[asterisk-bugs] [Asterisk 0015101]: [patch] SIP allowguest defaults to yes with 'make samples'

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15101 
====================================================================== 
Reported By:                alecdavis
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   15101
Category:                   Core/Configuration
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     new
Asterisk Version:           SVN 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!): 192214 
Request Review:              
====================================================================== 
Date Submitted:             2009-05-13 17:20 CDT
Last Modified:              2009-11-12 17:33 CST
====================================================================== 
Summary:                    [patch] SIP allowguest defaults to yes with 'make
samples'
Description: 
Proposal to change sip.conf.sample and extensions.conf.sample

So that new a install has sip.conf has allowguest=no in the [general]
section
and extensions.conf to have a warning in the [default] section that
sip.conf may have allowguest=yes or the default of yes.


====================================================================== 

---------------------------------------------------------------------- 
 (0113757) alecdavis (reporter) - 2009-11-12 17:33
 https://issues.asterisk.org/view.php?id=15101#c113757 
---------------------------------------------------------------------- 
Reading AST-2008-003, which IMO the fix implies that allowguest has to be
enabled, to allow an unauthenticated call.

"A fix has been added which checks for the option 'allowguest' to be
enabled before determining that authentication is not required"
 
please refer to
http://downloads.asterisk.org/pub/security/AST-2008-003.pdf 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-11-12 17:33 alecdavis      Note Added: 0113757                          
======================================================================