[OpenSIPS-Users] Is auth_db calculate_ha1 parameter documentation wrong?

Jacek Konieczny jajcus at jajcus.net
Fri May 11 10:52:40 CEST 2012


From
http://www.opensips.org/html/docs/modules/1.8.x/auth_db.html#id250014 :

> 1.3.6. calculate_ha1 (integer)
> 
> This parameter tells the server whether it should use plaintext
> passwords or a pre-calculated HA1 string for authentification.
> 
> If the parameter is set to 1 and the username parameter of credentials
> contains also “@domain” (some user agents append the domain to the
> username parameter), then the server will use the HA1 values from the
> column specified in the “password_column_2” parameter. If the username
> parameter doesn't contain a domain, the server will use the HA1 values
> from the column given in the “password_column”parameter.
> 
> If the parameter is set to 0 then the HA1 value will be calculated from
> the column specified in the “password_column” parameter. 

Isn't that the other way round?

I have:

modparam("auth_db", "calculate_ha1", 1)
modparam("auth_db", "password_column", "password")

…'password' column contains the plain password and it works, although it
should not according to the documentation. The source code also looks
like the pre-computed HA1 values are used when calculate_ha1=0.

Greets,
        Jacek



More information about the Users mailing list