[OpenSIPS-Users] access to password as variable?

[Steven E. Ames]

Thanks. I'll start down the radius path. My problem with avp_db_query is I don't actually have a password. The idea here is to let a few select devices that we use internally to REGISTER in a dynamic fashion because the password they are presenting can be generated by sending their username through a hashing algorithm. So they don't actually have passwords or even usernames in the database. My original plan was just to exec_avp sending username and password and getting back a GO/NO_GO. Now it looks like it'll be send username/password to radius which execs script and sends back go/no_go. More complicated but you do what you gotta to make the powers that be happy.

-----Original Message-----
From: users-bounces at lists.opensips.org
[mailto:users-bounces at lists.opensips.org]On Behalf Of Jeff Pyle
Sent: Friday, October 16, 2009 4:15 PM
To: OpenSIPS users mailling list
Subject: Re: [OpenSIPS-Users] access to password as variable?


If you did the avp_db_query after a successful registration, you'd know the
one in the database was the one the user sent.

I don't know if there's any way to recover the original source password from
the md5 digest sent in the authorization header, let alone report it in a
pseudovariable.


- Jeff



On 10/16/09 4:13 PM, "Steven E. Ames" <sames at officescape.com> wrote:

>
> Good thought, but no. The password being sent in the REGISTER message is the
> one I need.
>
> -----Original Message-----
> From: users-bounces at lists.opensips.org
> [mailto:users-bounces at lists.opensips.org]On Behalf Of Jeff Pyle
> Sent: Friday, October 16, 2009 3:47 PM
> To: OpenSIPS users mailling list
> Subject: Re: [OpenSIPS-Users] access to password as variable?
>
>
> Steven,
>
> Could you do a custom avp_db_query to query the subscriber table and load it
> that way?  This assumes you're using cleartext passwords in your db table.
> And, it is a bit of overkill but a fair bit leaner than configuring radius
> for this purpose only.
>
> The newer versions of Opensips allow you specify multiple avpops db_urls.
> You could define a custom one for this if you needed to.
>
>
> - Jeff
>
>
>
> On 10/16/09 3:42 PM, "Steven E. Ames" <sames at officescape.com> wrote:
>
>>
>> Is there a way to access the REGISTER password as a variable? I'm doing a
>> little app where I need to send that password to an external script and can't
>> seem to find a way to snag it... my next step is going to be to invoke
>> radius_auth (because I can access the password and invoke an external script
>> from freeradius) but this seems overkill instead of just sending it as a
>> variable to an exec_avp. Thoughts?
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users


_______________________________________________
Users mailing list
Users at lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users