thanks alot for great reply,

using sip-to-host , ip, domain on realtime directory we found out who steal account informations,because we only serve this servive for users who have ADSL account of our ISP compay...so restict on the range of ip-addresses

but i think there is not any soltion for implement limit only one user login,

thanks so much

From: Michael Collins <msc@freeswitch.org>
To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>
Sent: Thursday, June 28, 2012 8:16 PM
Subject: Re: [Freeswitch-users] multiple registerations coudln't worked correctly!

This is probably the wrong way to handle the situation. There are definitely drawbacks. It sounds like you're wanting a "first come, first served" scenario. The problem is that if the thief gets userA's information then all he would have to do is disconnect the real userA's phone, thereby making that registration go away, then he could register his bogus "userA" and no one would know any better. The only symptom would be that the real userA would not be able to register, but by the time you found out about that the thief could have made all sorts of calls while pretending to be userA.

I believe you need to rethink your security strategy. If the real issue is that someone can steal user account information and use it nefariously then you need to solve THAT problem, or at least mitigate it. For example, just how did the thief steal the credentials?

I get the feeling that trying to do this "I'm first, so no one else can register" thing is a poor way to make things secure. It's kind of like leaving the front door unlocked and then super gluing all your stuff to the floor so no one can walk in and take it.

-MC

On Thu, Jun 28, 2012 at 8:21 AM, Samira Mh <saami_mh@ymail.com> wrote:

suppose we have account with the following information:
extension=1000
secret=12345
callerid=userA

--------------------------
now the user(B,C,D ..) -NOT IMPORTANT who?- stolen the account informations of userA and want to login using userA account
while the userA is now connect to server,but at the same time userB register on sip phone using userA iformations(extesion=1000,secret=12345,...)

and by set multi_registering=false the userA is not connected now, and userB is now connected because only one user able to register
but i don't want this situation appear,i want to set if userA is now connected the other user couldn't connect using same informations
thanksss

From: Peter Olsson <peter.olsson@visionutveckling.se>
To: 'FreeSWITCH Users Help' <freeswitch-users@lists.freeswitch.org>
Sent: Thursday, June 28, 2012 6:51 PM
Subject: Re: [Freeswitch-users] multiple registerations coudln't worked correctly!

I still don’t understand.. :) How could UserA use UserB’s account? Aren’t you using different passwords for the user?

/Peter

Från: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] För Samira Mh
Skickat: den 28 juni 2012 10:05
Till: FreeSWITCH Users Help
Ämne: Re: [Freeswitch-users] multiple registerations coudln't worked correctly!

i have implemented VODSL service using freeswitch,and create accounts for user on the server,but i don't want the userA use the account of userB,

i want to restrict each user only use her/his account not able to use each other account that don't belong to his/her...

also i don't want to restrict this using ip addresses ,want to limit using account

From: Peter Olsson <peter.olsson@visionutveckling.se>
To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>
Sent: Thursday, June 28, 2012 9:44 AM
Subject: Re: [Freeswitch-users] multiple registerations coudln't worked correctly!

The option is to enable multiple-registrations, which will make both registrations work simultaneously.

Why is this even a problem, what problem are you trying to solve?

/Peter

28 jun 2012 kl. 06:21 skrev "Samira Mh" <saami_mh@ymail.com<mailto:saami_mh@ymail.com>>:

is there any solutions for the second registration couldn't overwrite the first one registeration ?

________________________________
From: Peter Olsson <peter.olsson@visionutveckling.se<mailto:peter.olsson@visionutveckling.se>>
To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org<mailto:freeswitch-users@lists.freeswitch.org>>
Sent: Wednesday, June 27, 2012 11:46 PM
Subject: Re: [Freeswitch-users] multiple registerations coudln't worked correctly!

If they end up with only one registration within FS it's just normal. Since the second registration will overwrite the first.

/Peter
________________________________
Från: freeswitch-users-bounces@lists.freeswitch.org<mailto:freeswitch-users-bounces@lists.freeswitch.org> [freeswitch-users-bounces@lists.freeswitch.org<mailto:freeswitch-users-bounces@lists.freeswitch.org>] för Samira Mh [saami_mh@ymail.com<mailto:saami_mh@ymail.com>]
Skickat: den 27 juni 2012 21:05
Till: Free SWITCH Users Help
Ämne: [Freeswitch-users] multiple registerations coudln't worked correctly!

hi,
i have set <param name="multiple-registrations" value="false"/> on internal.xml and switch.conf.xml then
restart freeswitch
but I could register 2 sip phones using the same extension number at the same time!
but i want to only one extension could be register using the same extensions
plz help

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org<mailto:consulting@freeswitch.org>
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

Join Us At ClueCon - Aug 7-9, 2012

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org<http://www.freeswitch.org/>

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org<mailto:consulting@freeswitch.org>
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

Join Us At ClueCon - Aug 7-9, 2012

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

!DSPAM:4febd86932764854317000!

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

Join Us At ClueCon - Aug 7-9, 2012

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

!DSPAM:4fec0eac32768939220457!

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

Join Us At ClueCon - Aug 7-9, 2012

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

Join Us At ClueCon - Aug 7-9, 2012

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

Join Us At ClueCon - Aug 7-9, 2012

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org