[Home]

Summary:ASTERISK-19200: Not work alwaysauthreject=yes
Reporter:Tyuta Vitalii (zeratyl)Labels:
Date Opened:2012-01-14 09:30:13.000-0600Date Closed:2012-01-18 00:25:10.000-0600
Priority:MajorRegression?
Status:Closed/CompleteComponents:
Versions:1.8.8.1 Frequency of
Occurrence
Related
Issues:
Environment:Attachments:
Description:Maybe a bug. But at the same settings in version 1.8.5 to work properly. Use alwaysauthreject = yes but when you try to false authentication:

[Jan 14 13:14:33] NOTICE[30879]: chan_sip.c:24431 handle_request_register: Registration from '<sip:none@192.168.254.24:5060>' failed for '85.26.155.143:39801' - No matching peer found

and should be:

Sending fake auth rejection for device "none"

sip.conf

{noformat}
[general]
allowguest=no
allowoverlap=yes
allowsubscribe=no
allowtransfers=yes
alwaysauthreject=yes
udpbindaddr=0.0.0.0:5060
srvlookup=yes
jbenable=yes
videosupport=yes
autocreatepeer=no
disallow=all
allow=speex16
allow=speex
allow=gsm
allow=alaw
allow=h264
allow=h261
context=incoming-default
externaddr=193.64.145.26
localnet=192.168.245.0/24
localnet=192.168.250.0/24
localnet=192.168.254.0/24
tos_sip=cs3
tos_audio=ef
tos_video=af41
defaultexpirey=300
session-timers=originate
session-expires=1800
session-minse=90
session-refresher=uas
{noformat}
Comments:By: Stefan Schmidt (schmidts) 2012-01-17 07:38:17.379-0600

imho alwaysauthreject still works and does what it should do. if you try to register with a unknown peer you will get a 401 repsone (with allwaysauthreject=yes) and a 404 repsonse if allwaysauthreject is turned off.

maybe only the cli output has changed but i dont think this is a bug.

By: Tyuta Vitalii (zeratyl) 2012-01-18 00:25:10.632-0600

Indeed SIP/2.0 401 Unauthorized returns as it should. Not tested SIP protocol, and had to do it immediately. Embarrassed that changed the output cli. Sorry, thanks for the clarification.