[asterisk-bugs] [Asterisk 0018876]: Asterisk Ignores 'remotesecret' parameter

[Asterisk Bug Tracker]

The following issue has been UPDATED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18876 
====================================================================== 
Reported By:                khratos
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18876
Category:                   Channels/chan_sip/General
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     closed
Asterisk Version:           1.6.2.16.1 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
Resolution:                 fixed
Fixed in Version:           1.6.2.18
====================================================================== 
Date Submitted:             2011-02-23 18:06 CST
Last Modified:              2011-02-28 14:03 CST
====================================================================== 
Summary:                    Asterisk Ignores 'remotesecret' parameter
Description: 
Having something like the following on sip.conf:

----- start ----
...
register => john:j0nhp4ss at 66.128.XX.XXX
...

[john-peer]
type=peer
defaultuser=john
remotesecret=j0nhp4ss
;secret=j0nhp4ss
host=66.128.XX.XXX
directmedia=no
dtmfmode=rfc2833
context=jonh-context

----- end ---- 


When I send a call to that block ( Dial(SIP/something at jonh-peer) ), I
receive the following response unless I explicitly indicate a 'secret'
parameter, no matter if 'remotesecret' parameter was indicated:

"Forbidden" from '"Test Account"
<sip:9_XXX at 66.128.XX.XXX>;tag=as749a7ced'


If I set the 'secret' parameter, everything goes smoothly as expected.


Now, I might be confused, but the CHANGES file says:

-----
Added a new configuration option "remotesecret" for authentication *to
remote services*. 

For backwards compatibility, "secret" still has the
same function as before, but now you can configure both a remote secret
and a local secret for mutual authentication.
-----

and on sip.conf.sample

-----
;remotesecret=guessit             ; Our password *to their service*
-----


If (as it seems to say in documentation) 'remotesecret' is used to
authenticate myself when placing a call to the remote network, then is not
working.


Doing a: grep -ir 'remotesecret' . (inside the Asterisk source directory)
indicates that only this files mention that parameter:

./ChangeLog
./channels/chan_sip.c
./CHANGES:
./configs/sip.conf.sample


If I misunderstood the functionality (could be, as English is not my
native language), I would appreciate to be pointed to the correct
documentation. 


Thanks in advice.
====================================================================== 

---------------------------------------------------------------------- 
 (0132448) lmadsen (administrator) - 2011-02-28 14:03
 https://issues.asterisk.org/view.php?id=18876#c132448 
---------------------------------------------------------------------- 
This has already been resolved and will be available in the latest 1.6.2
branch. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-02-28 14:03 lmadsen        Note Added: 0132448                          
2011-02-28 14:03 lmadsen        Status                   new => closed       
2011-02-28 14:03 lmadsen        Resolution               open => fixed       
2011-02-28 14:03 lmadsen        Fixed in Version          => 1.6.2.18        
======================================================================