: ISSUE: Assumption that the user is authenticated before it is

"German Blanco (E2/EEM)" <[email protected]> Thu, 27 Oct 2005 17:43:19 +0200

Newsgroups	gmane.ietf.aaa
Message-ID	<1AB3D30B989BF141BBD5C70057B2EF7C07C43084@eestqnt105.es.eu.ericsson.se>

Description of issue: The user is not authenticated until the MAA is 
                      received, but the MAR processing assumes it is.
Submitter name: German Blanco
Submitter email address: [email protected]
Date first submitted: 27 Oct 05
Document: sip
Comment type: T
Priority: S
Sections: 7.8
Rationale/Explanation of issue: In this paragraph:
"
If the SIP-Server-URI AVP is present in the Diameter MAR message, then the Diameter server MUST compare the stored SIP server (assigned to the SIP AOR) with the SIP-Server-URI AVP value (received in the Diameter MAR message). If they don't match, the Diameter server MUST update the stored SIP server assigned to the SIP AOR, and MUST set an "authentication pending" flag for the SIP AOR. If they match, the Diameter server shall clear the "authentication pending" flag for the SIP AOR. 
"
The Diameter server clears the "authentication pending" flag when processing
the MAR request.  Since the identity of the user could not be verified until 
the Diameter client receives the authentication data in the MAA, the flag 
should not be cleared at that moment, but when processing the SAR.

Requested change: Move the clearing of the "authentication pending" flag for 
the SIP-AOR to the SAR command processing.