Doug,
If I understood your claim correctly, the INVITE request goes from Kamailio to Asterisk, and Asterisk returns a 401 challenge. This is because Asterisk doesn't trust Kamailio as an incoming source. It probably needs a [correct] sip.conf peer.
-- Alex