asterisk users - Nov 2003 - strange SIP authentication/authorization behaviour

When I have an ip hardphone username setup in my sip.conf :
[109]
type=friend
username=ipphone9
secret=bla-la
host=dynamic
dtmfmode=rfc2833                ; Choices are inband, rfc2833, or info
defaultip=172.20.0.139
mailbox=109             ; Mailbox for message waiting indicator
callerid=ipphone9 <109>
callgroup=1
pickupgroup=1

and this user has a wrong password then calls are denied, but when I 
just change the userID on the phone to a nonexistant for example 110, 
the calls go through !

though I see on the console messages about wrong authentication. I`m 
running a CVS version from friday.

Thanks,


-- 

Anton Yurchenko<phila@dg.net.ua>
Digital Generation

Anton Yurchenko wrote:
> When I have an ip hardphone username setup in my sip.conf :
> [109]
> type=friend
> username=ipphone9
> secret=bla-la
> host=dynamic
> dtmfmode=rfc2833                ; Choices are inband, rfc2833, or info
> defaultip=172.20.0.139
> mailbox=109             ; Mailbox for message waiting indicator
> callerid=ipphone9 <109>
> callgroup=1
> pickupgroup=1
> 
> and this user has a wrong password then calls are denied, but when I 
> just change the userID on the phone to a nonexistant for example 110, 
> the calls go through !
Calls from where to where?

Can you call the phone or can the phone place calls into Asterisk?

/Olle
> though I see on the console messages about wrong authentication. I`m 
> running a CVS version from friday.
> 
> Thanks,
> 
> 

-- 
*** Olle E. Johansson, oej@edvina.net

Mobile +46 70 593 68 51, Edvina AB, http://www.edvina.net
Runbov?gen 10, 192 48 Sollentuna, Sweden
Phone: +46 8 594 78 810, Fax: +46 8 594 78 820

On Mon, Nov 24, 2003 at 06:42:12PM +0200, Anton Yurchenko
wrote:
> When I have an ip hardphone username setup in my sip.conf :
<snip>
> and this user has a wrong password then calls are denied, but when I 
> just change the userID on the phone to a nonexistant for example 110, 
> the calls go through !
(anonymous) sip calls that don't have a peer defined in sip.conf
get sent to the default context (defined in the [general]
section of sip.conf, and 'default' by default)

if you don't want this, change the 'context=' line in sip.conf to
some context that has only the extensions that unknown users are
allowed to call, maybe something like

[anonymous]
exten => _.,1,Congestion

in extensions.conf and

[general]
context=anonymous

in sip.conf

-w

-- 
/~\  The ASCII Ribbon Campaign   | NO MATTER HOW MUCH DRIVING EXPERIENCE YOU
\ /    No HTML/RTF in email      | HAVE, YOU CANNOT IGNORE THE LAWS OF PHYSICS
 X     No Word docs in email     | WITHOUT RUNNING A CONSIDERABLE RISK.
/ \  Respect for open standards  |     -- Soci?t? de l'assurance automibile
du
                                 |        Qu?bec, "Driving a Passenger
Vehicle"

loose username=ipphone9
Not needed.. the [109] is really the username

----- Original Message ----- 
From: "Anton Yurchenko" <phila@dg.net.ua>
To: <asterisk-users@lists.digium.com>
Sent: Monday, November 24, 2003 11:42 AM
Subject: [Asterisk-Users] strange SIP authentication/authorization behaviour

> When I have an ip hardphone username setup in my sip.conf :
> [109]
> type=friend
> username=ipphone9
> secret=bla-la
> host=dynamic
> dtmfmode=rfc2833                ; Choices are inband, rfc2833, or info
> defaultip=172.20.0.139
> mailbox=109             ; Mailbox for message waiting indicator
> callerid=ipphone9 <109>
> callgroup=1
> pickupgroup=1
>
> and this user has a wrong password then calls are denied, but when I
> just change the userID on the phone to a nonexistant for example 110,
> the calls go through !
>
> though I see on the console messages about wrong authentication. I`m
> running a CVS version from friday.
>
> Thanks,
>
>
> -- 
>
> Anton Yurchenko<phila@dg.net.ua>
> Digital Generation
>
>
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users@lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
>