<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
the constraint to have access to text password or HA1 format (md5
over username, password, realm) comes from WWW Authentication
mechanism which is used by SIP.<br>
<br>
Writing something different in kamailio would be possible (it is
open source), but you don't have phones able to do it and provide
the adequate details.<br>
<br>
The only alternative now is using tls/ssl client certificates that
attest who is the user/phone.<br>
<br>
Cheers,<br>
Daniel<br>
<br>
<div class="moz-cite-prefix">On 21/04/14 13:56, Yoann Gini wrote:<br>
</div>
<blockquote
cite="mid:F2128B1C-617D-4EAA-860F-B86D0615819C@gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
Hello,
<div><br>
</div>
<div>My users are managed on a common LDAP / Kerberos setup. I
don’t have access in any ways to the user password in clear text
mode.</div>
<div><br>
</div>
<div>I’ve start to follow this tutorial <a moz-do-not-send="true"
href="http://www.kamailio.org/wiki/tutorials/mini-howto-admin/ldap-user-auth">http://www.kamailio.org/wiki/tutorials/mini-howto-admin/ldap-user-auth</a> and
check this documenation <a moz-do-not-send="true"
href="http://kamailio.org/docs/modules/4.1.x/modules/ldap.html">http://kamailio.org/docs/modules/4.1.x/modules/ldap.html</a></div>
<div><br>
</div>
<div>But it seems LDAP module provided in Kamailio don’t handle
this scenario, it except to have user password in clear text
mode in the LDAP database (wrong in so many ways…).</div>
<div><br>
</div>
<div>Do we have a way with existing Kamailio plugin to use a
authentication backend who don’t provide access to clear text
password?</div>
<div><br>
</div>
<div>I provide different authentication « adapter » who can help
any service not compatible with Kerberos to handle
authentication:</div>
<div>- ldap bind</div>
<div>- sasl</div>
<div>- pam</div>
<div><br>
</div>
<div>Do we’ve a way to use one of this backend as an
authentication service (and not just a users database).</div>
<div><br>
</div>
<div>Best regards,</div>
<div>Yoann</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a>
<a class="moz-txt-link-freetext" href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla - <a class="moz-txt-link-freetext" href="http://www.asipto.com">http://www.asipto.com</a>
<a class="moz-txt-link-freetext" href="http://twitter.com/#!/miconda">http://twitter.com/#!/miconda</a> - <a class="moz-txt-link-freetext" href="http://www.linkedin.com/in/miconda">http://www.linkedin.com/in/miconda</a></pre>
</body>
</html>