<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">We don't have the password so we can't pass it to you please read: <a href="http://en.wikipedia.org/wiki/Digest_access_authentication">http://en.wikipedia.org/wiki/Digest_access_authentication</a><div><br></div><div>Its how the authentication is done and we are never given the text of the password you are however given the details so you can calculate the response and verify it without having to know the password.</div><div><br></div><div>/b</div><div><br><div><div>On Jan 14, 2010, at 9:44 AM, Mike van Lammeren wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">Hello!<div><br></div><div>I have written a Lua script to connect to a database and provide directory information for phones registering with FreeSWITCH.</div><div><br></div><div>My problem is that I store an MD5 hash of the passwords in the database, so I wish there was a way to get FreeSWITCH to authenticate using the MD5 hash of the password provided by the phone, and not the password itself.</div><div><br></div><div>According to the<span class="Apple-converted-space"> </span><a href="http://wiki.freeswitch.org/wiki/XML_User_Directory_Guide">wiki</a>, it is possible to pass in a parameter called<span class="Apple-converted-space"> </span><i>a1-hash</i><span class="Apple-converted-space"> </span>instead of the username and password. The a1-hash parameter is an MD5 hash of a string comprising the username, domain and password, separated by colons. Unfortunately, I can't generate that string, since I don't have the raw password, just the MD5 hash.</div><div><br></div><div>I would have my Lua script do the authentication, but cannot because FreeSWITCH doesn't pass the user's password to the script.</div><div><br></div><div>The best solution I can think of is to enter the MD5 hash of the password in the phone.</div><div><br></div><div>Does anyone have a better idea?</div><div><br></div><div><br></div><div>Mike van Lammeren</div></span></blockquote></div><br></div></body></html>