Subject: [Sip] one question on the authentication for third-party registration

From: [email-masked]
Date: Wed, 7 Sep 2005 17:12:03 +0800

Hi,

I am confused by the authentication for third-party registration. 

We assume that Bob registrers for Alice, so the REGISTER request may be 
like this:

REGISTER sip:registrar.biloxi.com SIP/2.0
Via: SIP/2.0/UDP bobspc.biloxi.com:5060;branch=z9hG4bKnashds7
Max-Forwards: 70
To: Alice <sip:[email-masked]>
From: Bob <sip:[email-masked]>;tag=456248
Call-ID: 843817637684230@998sdasdh09
CSeq: 1826 REGISTER
Contact: <sip:[email-masked]>
Expires: 7200
Content-Length: 0

As RFC3261 Section 10.3 (page 64) described, registrar SHOULD authenticate 
the UAC using 
the mechanisms described in RFC3261 Section 22, so the username of the 
credential should 
be "bob", while RFC3261 Section 26.3.2.1 (page 243) said that username of 
this credential 
SHOULD correspond with the "userinfo" portion of the URI in the To header 
field of the 
REGISTER request, that is "alice", this means authentication is for Alice, 
not Bob.

Which one is the correct?

Best Regards,
LionEagle

***********************************************
信息安全声明：本邮件包含信息归ZTE所有，
ZTE对该邮件拥有所有权利。请接收者注意
保密，未经发件人书面许可，不得向任何第
三方组织和个人透露本邮件所含信息的全部
或部分。以上声明仅适用于工作邮件。
Information Security  Notice：
The information contained in this mail is
solely property of  ZTE Corporation. 
This mail communication is confidential.
Recipients named above are obligated to
maintain secrecy and are not permitted to
disclose the contents of this communication
to others.
***********************************************
_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [email-masked] for questions on current sip
Use [email-masked] for new developments on the application of sip