[Asterisk-Dev] chan_sip.c : ignoring domain part for incomingINVITE's causes conflicts between domains?

Olle E Johansson oej at edvina.net
Mon Jan 2 01:42:43 MST 2006


Enzo Michelangeli wrote:
> ----- Original Message ----- 
> From: "Olle E Johansson" <oej at edvina.net>
> Sent: Saturday, December 31, 2005 4:56 PM
> 
> 
>>It is a well known limitation in the current implementation.
>>Asterisk only matches on user ID and totally ignores the domain part.
>>User ID has to be the same as the digest user ID.
>>
>>It is not an easy fix in the current code, I've been trying to fix this
>>for a long time. The planned rewrite of chan_sip will take care of this,
>>hopefully.
> 
> 
> Why not just treat a call with failed authentication as an unauthenticated
> call (e.g., from a non-existing user) and assign it the "default" context
> for further processing? After all, the semantic of the failure can be
> assumed to be "I'm Mary, but not the Mary you know".
> 
Actually, things have changed since I looked into this the last time.
If domains are enabled, we could simply avoid authentication all 
together for non-local domains. Thanks for pursuing this, I'll look into it.

/Olle



More information about the asterisk-dev mailing list