<DIV>
<BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">
<P>Hi Antonio,</P>
<P>Following our previous communication re the above subject, I have recently found the time to understand and try out your interesting suggested solution as per email below.</P>
<P>Actually, the solution regarding "ser" worked perfectly well.</P>
<P>However, I am still stuck in the serweb part, in a sense that a user whose password is no longer saved in clear-texts is then unable to log into serweb. It appears as if serweb requires use of clear-text passwords for authentication. </P>
<P>I am currently using CVS Ser 99,and have noted that your reference to the last part of the config.php change the line, namely "$this->clear_text_pw=1;" instead reads $config->clear_text_pw=1;<BR></P>
<P>Thank you in advanced for any further help, while wishing you and all SER users a Happy New Year.<BR></P>
<P><BR> </P>
<META content=Word.Document name=ProgId>
<META content="Microsoft Word 9" name=Generator>
<META content="Microsoft Word 9" name=Originator><LINK href="cid:filelist.xml@01C4ECEF.C9E8C2B0" rel=File-List>
<STYLE>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:553679495 -2147483648 8 0 66047 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";
color:black;}
h1
{mso-style-next:Normal;
margin:0in;
margin-bottom:.0001pt;
text-indent:0in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:1;
tab-stops:list .25in;
font-size:16.0pt;
mso-bidi-font-size:12.0pt;
font-family:"Times New Roman";
color:black;
mso-font-kerning:0pt;
font-weight:normal;
mso-bidi-font-weight:bold;}
h2
{mso-style-next:Normal;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:3.0pt;
margin-left:0in;
text-indent:0in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:2;
tab-stops:list .25in;
font-size:13.0pt;
mso-bidi-font-size:10.0pt;
font-family:"Times New Roman";
color:black;
font-weight:normal;}
h3
{mso-style-next:Normal;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:3.0pt;
margin-left:0in;
text-indent:0in;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:3;
tab-stops:list .25in;
font-size:13.0pt;
mso-bidi-font-size:10.0pt;
font-family:"Times New Roman";
color:black;
font-weight:normal;}
h4
{mso-style-next:Normal;
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
page-break-after:avoid;
mso-outline-level:4;
font-size:13.0pt;
mso-bidi-font-size:12.0pt;
font-family:"Times New Roman";
color:black;
mso-ansi-language:EN-US;
font-weight:normal;
mso-bidi-font-weight:bold;}
p.MsoBodyText, li.MsoBodyText, div.MsoBodyText
{margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:200.0pt;
mso-bidi-font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";
color:black;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;
text-underline:single;}
p.MsoAutoSig, li.MsoAutoSig, div.MsoAutoSig
{margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";
color:black;}
p.Header1, li.Header1, div.Header1
{mso-style-name:"Header 1";
mso-style-update:auto;
margin:0in;
margin-bottom:.0001pt;
text-indent:0in;
mso-pagination:widow-orphan;
tab-stops:list .25in;
font-size:16.0pt;
mso-bidi-font-size:10.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";
color:black;}
span.EmailStyle19
{mso-style-type:personal-reply;
mso-ansi-font-size:10.0pt;
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:Arial;
color:navy;}
@page Section1
{size:595.3pt 841.9pt;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
/* List Definitions */
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</STYLE>
<DIV class=Section1>
<P class=MsoNormal><FONT face=Tahoma color=black size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">-----Original Message-----<BR><B><SPAN style="FONT-WEIGHT: bold">From:</SPAN></B> Antonio Rabena [mailto:antonio@lgatelecom.net]<BR><B><SPAN style="FONT-WEIGHT: bold">Sent:</SPAN></B> 18 October 2004 10:12<BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> karl<BR><B><SPAN style="FONT-WEIGHT: bold">Subject:</SPAN></B> Re: [Serusers] Avoiding storing passwords in mysql "subscriber" table in clear-text</SPAN></FONT></P>
<P class=MsoNormal><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt"> <?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt">You can modify the serctl to store empty value on the password column in mysql subscriber table.<BR><BR>e.g.<BR><BR> QUERY="update $TABLE \<BR> set $HA1_COLUMN='$HA1', $HA1B_COLUMN='$HA1B', $PASSWORD_COLUMN='' \<BR> , $SUB_MODIFIED_COLUMN=now() \<BR> WHERE $SUBSCRIBER_COLUMN='$1' and $REALM_COLUMN='$SIP_DOMAIN';"<BR>and<BR><BR> QUERY="insert into $TABLE \<BR> ($SUBSCRIBER_COLUMN,$REALM_COLUMN,$HA1_COLUMN,\<BR>
$HA1B_COLUMN,$PASSWORD_COLUMN,$EMAIL_COLUMN, $SUB_CREATED_COLUMN, \<BR> $PHP_LIB_COLUMN ) \<BR> values ('$1','$SIP_DOMAIN','$HA1','$HA1B','', '$3', now(), '$HA1' );";<BR><BR><BR><BR>for the serweb..<BR><BR>on the last part of the config.php change the line from<BR><BR> $this->clear_text_pw=1;<BR><BR>to <BR><BR> $this->clear_text_pw=0;<BR><BR><BR><BR>Regards,<BR><BR>Antonio<BR><BR><BR>karl wrote:<BR style="mso-special-character: line-break"><BR style="mso-special-character: line-break"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt">Thanks Jan for your feedback.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt">I may confirm that serctl is generating the follow values:<BR>i) Plain text in the "password" column.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt">ii) Enrcrypted text in the "ha1" column.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt">iii) Encrypted text in the "ha1b" column.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt">However, I refer back to my original objective, namely that while I still require users to be authenticated against user credentials (username, password, realm), on the other hand I want to avoid storing passwords in clear text in mysql "subscriber" table, when creating new user accounts using the serctl add command.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt">Thanks<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0.5in; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt">Karl<BR><B><I><SPAN style="FONT-WEIGHT: bold; FONT-STYLE: italic">Jan Janak <A href="mailto:jan@iptel.org"><jan@iptel.org></A></SPAN></I></B> wrote:<o:p></o:p></SPAN></FONT></P>
<DIV style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: medium none; PADDING-LEFT: 4pt; PADDING-BOTTOM: 0in; BORDER-LEFT: #1010ff 1.5pt solid; PADDING-TOP: 0in; BORDER-BOTTOM: medium none">
<P class=MsoNormal style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: medium none; PADDING-LEFT: 0in; PADDING-BOTTOM: 0in; MARGIN-LEFT: 39.75pt; BORDER-LEFT: medium none; MARGIN-RIGHT: 1in; PADDING-TOP: 0in; BORDER-BOTTOM: medium none; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-border-left-alt: solid #1010FF 1.5pt; mso-padding-alt: 0in 0in 0in 4.0pt"><FONT face="Times New Roman" color=black size=3><SPAN style="FONT-SIZE: 12pt">Make sure that you have proper values in ha1 column (generated<BR>automatically by serctl, if not then you can use gen_ha1 utility to<BR>generate the hashes from plaintext password) and set:<BR><BR>modparam("auth_db", "calculate_ha1", no)<BR>modparam("auth_db", "password_column", ha1)<BR><BR>Jan.<BR><BR>On 12-10 00:12, karl wrote:<BR>> Hi guys,<BR>> <BR>> I would appreciate if someone may help me on the subject. While still requiring users to be authenticated against user credentials (username, password, realm), on the
other hand I want to avoid storing passwords in clear text in mysql "subscriber" table. Any ideas?<BR>> <BR>> Thank you in advanced.<BR>> <BR>> Best regards,<BR>> <BR>> Karl<BR>> <o:p></o:p></SPAN></FONT></P></DIV></DIV><BR><BR>> ATTACHMENT part 2 application/x-pkcs7-signature name=smime.p7s<BR></BLOCKQUOTE></DIV><p>
<hr size=1>Do you Yahoo!?<br>
Meet the <a href="http://my.yahoo.com">all-new My Yahoo!</a> – Try it today!