[asterisk-dev] IAX calls without authentication and RealTime

Richard Braun rbraun at proformatique.com
Mon Dec 10 09:57:44 CST 2007


Hello,

chan_iax2 can perform IAX calls without providing the peer with a username
or password. This is usucally set on the server side with something like

[guest]
type = user
context = incoming

but when using RealTime to store such an entry, the chan_iax2 module
doesn't respect that behaviour and is unable to allow unauthenticated
calls.

I'm not sure how chan_iax2 handles its cache and what it does before
check_access() is called. It looks like, when looking up the entry
with RealTime, the module provides the ipaddr and port members.
However, a guest user has obviously no such attributes and as a result
there is simply no answer, then the call fails.

Is this a known issue ?

-- 
Richard Braun
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.digium.com/pipermail/asterisk-dev/attachments/20071210/1afb0ae9/attachment-0001.pgp 


More information about the asterisk-dev mailing list