[OpenSIPS-Users] Memcache and calculate_ha1 disabled

Bogdan-Andrei Iancu bogdan at voice-system.ro
Tue Aug 3 00:08:00 CEST 2010


mayamatakeshi wrote:
>
> On Mon, Aug 2, 2010 at 12:48 AM, Bogdan-Andrei Iancu 
> <bogdan at voice-system.ro <mailto:bogdan at voice-system.ro>> wrote:
>
>     Hi Takeshi,
>
>     The tutorial was written for the case where you provide the plain-text
>     password and the auth engine calculates the ha1.
>
>     If you want to disable the HA1 calculation, in that case you need to
>     cache it and to provide it to auth engine via the password AVP (for pv
>     authentication).
>
>     Actually, aside of changing the "calculate_ha1" param , you should not
>     change anything else - if your changes are consistent (like adding in
>     "password" column in DB the HA1 value), the caching mechanism will
>     work
>     unchanged - it will load, cache and provide the HA1 instead of passwd.
>
>
> But Bogdan, it might not happen that www/proxy_authorize would need to 
> use the password from column ha1b instead (username in credentials 
> containing "@domain")?
www/proxy_authorize uses (as password) the column indicated by the 
"password_column" param (see 
http://www.opensips.org/html/docs/modules/1.6.x/auth_db.html#id227245).

So, you need to load (via load_credentials) exactly the same field you 
use from the subscriber table as password.

Regards,
Bogdan

>
> So If that happens, next time when I get the password from cache, it 
> will not work.
> Am I missing something?
>
> br,
> takeshi
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>   


-- 
Bogdan-Andrei Iancu
OpenSIPS Bootcamp
20 - 24 September 2010, Frankfurt, Germany
www.voice-system.ro




More information about the Users mailing list