<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:Arial;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=white lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I believe the radius server can do the
digest work (query for the username and password, generate the hash, and compare
the digest sent from the sip message.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> Greger V. Teigre
[mailto:greger@teigre.com] <br>
<b><span style='font-weight:bold'>Sent:</span></b> Tuesday, September 13, 2005
11:37 AM<br>
<b><span style='font-weight:bold'>To:</span></b> Chris St Denis; 'Jaroslaw
Gawron'; serusers@lists.iptel.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [Serusers] SER +
Windows Domain</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Are you sure? AD stores hashed passwords and the digest auth method
must be implemented. Even though the radius server can authenticate against AD
(normally through the LDAP interface), you probably run into problems due to
the hash. Another option is using IAS (Internet Authentication Server),
basically a simple RADIUS server front-end to AD. I don't know if IAS supports
digest, but I wouldn't bet on it.<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>g-)<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>---- Original Message ----<br>
From: Chris St Denis<br>
To: 'Jaroslaw Gawron' ; serusers@lists.iptel.org<br>
Sent: Tuesday, September 13, 2005 07:09 PM<br>
Subject: RE: [Serusers] SER + Windows Domain<br>
<br>
> You could do it with SER’s radius authentication if you get a radius<br>
> server that can interface with windows active directory. <br>
> <br>
> I think FreeRadius can, but I’ve never tried.<br>
> <br>
> <br>
> <br>
> <br>
> From: serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org]<br>
> On Behalf Of Jaroslaw Gawron <br>
> Sent: Tuesday, September 13, 2005 4:33 AM<br>
> To: serusers@lists.iptel.org<br>
> Subject: [Serusers] SER + Windows Domain<br>
> <br>
> Hi all<br>
> <br>
> Is there a way to integrate sip authentication with Windows domain<br>
> database - to integrate function www_authorize with the Active<br>
> Directory ? <br>
> If anyone know how to solve this problem – any suggestions are very<br>
> welcome. <br>
> Best regards,<br>
> <br>
> Jaroslaw Gawron<br>
> <br>
> <br>
> <br>
> _______________________________________________<br>
> Serusers mailing list<br>
> serusers@lists.iptel.org<br>
> http://lists.iptel.org/mailman/listinfo/serusers<o:p></o:p></span></font></p>
</div>
</div>
</body>
</html>