<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Thanks Kevin. <br><br>Seems like remotesecret takes over if secret is not defined - I'll do further tests..<br><br>The authentication for REGISTERs and SUBSCRIBEs are done at a sip proxy (opensips) - I'll try to take care of the UAC authorization request for NOTIFY there (if possible).<br><br>Regards,<br>Matt<br><br><br><br><div><div id="SkyDrivePlaceholder"></div>> Date: Tue, 14 Feb 2012 09:44:38 -0600<br>> From: kpfleming@digium.com<br>> To: asterisk-users@lists.digium.com<br>> Subject: Re: [asterisk-users] skip authentication for REGISTER<br>> <br>> On 02/14/2012 08:43 AM, Matt Hamilton wrote:<br>> > Hi,<br>> ><br>> > For REGISTER and SUBSCRIBE requests coming from UACs, is it possible to<br>> > make Asterisk skip authentication even if a "secret" is defined in<br>> > sip.conf for the peer; i.e. similar to insecure=invite for INVITE requests?<br>> ><br>> > If I leave "secret" blank, Asterisk doesn't require any authentication -<br>> > this works as I want. However, I also use "SIP NOTIFY" to contact UACs<br>> > (UACs are set to require authorization for NOTIFY), but without the<br>> > "secret" defined, Asterisk can't send the correct authorization.<br>> <br>> You can use 'remotesecret' to set the secret string for Asterisk to use <br>> to respond to authentication challenges. There isn't any way to make <br>> REGISTER/SUBSCRIBE/etc. insecure like there is for INVITEs... I can't <br>> imagine that many people would want unauthenticated REGISTERs to be <br>> allowed :-)<br>> <br>> -- <br>> Kevin P. Fleming<br>> Digium, Inc. | Director of Software Technologies<br>> Jabber: kfleming@digium.com | SIP: kpfleming@digium.com | Skype: kpfleming<br>> 445 Jan Davis Drive NW - Huntsville, AL 35806 - USA<br>> Check us out at www.digium.com & www.asterisk.org<br>> <br>> --<br>> _____________________________________________________________________<br>> -- Bandwidth and Colocation Provided by http://www.api-digital.com --<br>> New to Asterisk? Join us for a live introductory webinar every Thurs:<br>> http://www.asterisk.org/hello<br>> <br>> asterisk-users mailing list<br>> To UNSUBSCRIBE or update options visit:<br>> http://lists.digium.com/mailman/listinfo/asterisk-users<br></div> </div></body>
</html>