Subject: RE: [Sipping] Comments on config framework draft - AOR

From: Goix Walter <[email-masked]>
Date: Thu, 30 Sep 2004 18:29:07 +0200

I imagine you could provide basic configuration/access to roaming-kind of users that are not or can not be authenticated (e.g. for emergency or restricted services)

-----Original Message-----
From: [email-masked] [mailto:[email-masked]]On
Behalf Of [email-masked]
Sent: Thursday, September 30, 2004 1:27 PM
To: [email-masked]
Cc: [email-masked]; [email-masked]
Subject: RE: [Sipping] Comments on config framework draft - AOR

Yes, I had the authentication mechanism in mind. I don't think anything should be done without some form of authentication and therefore "network-user" to me is useless. Are there any cases where we can leave authentication out?

Regards,
Hisham

> -----Original Message-----
> From: ext Volker Hilt [mailto:[email-masked]]
> Sent: 29.September.2004 19:28
> To: Khartabil Hisham (Nokia-TP-MSW/Helsinki)
> Cc: [email-masked]; [email-masked]
> Subject: Re: [Sipping] Comments on config framework draft - AOR
> 
> 
> [email-masked] wrote:
> > - "The "network-user" parameter is used when subscribing for local
> >    network profiles.  If the value of the profile-name 
> parameter is not
> >    "local", the "network-user" parameter has no defined 
> meaning.  If the
> >    user has special privileges beyond that of an anonymous 
> user in the
> >    local network, the "network-user" parameter identifies 
> the user to
> >    the local network.  The value of this parameter is the 
> user's address
> >    of record.  The SUBSCRIBE server may authenticate the 
> subscriber to
> >    verify this AOR."
> > 
> > I don't believe this is needed. Authentication should be 
> out of scope
> > of this document. Also, the identity (AOR) of the user 
> should be derived
>  > after authentication locally, no need for the network-user param.
> >
> The URI of the SUBSCRIBE request for "local" profiles will 
> point to the 
> local network domain (e.g. [email-masked]) and it 
> will therefore 
> not contain the AoR of the user. Without the network-user 
> parameter, the 
> local network would not know the AoR of the subscribing user 
> unless, of 
> course, it derive the AoR through an authentication 
> mechanism. With the 
> "network-user" parameter the local profile type works with 
> *and* without 
> authentication.
> 
> > 
> > Section 3.7
> > ------------
> > 
> > - "A user agent can provide hotelling by collecting a userËs AOR and
> >    credentials needed to SUBSCRIBE and retrieve the user's profiles.
> >    hotelling functionality is achieved by subscribing to 
> the user's AOR
> >    and specifying the "user" profile type.  This same 
> mechanism can also
> >    be used to secure a user agent, requiring a user to 
> login to enable
> >    functionality beyond the default userËs restricted 
> functionality."
> > 
> > Again, the user's AOR should not be explicitly required by the 
> > server. After authentication, the server should be able to 
> deduce the
> > user's AoR from some DB.
> > 
> Yes, authentication could provide the server with this 
> information. But 
> this would make authentication mandatory if the server wants 
> to know the 
> AoR. Not sure if we want to go down this path.
> 
> Thanks,
> 
> Volker
> 
> 
> 

_______________________________________________
Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
This list is for NEW development of the application of SIP
Use [email-masked] for questions on current sip
Use [email-masked] for new developments of core SIP

Gruppo Telecom Italia - Direzione e coordinamento di Telecom Italia S.p.A.

====================================================================
CONFIDENTIALITY NOTICE
This message and its attachments are addressed solely to the persons
above and may contain confidential information. If you have received
the message in error, be informed that any use of the content hereof
is prohibited. Please return it immediately to the sender and delete
the message. Should you have any questions, please send an e_mail to
[email-masked]. Thank you
====================================================================

_______________________________________________
Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
This list is for NEW development of the application of SIP
Use [email-masked] for questions on current sip
Use [email-masked] for new developments of core SIP