[asterisk-dev] sip.conf realtime - potential logic flaw ?

[Benny Amorsen]

>>>>> "AD" == Andy Davidson <andy at nosignal.org> writes:

AD> On 30 Oct 2007, at 20:23, Ryan Mitchell wrote:

>> I don't think this is particular to realtime, I've encountered this
>> before and had to hack around it. What I want to do is authenticate
>> by IP, usually to some upstream PSTN carrier. Works fine provided
>> the user part in the 'From' field doesn't coincidently match a
>> local user.

AD> I do think it's realtime specific.. if I use flatfiles, then a
AD> matching username is only looked at if I also specify
AD> 'host=dynamic'. I'm just asking for the same behaviour in
AD> realtime. :-)

Ryan's problem is that he has both a PSTN carrier with a fixed IP and
local phones with host=dynamic. Your problem is solved by checking
"host=dynamic", but Ryan's problem isn't.

In general, I think username-based authentication should be done after
ip-based.


/Benny