[asterisk-users] skip authentication for REGISTER

[Matt Hamilton]

Thanks Kevin. 

Seems like remotesecret takes over if secret is not defined - I'll do further tests..

The authentication for REGISTERs and SUBSCRIBEs are done at a sip proxy (opensips) - I'll try to take care of the UAC authorization request for NOTIFY there (if possible).

Regards,
Matt



> Date: Tue, 14 Feb 2012 09:44:38 -0600
> From: kpfleming at digium.com
> To: asterisk-users at lists.digium.com
> Subject: Re: [asterisk-users] skip authentication for REGISTER
> 
> On 02/14/2012 08:43 AM, Matt Hamilton wrote:
> > Hi,
> >
> > For REGISTER and SUBSCRIBE requests coming from UACs, is it possible to
> > make Asterisk skip authentication even if a "secret" is defined in
> > sip.conf for the peer; i.e. similar to insecure=invite for INVITE requests?
> >
> > If I leave "secret" blank, Asterisk doesn't require any authentication -
> > this works as I want. However, I also use "SIP NOTIFY" to contact UACs
> > (UACs are set to require authorization for NOTIFY), but without the
> > "secret" defined, Asterisk can't send the correct authorization.
> 
> You can use 'remotesecret' to set the secret string for Asterisk to use 
> to respond to authentication challenges. There isn't any way to make 
> REGISTER/SUBSCRIBE/etc. insecure like there is for INVITEs... I can't 
> imagine that many people would want unauthenticated REGISTERs to be 
> allowed :-)
> 
> -- 
> Kevin P. Fleming
> Digium, Inc. | Director of Software Technologies
> Jabber: kfleming at digium.com | SIP: kpfleming at digium.com | Skype: kpfleming
> 445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
> Check us out at www.digium.com & www.asterisk.org
> 
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>                http://www.asterisk.org/hello
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20120214/1a8ac608/attachment.htm>