[asterisk-bugs] [JIRA] (ASTERISK-29076) Suggestion - Add the domain supported registration

sungtae kim (JIRA) noreply at issues.asterisk.org
Mon Sep 14 15:31:43 CDT 2020


    [ https://issues.asterisk.org/jira/browse/ASTERISK-29076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=252023#comment-252023 ] 

sungtae kim commented on ASTERISK-29076:
----------------------------------------

Indeed. 
But the problem is, the AoR doesn't check the Password using the DIGEST method.

So, I'd like to add the domain check to the "auth". 

And the realm is coming from the Asterisk with 401 response. So, it is not secure.
Simply, want to add the feature to use the auth_username with domain name search.

> Suggestion - Add the domain supported registration
> --------------------------------------------------
>
>                 Key: ASTERISK-29076
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29076
>             Project: Asterisk
>          Issue Type: Improvement
>      Security Level: None
>          Components: Resources/res_pjsip_registrar
>    Affects Versions: 18.0.0
>            Reporter: sungtae kim
>            Assignee: sungtae kim
>            Severity: Minor
>
> Currently, the Asterisk doesn't support the domain supported registration.
> Simply, if the Asterisk received below registration request it treats as the same registration for 100.
> {noformat}
> 100 at test1.test.com
> 100 at test2.test.com
> {noformat}
> This is fine for small/single hosted PBX services.
> But these blocks providing the enterprise level of registration service which included various domain names with the same username.
> To make this, I'd like to add this item into the [auth]section.
> {noformat}
> ;==========================AUTH SECTION OPTIONS=========================
> ;[auth]
> ...
> ;domain= ; Domain name for registration
> {noformat}
> This fix will add the new identify method to the find_registrar_aor().



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list