Defect #2945
closedDomain enrollment to sip2sip
0%
Description
Hi,
I am a long time user of the sip2sip service, and I'm very happy with it.
I'm thinking of setting up sip accounts on my own domains, which obviously means adding the relevant entries to my DNS server. However, looking at the SIP account creation process on your system, it seems that anyone can add an account under any domain. The upshot of this would be that once I've pointed the DNS lookup to your servers by adding the NAPTR and SVR records, another user could also set up SIP accounts using my domain.
Is there any mechanism in place to prevent the creation of SIP accounts on a domain that already has one or more SIP accounts configured by a different user?
In other words, if I owned example.org, and added the required DNS entries, then created a login here:
https://sipthor.net/provisioning_mdns.phtml?1=1&service=sip_domains@sipthor
Then added a SIP account on example.org, could somebody else create a new login at the above url, independently of me, and create sip accounts under example.org, or do prevent usage of the same domain over several independent logins?
Thanks.
Updated by John Bradford over 9 years ago
OK, I answered my own question by creating a test account and trying to register an already registered domain, and it failed, which is the desired behaviour.
Sorry for the noise.