Hi Bill! That's a perfectly reasonable suggestion, but for this solution, I need a username/password combo that spans domains. Also, the password is used in other places too. Thanks for the reply! Mike van Lammeren On Thu, Jan 14, 2010 at 11:15 AM, Bill W <freeswitch@aastral.net> wrote:
Why don't you just store the a1-hash in the database instead of the password?
-Bill W.
Mike van Lammeren wrote:
Hello!
I have written a Lua script to connect to a database and provide directory information for phones registering with FreeSWITCH.
My problem is that I store an MD5 hash of the passwords in the database, so I wish there was a way to get FreeSWITCH to authenticate using the MD5 hash of the password provided by the phone, and not the password itself.
According to the wiki <http://wiki.freeswitch.org/wiki/XML_User_Directory_Guide>, it is possible to pass in a parameter called /a1-hash/ instead of the username and password. The a1-hash parameter is an MD5 hash of a string comprising the username, domain and password, separated by colons. Unfortunately, I can't generate that string, since I don't have the raw password, just the MD5 hash.
I would have my Lua script do the authentication, but cannot because FreeSWITCH doesn't pass the user's password to the script.
The best solution I can think of is to enter the MD5 hash of the password in the phone.
Does anyone have a better idea?
Mike van Lammeren
------------------------------------------------------------------------
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org