[Asterisk-Users] IAX2 authentication confusion

[Andres]

> I understand that, except that this succeeds even if the calling 
> host's Dial command does _not_ include the USER name at all!
>
I just tried this myself and it behaves as you have described it.  No 
need to use a  username.  When the call comes in on the remote Asterisk, 
the iax.conf simply tries to match the password to any entry.  The first 
entry with a matching password gets used.   I suggest you open a bug to 
at least get this documented.

Andres