]>;tag=1c17940
To: <sip: [email protected]>
Call-ID: [email protected]
User-Agent: Audiocodes-Sip-Gateway/gateway/v.4.20.299.410
CSeq: 1 REGISTER
Contact: sip:[email protected]:
Expires:3600
2.
Upon receipt of this request, the Registrar/Proxy returns 401 Unauthorized response.
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.2.1.200
From: <sip:[email protected] >;tag=1c17940
To: <sip:[email protected] >
Call-ID: [email protected]
Cseq: 1 REGISTER
Date: Mon, 30 Jul 2001 15:33:54 GMT
Server: Columbia-SIP-Server/1.17
Content-Length: 0
WWW-Authenticate: Digest realm="audiocodes.com",
nonce="11432d6bce58ddf02e3b5e1c77c010d2",
stale=FALSE,
algorithm=MD5
3.
According to the sub-header present in the WWW-Authenticate header the correct
REGISTER request is formed.
4.
Since the algorithm used is MD5, then:
•
The username is equal to the endpoint phone number: 122
•
The realm return by the proxy: audiocodes.com
•
The password from the
ini
file: AudioCodes.
•
The equation to be evaluated: (according to RFC this part is called A1):
‘122:audiocodes.com:AudioCodes’.
•
The MD5 algorithm is run on this equation and stored for future usage.
•
The result is: ‘a8f17d4b41ab8dab6c95d3c14e34a9e1’
Содержание Mediapack mp-11x
Страница 1: ...Document LTRT 65409 August 2007 User s Manual Version 5 2...
Страница 2: ......
Страница 14: ...SIP User s Manual 14 Document LTRT 65409 MediaPack Series Reader s Notes...
Страница 18: ...SIP User s Manual 18 Document LTRT 65409 MediaPack Series Reader s Notes...
Страница 22: ...SIP User s Manual 22 Document LTRT 65409 MediaPack Series Reader s Notes...
Страница 44: ...SIP User s Manual 44 Document LTRT 65409 MediaPack Series Reader s Notes...
Страница 47: ...Version 5 2 47 August 2007 SIP User s Manual 4 Getting Started Figure 4 1 Startup Process...
Страница 322: ...SIP User s Manual 322 Document LTRT 65409 MediaPack Series Reader s Notes...
Страница 380: ...SIP User s Manual 380 Document LTRT 65409 MediaPack Series Reader s Notes...
Страница 388: ...SIP User s Manual 388 Document LTRT 65409 MediaPack Series Reader s Notes...
Страница 390: ...User s Manual Version 5 2 www audiocodes com...