auth-calls false means we won't challenge invite, accept-blind-auth means if auth headers are there, we ignore them. Mike On Aug 21, 2012, at 1:57 PM, Daniel-Constantin Mierla <miconda@gmail.com> wrote:
Hello,
in the past I used to set:
<param name="auth-calls" value="false"/>
in the sip profile in order to skip user authentication for calls.
Lately I started to play a bit with 1.2 stable branch and seems that setting auth-calls to false is no longer doing what I expected, calls being challenged for user authentication.
Setting instead the accept-blind-auth to false got me what I wanted, like:
<!-- accept any authentication without actually checking (not a good feature for most people) --> <param name="accept-blind-auth" value="true"/>
But from the comment (checked the wiki as well, but has the same text) is a bit unclear what is the real purpose for it.
Isn't auth-calls=false supposed to accept calls without user authentication anymore?
For this particular case, I play some announcements, like 'user not available', and should work also for calls coming from outside. The access is restricted by IP address ACL, allowing SIP traffic only from my Kamailio instance.