[SR-Users] RADIUS authentication

[Olle E. Johansson]

21 dec 2012 kl. 16:55 skrev Daniel-Constantin Mierla <miconda at gmail.com>:

> Hello,
> 
> Kamailio is used a lot in enterprises. Apart of the media processing services (e.g., voicemail, audio conferencing), kamailio offers all needed in an enterprise, including instant messaging and presence.
We've done quite a lot of enterprise-style installations and also integrated with LDAP. As Daniel patiently have repeated, there is a problem with the 
authentication so we can't simply use LDAP authentication, but have successfully implemented LDAP-based authentication in many places.

Do you have any other concerns or ideas on what we can do in the enterprise sector? We're quite open on discussing it.

/O

> 
> It still seems to be unclear for you where is the problem with Kamailio and M$ directory or other existing user authentication systems. Let me rephrase: the problem is in the specifications of SIP, respectively in the user authentication mechanism required by this protocol.
> 
> SIP requires www-digest authentication mechanims. www-digest authentication requires that password is stored in clear text or in HA1 format. Maybe reading the page at next link puts more light:
> 
> - http://en.wikipedia.org/wiki/Digest_access_authentication
> 
> Now, the devices are the problem, because they can authenticate to the server only using www-digest. Kamailio cannot do anything alone.
> 
> Alternative to www-digest authentication is to use ssl certificates. That is fine for Kamailio, but not many sip phones support it.
> 
> Hope is more clear now. Kamailio is as friendly to enterprises as it is for carriers or operators. It is nothing that can be done more to run in enterprise environment.
> 
> Cheers,
> Daniel
> 
> On 12/21/12 11:20 AM, Moacir Ferreira wrote:
>> 
>> Don’t get me wrong… Kamailio is just a great product as it is. Actually I think it does much more than it would be necessary as a carrier grade software. My idea is to have more people involved discussing the “enterprise” issues and possible solutions for problems like the one I described. The “impression” that I have is that Kamailio’s community is much more devoted to the “carrier” side of the software than to the use of it on enterprises.
>> 
>> 
>>  
>> 
>> 
>> Moacir
>> 
>> 
>>  
>> > Date: Fri, 21 Dec 2012 10:41:25 +0200
>> > To: sr-users at lists.sip-router.org
>> > From: jh at tutpro.com
>> > Subject: Re: [SR-Users] RADIUS authentication
>> > 
>> > Moacir Ferreira writes:
>> > 
>> > > So my next question is: is it there on the Kamailio community anyone
>> > > willing to work on a “Kamailio Enterprise Edition”?
>> > 
>> > what do you mean by such an edition? do you want to integrate asterisk
>> > like pbx capabilities to k or what? if so, my understanding is that
>> > most k folks want to keep them separate and just connect ip pbxes to k
>> > like any other sip uas.
>> > 
>> > -- juha
>> > 
>> > _______________________________________________
>> > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>> > sr-users at lists.sip-router.org
>> > http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>> 
>> 
>> _______________________________________________
>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>> sr-users at lists.sip-router.org
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
> 
> -- 
> Daniel-Constantin Mierla - http://www.asipto.com
> http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20121221/9f00066f/attachment.htm>