S McGowan wrote:> Hate to keep asking, but I've not been able to find it covered online
or in
> docs.
>
> I know you can define multiple domains in the sip.conf, but can you define
> multiple realms?
>
> For instance, I use a central server that handles a couple of area codes,
and I
> would like to be able to have authentication realms such as
> <areacode>.hostname.domain.
>
> Anyone?
>
No you can't, but it's a good input for the new chan_sip3 :-)
For those of you that don't know what an authentication realm is:
A userID and password is valid within a HTTP auth realm. (SIP uses HTTP
digest authentication). A realm can cover one to several servers, but if
it covers several servers all servers has to be able to authenticate all
users within the realm.
The realm ID is a string that has to be globally unique and therefore
the recommendation is to use the DNS host name if the realm covers only
one server or a domain if it covers multiple servers.
In Asterisk, you can set *one* realm in sip.conf for your Asterisk PBX.
By default this is "asterisk" which if you use it can't be
considered as
globally unique ;-)
You can also define authentications for outbound calls based on realms,
teaching Asterisk how to authenticate in various domains if challenged.
/O