Probably possible with a patch to sofia_reg.c lines 2414-2435, but it'll only work if you know the Realm the phone sends in advance.

A1 hash can work easily inbound since the server sets the realm and so you know it, but it'll be far more unpredictable with user endpoints. In particular it'll work when they call from one phone and fail from others when they don't use the same realm.

It'll also rely on the Sofia-SIP stack exposing the ability - looking at the API I don't see an equivalent of NUTAG_AUTH that takes a hash.


On 6 February 2014 21:05, Yuriy Nasida <nasida@live.ru> wrote:
Guys,

I think you all know there is perfect thing like a1-hash which allow us don't keep passwords as plain text.
But what about reverse-auth-pass ?
 I really use this feature  a lot.  reverse-auth-pass should be equal a user's password as far as I know.
How can I don't  keep reverse-auth-pass as  plain text as well ?

Any thought?
Thanks.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org