[asterisk-users] alwaysauthreject=yes not working as expected

[Richard Mudgett]

> Asterisk 1.4.42
> 
> Set alwaysauthreject=yes in [general] section of sip.conf.
> Restarted asterisk
> 
> However when I attempt to register I still get:
> [2012-08-08 21:11:34] NOTICE[15689] chan_sip.c: Registration from
> '<sip:0003330822222261336 at domain.com>' failed for '121.98.1.1' -
> Wrong
> password
> [2012-08-08 21:12:42] NOTICE[15689] chan_sip.c: Registration from
> '<sip:000333082222226133 at domain.com>' failed for '121.98.1.1' - No
> matching
> peer found
> 
> Based on the Asterisk security advisory
> (http://downloads.asterisk.org/pub/security/AST-2011-011.html) I
> would have
> expected 1.4.42 to respond the same in both cases (since the issue
> was fixed
> in 1.4.41.2). Am I missing something obvious?

Yes.

Those are log messages for the administrator's benefit.  They are not
SIP messages sent in response to the REGISTER request.  The SIP
messages sent are supposed to be the same not the logging messages.

Richard