Re: [Sip] Enrollment in SIP services (and should we undeprecatebasic auth)

[Michael Thomas <mat@cisco.com>]

Juha Heinanen writes:
 > Michael Thomas writes:
 > 
 >  > The problem is that AAA's expect either a CHAP or
 >  > PAP formated authenticator. Digest, while it
 >  > doesn't chip the cleartext password ain't the same
 >  > format so you have a problem. Basic allows you to
 >  > hack up an authenticator at the proxy. Maybe
 >  > EAP+digest is our friend. Or maybe not.
 > 
 > what is wrong with draft-sterman-aaa-sip-00.txt?  we use it with digets
 > authentication without any problems.  leading radius servers support it
 > as well as all good sip proxies.

   Well, it seems to be expried for one... is the jist
   that AAA's have been hacked to deal with digest auth
   types directly (or, say, as an EAP type)? If
   so, that's certainly a possibility, and would
   have the obvious benefit of being useable for
   the web as well. 

       Mike
_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sipping@ietf.org for new developments on the application of sip