[SR-Users] auth_challenge() and async

Daniel-Constantin Mierla miconda at gmail.com
Tue Dec 13 09:14:23 CET 2022


Hello,

change of cseq results in a different transaction, there should be two
at the same time for a short interval. Try to see if debug=3 offers any
hints.

For clarification: do you need to do authentication two times? Second
time with pv function?

Cheers,
Daniel

On 12.12.22 21:53, Alex Balashov wrote:
> To be clear, the two t_newtran() calls in the main request_route were naturally a typo. :-) Only the first one was intended. 
>
>> On Dec 12, 2022, at 3:45 PM, Alex Balashov <abalashov at evaristesys.com> wrote:
>>
>> Hi,
>>
>> Is there any good solution for the scenario of an auth_challenge() with two separate transaction suspensions?
>>
>> To clarify (simplified):
>>
>>     request_route {
>>         ...
>>
>>         t_newtran();
>>
>>         if(!is_present_hf("Authorization") && !is_present_hf("Proxy-Authorization")) {
>>            auth_challenge("$fd", "1");
>>            exit;
>>         }
>>
>>         # TM suspend/continue
>>         t_newtran();
>>
>>         async credentials query("RESUME_AUTH");
>>     }
>>
>>     route[RESUME_AUTH] {
>>         # Credentials received into PVs.
>>
>>         if(!pv_auth_check("...")) {
>>             auth_challenge("$fd", "1");
>>             exit;
>>         }
>>
>>         # Create transaction shell if not exists already from auth query.
>>         if(!t_lookup_request())
>>            t_newtran();
>>
>>         # TM suspend/continue
>>         async route query("RESUME_ROUTING");
>>     }
>>
>>     route[RESUME_ROUTING] {
>>         # Unmarshal etc.
>>
>>         t_relay(); # etc.
>>     }
>>
>> What happens here is that the first auth_challenge() results in a retransmission of its 407 challenge without absorbing the negative ACK. This is despite the ostensibly stateful behaviour of auth_challenge() without "force_stateless_reply" enabled.
>>
>> In this case, it eclipses the second, unrelated 407 challenge from the subsequent routing query (407 challenge with +1 CSeq):
>>
>>
>> <Screenshot 2022-12-12 at 3.44.15 PM.jpeg>
>> -- Alex
>>
>> -- 
>> Alex Balashov | Principal | Evariste Systems LLC
>>
>> Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free)
>> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
>>
> -- 
> Alex Balashov | Principal | Evariste Systems LLC
>
> Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free)
> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
>
>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
> sr-users at lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to the sender!
> Edit mailing list options or unsubscribe:
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda




More information about the sr-users mailing list