[asterisk-bugs] [JIRA] (ASTERISK-21223) Asterisk no longer responds to SIP REGISTER's that don't contain an Authorization

[Sverre G (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-21223?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sverre G updated ASTERISK-21223:
--------------------------------

    Attachment: Screen Shot 2013-03-08 at 4.34.05 PM.png

Asterisk 1.4.22 on the left showing sucessful registration, asterisk 11.2.1 showing ignored registration attempts.
                
> Asterisk no longer responds to SIP REGISTER's that don't contain an Authorization
> ---------------------------------------------------------------------------------
>
>                 Key: ASTERISK-21223
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-21223
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/Registration
>    Affects Versions: 11.2.1
>         Environment: CentOS 6.3
>            Reporter: Sverre G
>            Severity: Minor
>         Attachments: Screen Shot 2013-03-08 at 4.34.05 PM.png
>
>
> On previous versions of Asterisk, e.g. 1.4.22, SIP clients (in particular some versions of firmware on the Cisco 7960) would attempt to register without any authorization header, causing Asterisk to reply with 401 Unauthorized, causing the SIP client to attempt to register again (but this time with an authorization header).
> In the current version of Asterisk (11.2.1), Asterisk silently ignores clients that do not provide an authorization header, essentially not allowing these clients to register as they never receive the nonce that they need to continue.
> See screenshots for side-by-side comparison of packets against Asterisk 1.4.22 versus Asterisk 11.2.1.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira