Auth by ACL/CIDR doesn't find the right user from directory
Hi All, I guess this issue has been discussed before but I could not find a suitable solution. I've this one user with the CIDR declared in directory/default/1000.xml <include> <user id="1000" cidr="12.34.56.78/32,20.0.0.0/8"> <!--ID is the sip username. CIDR is optional -- if specified, these IPs with automatically auth to this user--> <params> <param name="password" value="1234"/> <param name="vm-password" value="1000"/> </params> <variables> <variable name="accountcode" value="1000"/> <variable name="user_context" value="default"/> <variable name="effective_caller_id_name" value="Extension 1000"/> <variable name="effective_caller_id_number" value="1000"/> </variables> </user> Another user 2000 is defined but no CIDR is added there. <user id="2000" cidr="12.34.56.78/32,20.0.0.0/8"> <params> <param name="password" value="1234"/> <param name="vm-password" value="2000"/> </params> <variables> <variable name="accountcode" value="2000"/> <variable name="user_context" value="default"/> <variable name="effective_caller_id_name" value="Extension 2000"/> <variable name="effective_caller_id_number" value="2000"/> </variables> </user> Now, when user 2000 dials out to another extension, ACL is still authenticating the user as 1000. How can I associate 2000 and it's associated params and variables to this call instead of 1000's? -- Thanks, Dipak
Unless your examples are wrong the CIDR is the same on both, How do you tell the two users apart if they both are using the same CIDR? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED) On Feb 13, 2014, at 12:03 PM, Biswas, Dipak <dipak.biswas@mezocliq.com> wrote:
Hi All,
I guess this issue has been discussed before but I could not find a suitable solution.
I've this one user with the CIDR declared in directory/default/1000.xml
<include> <user id="1000" cidr="12.34.56.78/32,20.0.0.0/8"> <!--ID is the sip username. CIDR is optional -- if specified, these IPs with automatically auth to this user--> <params> <param name="password" value="1234"/> <param name="vm-password" value="1000"/> </params> <variables> <variable name="accountcode" value="1000"/> <variable name="user_context" value="default"/> <variable name="effective_caller_id_name" value="Extension 1000"/> <variable name="effective_caller_id_number" value="1000"/> </variables> </user>
Another user 2000 is defined but no CIDR is added there. <user id="2000" cidr="12.34.56.78/32,20.0.0.0/8"> <params> <param name="password" value="1234"/> <param name="vm-password" value="2000"/> </params> <variables> <variable name="accountcode" value="2000"/> <variable name="user_context" value="default"/> <variable name="effective_caller_id_name" value="Extension 2000"/> <variable name="effective_caller_id_number" value="2000"/> </variables> </user>
Now, when user 2
Thanks. My question is exactly the same - what are my possible option to differentiate between two users belonging to same CIDR? In that respect, my example is exactly what I intended to show, isn't it? On Thu, Feb 13, 2014 at 6:25 PM, Brian West <brian@freeswitch.org> wrote:
Unless your examples are wrong the CIDR is the same on both, How do you tell the two users apart if they both are using the same CIDR? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On Feb 13, 2014, at 12:03 PM, Biswas, Dipak <dipak.biswas@mezocliq.com> wrote:
Hi All,
I guess this issue has been discussed before but I could not find a suitable solution.
I've this one user with the CIDR declared in directory/default/1000.xml
<include> <user id="1000" cidr="12.34.56.78/32,20.0.0.0/8"> <!--ID is the sip username. CIDR is optional -- if specified, these IPs with automatically auth to this user--> <params> <param name="password" value="1234"/> <param name="vm-password" value="1000"/> </params> <variables> <variable name="accountcode" value="1000"/> <variable name="user_context" value="default"/> <variable name="effective_caller_id_name" value="Extension 1000"/> <variable name="effective_caller_id_number" value="1000"/> </variables> </user>
Another user 2000 is defined but no CIDR is added there. <user id="2000" cidr="12.34.56.78/32,20.0.0.0/8"> <params> <param name="password" value="1234"/> <param name="vm-password" value="2000"/> </params> <variables> <variable name="accountcode" value="2000"/> <variable name="user_context" value="default"/> <variable name="effective_caller_id_name" value="Extension 2000"/> <variable name="effective_caller_id_number" value="2000"/> </variables> </user>
Now, when user 2
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Thanks, Dipak
If the CIDR/IP matches, then it doesn't require a password. If you can't use the CIDR, then use a username/password. (You can implement some sort of IP checking in your dialplan or via xml_curl, if you want...) -Avi On Fri, Feb 14, 2014 at 4:29 AM, Biswas, Dipak <dipak.biswas@mezocliq.com>wrote:
Thanks. My question is exactly the same - what are my possible option to differentiate between two users belonging to same CIDR? In that respect, my example is exactly what I intended to show, isn't it?
On Thu, Feb 13, 2014 at 6:25 PM, Brian West <brian@freeswitch.org> wrote:
Unless your examples are wrong the CIDR is the same on both, How do you tell the two users apart if they both are using the same CIDR? -- Brian West
Thanks Avi. I considered using xml_curl, but that will slow things down beside other overheads. Secondly, I didn't totally understand what you meant by IP checking in dialplan. Is this something can be done in thru configuration or you're suggesting code change in mod_dialplan_xml/mod_dialplan_directory? Thanks, Dipak On Fri, Feb 14, 2014 at 3:12 AM, Avi Marcus <avi@avimarcus.net> wrote:
If the CIDR/IP matches, then it doesn't require a password. If you can't use the CIDR, then use a username/password.
(You can implement some sort of IP checking in your dialplan or via xml_curl, if you want...)
-Avi
On Fri, Feb 14, 2014 at 4:29 AM, Biswas, Dipak <dipak.biswas@mezocliq.com>wrote:
Thanks. My question is exactly the same - what are my possible option to differentiate between two users belonging to same CIDR? In that respect, my example is exactly what I intended to show, isn't it?
On Thu, Feb 13, 2014 at 6:25 PM, Brian West <brian@freeswitch.org> wrote:
Unless your examples are wrong the CIDR is the same on both, How do you tell the two users apart if they both are using the same CIDR? -- Brian West
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Thanks, Dipak
Where did you get that idea that xml_curl is inefficient? Sent from my iPad
On Feb 14, 2014, at 10:35 AM, "Biswas, Dipak" <dipak.biswas@mezocliq.com> wrote:
Thanks Avi. I considered using xml_curl, but that will slow things down beside other overheads.
Secondly, I didn't totally understand what you meant by IP checking in dialplan. Is this something can be done in thru configuration or you're suggesting code change in mod_dialplan_xml/mod_dialplan_directory?
Thanks, Dipak
On Fri, Feb 14, 2014 at 3:12 AM, Avi Marcus <avi@avimarcus.net> wrote: If the CIDR/IP matches, then it doesn't require a password. If you can't use the CIDR, then use a username/password.
(You can implement some sort of IP checking in your dialplan or via xml_curl, if you want...)
-Avi
On Fri, Feb 14, 2014 at 4:29 AM, Biswas, Dipak <dipak.biswas@mezocliq.com> wrote: Thanks. My question is exactly the same - what are my possible option to differentiate between two users belonging to same CIDR? In that respect, my example is exactly what I intended to show, isn't it?
On Thu, Feb 13, 2014 at 6:25 PM, Brian West <brian@freeswitch.org> wrote: Unless your examples are wrong the CIDR is the same on both, How do you tell the two users apart if they both are using the same CIDR? -- Brian West
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Thanks, Dipak _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I didn't say that mod_xm_curl is inefficient. Sorry, if it came out that way. I was referring to a note from the wiki here<https://wiki.freeswitch.org/wiki/XML_User_Directory_Guide#Alphanumeric_to_numeric_user_mapping>. I use user_data() in local extension bridging. Thanks, Dipak On Wed, Feb 19, 2014 at 12:34 AM, Brian West <brian@freeswitch.org> wrote:
Where did you get that idea that xml_curl is inefficient?
Sent from my iPad
On Feb 14, 2014, at 10:35 AM, "Biswas, Dipak" <dipak.biswas@mezocliq.com> wrote:
Thanks Avi. I considered using xml_curl, but that will slow things down beside other overheads.
Secondly, I didn't totally understand what you meant by IP checking in dialplan. Is this something can be done in thru configuration or you're suggesting code change in mod_dialplan_xml/mod_dialplan_directory?
Thanks, Dipak
On Fri, Feb 14, 2014 at 3:12 AM, Avi Marcus <avi@avimarcus.net> wrote:
If the CIDR/IP matches, then it doesn't require a password. If you can't use the CIDR, then use a username/password.
(You can implement some sort of IP checking in your dialplan or via xml_curl, if you want...)
-Avi
On Fri, Feb 14, 2014 at 4:29 AM, Biswas, Dipak <dipak.biswas@mezocliq.com
wrote:
Thanks. My question is exactly the same - what are my possible option to differentiate between two users belonging to same CIDR? In that respect, my example is exactly what I intended to show, isn't it?
On Thu, Feb 13, 2014 at 6:25 PM, Brian West <brian@freeswitch.org>wrote:
Unless your examples are wrong the CIDR is the same on both, How do you tell the two users apart if they both are using the same CIDR? -- Brian West
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Thanks, Dipak
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Thanks, Dipak
participants (3)
-
Avi Marcus
-
Biswas, Dipak
-
Brian West