Due to the way sip digest auth works, you could not actually validate a password if all you have is the md5 of the password.  You can store the a1 hash, which is an md5 of username:realm:password string.  For more information on how digest authentication works to help understand why what you are trying is not cryptographically possible, check out: http://en.wikipedia.org/wiki/Digest_access_authentication

Mike


On Dec 23, 2014, at 2:09 AM, Shisheer Teli <telishisheer@gmail.com> wrote:

Hi,

I am able to bind with any alise on ldap server except userPassword (MD5) alise.

when i bind password with userPassword , authentication fails.  

I done some following testing

 Test 1: 
when i set openldap userPassword in md5 , in freeswitch cli i saw hash password and authentication failed. 

Test 2: 
when i set openldap userPassword in plain text, in freeswitch cli i can see plain text password and authentication success. 
Authentication works with plain text but not for encrypted password.

Configuration file:
<configuration name="xml_ldap.conf">

<bindings>
<binding name="directory">
  <param name="basedn" value="dc=example,dc=com"/>
  <param name="filter" value="(telephoneNumber=%d)" bindings="directory"/>
  <param name="url" value="ldap://ldap.example.com"/>
  <param name="binddn" value="cn=use,dc=example,dc=com"/>
  <param name="bindpass" value="XXXX"/>
   <trans>
   <tran name="id" mapfrom="uid"/>
   <tran name="password" mapfrom="userPassword"/>
   </trans>
</binding>
</bindings>

</configuration>

Please reply ASAP...