<DIV>
<DIV>Hi Antonio,</DIV>
<DIV> </DIV>
<DIV>Thanks for your feedback.</DIV>
<DIV> </DIV>
<DIV>Actually, as you suggested I had already tried adding the following modparam statements in the ser.cfg file:</DIV>
<DIV> </DIV>
<DIV>modparam("auth_db", "calculate_ha1", 0)<BR>modparam("auth_db", "password_column", "ha1")<BR></DIV>
<DIV>.... and their effect is such that user authentication makes use of the hashed password in the "ha1" password column created during user creation using "serctl add" command.</DIV>
<DIV><BR>On the other hand, what I am really after is that on user creation using serctl add command, the password column "password" is not left in plain text. Is this possible? or is it still required for SerWeb authentication?</DIV>
<DIV> </DIV>
<DIV>One final thing, I have not added the following modparam statement:</DIV>
<DIV> </DIV>
<DIV>modparam("auth_db", "user_column", "username")</DIV>
<DIV> </DIV>
<DIV>.... it is so by default.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Thanks</DIV>
<DIV> </DIV>
<DIV>Karl</DIV><BR><BR><B><I>Antonio Rabena <antonio@lgatelecom.net></I></B> wrote:
<BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">You can use ha1.<BR><BR>modparam("auth_db", "calculate_ha1", 0)<BR>modparam("auth_db", "user_column", "username")<BR>modparam("auth_db", "password_column", "ha1")<BR><BR><BR>Dave Bath wrote:<BR>
<BLOCKQUOTE cite=midEAB82DD488A9E743A7C0D6B1AD298D26061EF3@hermes.intranet.fuuz.com type="cite">
<META content="Microsoft Word 11 (filtered medium)" name=Generator>
<STYLE>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</STYLE>
<?xml:namespace prefix = o /><o:SmartTagType name="City" namespaceuri="urn:schemas-microsoft-com:office:smarttags"><o:SmartTagType name="place" namespaceuri="urn:schemas-microsoft-com:office:smarttags"><o:SmartTagType name="PersonName" namespaceuri="urn:schemas-microsoft-com:office:smarttags">
<STYLE>
st1\:*{behavior:url(#default#ieooui) }
</STYLE>
<STYLE>
<!--
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.SHAPE
        {behavior:url(#default#VML);}
/* Font Definitions */
@font-face
        {font-family:"Trebuchet MS";
        panose-1:2 11 6 3 2 2 2 2 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0pt;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman";}
p.MsoFootnoteText, li.MsoFootnoteText, div.MsoFootnoteText
        {margin:0pt;
        margin-bottom:.0001pt;
        font-size:9.0pt;
        font-family:"Trebuchet MS";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {color:blue;
        text-decoration:underline;}
p
        {mso-margin-top-alt:auto;
        margin-right:0pt;
        mso-margin-bottom-alt:auto;
        margin-left:0pt;
        font-size:12.0pt;
        font-family:"Times New Roman";}
span.EmailStyle19
        {mso-style-type:personal;
        font-family:Arial;
        color:navy;}
span.EmailStyle20
        {mso-style-type:personal-reply;
        font-family:Arial;
        color:navy;}
@page Section1
        {size:612.0pt 792.0pt;
        margin:42.55pt 42.55pt 42.55pt 42.55pt;}
div.Section1
        {page:Section1;}
-->
</STYLE>
</o:SmartTagType></o:SmartTagType></o:SmartTagType>
<DIV class=Section1>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Hey Karl,<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"><BR>It might be possible to use encrypted mysql passwords – someone else on the list seems to have mentioned that it might be possible, but I haven’t used this before. Otherwise, use radius authentication and it’s up to you how you get radius to store the passwords (which could be in a mysql database…) hope that helps slightly?!<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Dave<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<DIV>
<DIV class=MsoNormal style="TEXT-ALIGN: center" align=center><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">
<HR tabIndex=-1 align=center width="100%" SIZE=2>
</SPAN></FONT></DIV>
<P class=MsoNormal><B><FONT face=Tahoma size=2><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">From:</SPAN></FONT></B><FONT face=Tahoma size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"> karl [<A class=moz-txt-link-freetext href="mailto:ser_newbie@yahoo.com">mailto:ser_newbie@yahoo.com</A>] <BR><B><SPAN style="FONT-WEIGHT: bold">Sent:</SPAN></B> 13 October 2004 16:28<BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> <?xml:namespace prefix = st1 /><st1:PersonName w:st="on">Dave Bath</st1:PersonName>; <A class=moz-txt-link-abbreviated href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</A><BR><B><SPAN style="FONT-WEIGHT: bold">Subject:</SPAN></B> RE: [Serusers] Avoiding storing passwords in mysql "subscriber" tablein clear-text</SPAN></FONT><o:p></o:p></P></DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"><o:p> </o:p></SPAN></FONT></P>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Hi Dave,<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Thanks for your response. Does this mean that it is not possible to achieve this mysql authentication. I happen to be using mysql.<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Thanks once again.<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Karl <BR><BR><st1:PersonName w:st="on"><B><I><SPAN style="FONT-WEIGHT: bold; FONT-STYLE: italic">Dave <st1:City w:st="on"><st1:place w:st="on">Bath</st1:place></st1:City></SPAN></I></B></st1:PersonName><B><I><SPAN style="FONT-WEIGHT: bold; FONT-STYLE: italic"> <A class=moz-txt-link-rfc2396E href="mailto:dave@fuuz.com"><dave@fuuz.com></A></SPAN></I></B> wrote:<o:p></o:p></SPAN></FONT></P></DIV>
<BLOCKQUOTE style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0pt; BORDER-TOP: medium none; MARGIN-TOP: 5pt; PADDING-LEFT: 4pt; MARGIN-BOTTOM: 5pt; PADDING-BOTTOM: 0pt; MARGIN-LEFT: 3.75pt; BORDER-LEFT: 1.5pt solid; PADDING-TOP: 0pt; BORDER-BOTTOM: medium none">
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Karl,<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">You could try using radius authentication. Just google the archives for some docs on how to use it.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Dave<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<DIV>
<DIV class=MsoNormal style="TEXT-ALIGN: center" align=center><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">
<HR tabIndex=-1 align=center width="100%" SIZE=2>
</SPAN></FONT></DIV>
<P class=MsoNormal><B><FONT face=Tahoma size=2><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">From:</SPAN></FONT></B><FONT face=Tahoma size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"> <A class=moz-txt-link-abbreviated href="mailto:serusers-bounces@iptel.org">serusers-bounces@iptel.org</A> [<A class=moz-txt-link-freetext href="mailto:serusers-bounces@iptel.org">mailto:serusers-bounces@lists.iptel.org</A>] <B><SPAN style="FONT-WEIGHT: bold">On Behalf Of </SPAN></B>karl<BR><B><SPAN style="FONT-WEIGHT: bold">Sent:</SPAN></B> 12 October 2004 08:13<BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> <A class=moz-txt-link-abbreviated href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</A><BR><B><SPAN style="FONT-WEIGHT: bold">Subject:</SPAN></B> [Serusers] Avoiding storing passwords in mysql "subscriber" tablein clear-text</SPAN></FONT><o:p></o:p></P></DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"><o:p> </o:p></SPAN></FONT></P>
<DIV>
<DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Hi guys,<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">I would appreciate if someone may help me on the subject. While still requiring users to be authenticated against user credentials (username, password, realm), on the other hand I want to avoid storing passwords in clear text in mysql "subscriber" table. Any ideas?<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Thank you in advanced.<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Best regards,<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">Karl</SPAN></FONT></P></DIV></DIV></DIV></BLOCKQUOTE></DIV></BLOCKQUOTE></BLOCKQUOTE></DIV><p>
                <hr size=1>Do you Yahoo!?<br><a
href="http://vote.yahoo.com">vote.yahoo.com</a> - Register online to vote today!