[Asterisk-Users] Always get 401 Unauthorized..that normal?

[Alex Barnes]

Yeah that is totally normal.

To help prevent replay attacks the SIP device (Asterisk in this case)
includes a authentication header in the "Authentication Required"
response.  This includes (among many other things) a random string that
the initiator of the request (your phone) must include when creating the
hash of its password.

Hash sent = md5(password+random string)

In short don't worry that's what is supposed to happen :-P

Cheers

alex

-----Original Message-----
From: Matthew Boehm [mailto:mboehm at cytelcom.com] 
Sent: 15 October 2004 15:23
To: asterisk-users at lists.digium.com
Subject: [Asterisk-Users] Always get 401 Unauthorized..that normal?


I always get a 401 Unauthorized result before the registration succeedes
on these SIP phones. Is that normal? A REGISTER packet is sent, then a
100 Trying, then a 401 Unauthorized, then another REGISTER and another
Trying, then OK.

Is it normal to always get that 401? Why would registration be
unauthorized then suddenly work? Or is this some algorithm that SIP uses
to try different auth schemes?

The phones are Cisco 7960 btw..

Thanks,
Matthew


Dear Friends of Ubiquity Software: 
 
As you may have noticed, Ubiquity Software began using the web domain ubiquity.com earlier this year in addition to the previously established ubiquity.net for our website and email communications to you.  However, since that time, a dispute has emerged with respect to actual ownership of the ubiquity.com domain.
 
As an international software company founded over decade ago, you can always reach Ubiquity Software under the website www.ubiquity.net <http://www.ubiquity.net/>  and via email at @ubiquity.net.  However, we have also chosen to expand our domain to the more specific www.ubiquitysoftware.com <http://www.ubiquitysoftware.com/>  for web and @ubiquitysoftware.com for email communications.
 
Please use either the historical ubiquity.net or begin to use the new ubiquitysoftware.com domain for all email communications to Ubiquity employees from now on. 
 
Thank you.
 
Regards,
 
Ubiquity Software 
www.ubiquitysoftware.com <http://www.ubiquitysoftware.com/> 
info at ubiquitysoftware.com