<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:Arial;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.EmailStyle19
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=white lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>It may be able to just pass on the hash to
the AD or something, I’m not really sure. I just work with a database
backend.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> Greger V. Teigre
[mailto:greger@teigre.com] <br>
<b><span style='font-weight:bold'>Sent:</span></b> Tuesday, September 13, 2005
12:14 PM<br>
<b><span style='font-weight:bold'>To:</span></b> Chris St Denis; 'Jaroslaw
Gawron'; serusers@lists.iptel.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [Serusers] SER +
Windows Domain</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>But in order to generate the hash, the radius server needs the
clear-text password. That is not possible to get from AD.<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>g-)<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>---- Original Message ----<br>
From: Chris St Denis<br>
To: 'Greger V. Teigre' ; 'Jaroslaw Gawron' ; serusers@lists.iptel.org<br>
Sent: Tuesday, September 13, 2005 09:01 PM<br>
Subject: RE: [Serusers] SER + Windows Domain<br>
<br>
> I believe the radius server can do the digest work (query for the<br>
> username and password, generate the hash, and compare the digest sent<br>
> from the sip message. <br>
> <br>
> <br>
> <br>
> <br>
> From: Greger V. Teigre [mailto:greger@teigre.com]<br>
> Sent: Tuesday, September 13, 2005 11:37 AM<br>
> To: Chris St Denis; 'Jaroslaw Gawron'; serusers@lists.iptel.org<br>
> Subject: Re: [Serusers] SER + Windows Domain<br>
> <br>
> Are you sure? AD stores hashed passwords and the digest auth method<br>
> must be implemented. Even though the radius server can authenticate<br>
> against AD (normally through the LDAP interface), you probably run<br>
> into problems due to the hash. Another option is using IAS (Internet<br>
> Authentication Server), basically a simple RADIUS server front-end to<br>
> AD. I don't know if IAS supports digest, but I wouldn't bet on
it. <br>
> g-)<br>
> ---- Original Message ----<br>
> From: Chris St Denis<br>
> To: 'Jaroslaw Gawron' ; serusers@lists.iptel.org<br>
> Sent: Tuesday, September 13, 2005 07:09 PM<br>
> Subject: RE: [Serusers] SER + Windows Domain<br>
> <br>
>> You could do it with SER’s radius authentication if you get a
radius<br>
>> server that can interface with windows active directory.<br>
>> <br>
>> I think FreeRadius can, but I’ve never tried.<br>
>> <br>
>> <br>
>> <br>
>> <br>
>> From: serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org]<br>
>> On Behalf Of Jaroslaw Gawron<br>
>> Sent: Tuesday, September 13, 2005 4:33 AM<br>
>> To: serusers@lists.iptel.org<br>
>> Subject: [Serusers] SER + Windows Domain<br>
>> <br>
>> Hi all<br>
>> <br>
>> Is there a way to integrate sip authentication with Windows
domain<br>
>> database - to integrate function www_authorize with the Active<br>
>> Directory ?<br>
>> If anyone know how to solve this problem – any suggestions are
very<br>
>> welcome.<br>
>> Best regards,<br>
>> <br>
>> Jaroslaw Gawron<br>
>> <br>
>> <br>
>> <br>
>> _______________________________________________<br>
>> Serusers mailing list<br>
>> serusers@lists.iptel.org<br>
>> http://lists.iptel.org/mailman/listinfo/serusers<o:p></o:p></span></font></p>
</div>
</div>
</body>
</html>