[asterisk-bugs] [JIRA] (ASTERISK-27472) 401 Unauthorized from INVITE not generating security event

Sean Bright (JIRA) noreply at issues.asterisk.org
Tue Dec 12 14:05:07 CST 2017


     [ https://issues.asterisk.org/jira/browse/ASTERISK-27472?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sean Bright updated ASTERISK-27472:
-----------------------------------

    Summary: 401 Unauthorized from INVITE not generating security event  (was: 401 Unauthorized from INVITE not generating security even)

> 401 Unauthorized from INVITE not generating security event
> ----------------------------------------------------------
>
>                 Key: ASTERISK-27472
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27472
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/General, Channels/chan_sip/Security Framework
>    Affects Versions: 13.7.2
>         Environment: CentOS 7
>            Reporter: Michelle Dupuis
>            Severity: Critical
>
> Using 'set sip debug on' I can watch the SIP traffic to/from the PBX.  I also have another monitor open showing security events from the AMI.  I can confirm that failed registration attempts correctly raising security events, but one type of failed SIP transaction is showing 401 Unauthorized in the CLI, but NO security event in the AMI.   See Notes below for an example SIP trace that is NOT raising a security event.



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list