[Freeswitch-users] Question about a1-hash

[Bill W]

Why don't you just store the a1-hash in the database instead of the 
password?

-Bill W.


Mike van Lammeren wrote:
> Hello!
> 
> I have written a Lua script to connect to a database and provide 
> directory information for phones registering with FreeSWITCH.
> 
> My problem is that I store an MD5 hash of the passwords in the database, 
> so I wish there was a way to get FreeSWITCH to authenticate using the 
> MD5 hash of the password provided by the phone, and not the password itself.
> 
> According to the wiki 
> <http://wiki.freeswitch.org/wiki/XML_User_Directory_Guide>, it is 
> possible to pass in a parameter called /a1-hash/ instead of the username 
> and password. The a1-hash parameter is an MD5 hash of a string 
> comprising the username, domain and password, separated by 
> colons. Unfortunately, I can't generate that string, since I don't have 
> the raw password, just the MD5 hash.
> 
> I would have my Lua script do the authentication, but cannot because 
> FreeSWITCH doesn't pass the user's password to the script.
> 
> The best solution I can think of is to enter the MD5 hash of the 
> password in the phone.
> 
> Does anyone have a better idea?
> 
> 
> Mike van Lammeren
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org