[Freeswitch-users] Question about a1-hash

[Mike van Lammeren]

Hello!

I have written a Lua script to connect to a database and provide directory
information for phones registering with FreeSWITCH.

My problem is that I store an MD5 hash of the passwords in the database, so
I wish there was a way to get FreeSWITCH to authenticate using the MD5 hash
of the password provided by the phone, and not the password itself.

According to the
wiki<http://wiki.freeswitch.org/wiki/XML_User_Directory_Guide>,
it is possible to pass in a parameter called *a1-hash* instead of the
username and password. The a1-hash parameter is an MD5 hash of a string
comprising the username, domain and password, separated by
colons. Unfortunately, I can't generate that string, since I don't have the
raw password, just the MD5 hash.

I would have my Lua script do the authentication, but cannot because
FreeSWITCH doesn't pass the user's password to the script.

The best solution I can think of is to enter the MD5 hash of the password in
the phone.

Does anyone have a better idea?


Mike van Lammeren
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20100114/a1bd9bb2/attachment-0002.html