[Freeswitch-users] Question about a1-hash

[Mike van Lammeren]

Hi Bill!

That's a perfectly reasonable suggestion, but for this solution, I need a
username/password combo that spans domains. Also, the password is used in
other places too.

Thanks for the reply!

Mike van Lammeren


On Thu, Jan 14, 2010 at 11:15 AM, Bill W <freeswitch at aastral.net> wrote:

> Why don't you just store the a1-hash in the database instead of the
> password?
>
> -Bill W.
>
>
> Mike van Lammeren wrote:
> > Hello!
> >
> > I have written a Lua script to connect to a database and provide
> > directory information for phones registering with FreeSWITCH.
> >
> > My problem is that I store an MD5 hash of the passwords in the database,
> > so I wish there was a way to get FreeSWITCH to authenticate using the
> > MD5 hash of the password provided by the phone, and not the password
> itself.
> >
> > According to the wiki
> > <http://wiki.freeswitch.org/wiki/XML_User_Directory_Guide>, it is
> > possible to pass in a parameter called /a1-hash/ instead of the username
> > and password. The a1-hash parameter is an MD5 hash of a string
> > comprising the username, domain and password, separated by
> > colons. Unfortunately, I can't generate that string, since I don't have
> > the raw password, just the MD5 hash.
> >
> > I would have my Lua script do the authentication, but cannot because
> > FreeSWITCH doesn't pass the user's password to the script.
> >
> > The best solution I can think of is to enter the MD5 hash of the
> > password in the phone.
> >
> > Does anyone have a better idea?
> >
> >
> > Mike van Lammeren
> >
> >
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > FreeSWITCH-users mailing list
> > FreeSWITCH-users at lists.freeswitch.org
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20100114/cc6f43e5/attachment-0002.html