Re: [Freeswitch-users] Freeswitch Ldap Integration

2008-06-02 Thread John Skopis (Lists)
Michael Jerris wrote: > For sip auth we do pass all the hash information from the auth headers > when it does the lookup, so you are able to do the auth in your module > if you care to. We are unable to pass up the raw password as we never > actually have that information. > > Mike > I re

Re: [Freeswitch-users] Freeswitch Ldap Integration

2008-06-01 Thread Faraz R. Khan
Sounds amazing. Thanks a ton! John Skopis (Lists) wrote: > Hi, > I had some free time and decided to add sasl support to mod_xml_ldap. I > only tested kerberos5 auth though. > > I also added support for search filters. > > The problem with the xml_ldap directory stuff is that since freeswitch

Re: [Freeswitch-users] Freeswitch Ldap Integration

2008-06-01 Thread Michael Jerris
For sip auth we do pass all the hash information from the auth headers when it does the lookup, so you are able to do the auth in your module if you care to. We are unable to pass up the raw password as we never actually have that information. Mike On Jun 1, 2008, at 4:11 PM, John Skopis (

Re: [Freeswitch-users] Freeswitch Ldap Integration

2008-06-01 Thread John Skopis (Lists)
Hi, I had some free time and decided to add sasl support to mod_xml_ldap. I only tested kerberos5 auth though. I also added support for search filters. The problem with the xml_ldap directory stuff is that since freeswitch never actually sends the hash (or cleartext password) to the module it

Re: [Freeswitch-users] Freeswitch Ldap Integration

2008-05-28 Thread Faraz R. Khan
Thanks a lot. I intend to use it mostly as a SIP user directory. For the dial-plan I dont mind parsing and syncing XML file across servers (if there were a small cluster). The main deal is AUTHENTICATION. The authentication scheme I wish to keep is Kerberos (with SASL in Ldap for binding). This way

Re: [Freeswitch-users] Freeswitch Ldap Integration

2008-05-28 Thread John Skopis (Lists)
At one point I was very interested in this...then I got a job. =[ I thought mod_ldap was more of a PoC than anything. It might work (I couldn't get it working and unfortunately don't remember exactly why..) but there really isn't much point. I would have to do at least 5 ldap queries (if not m

Re: [Freeswitch-users] Freeswitch Ldap Integration

2008-05-28 Thread Anthony Minessale
We have a concept called the "directory interface" not to be confused with the "user directory". The directory interface is a pluggable abstract API that looks and feels like LDAP only you can plug in anything you want to implement the functions. mod_ldap is a module that registers to this interf

Re: [Freeswitch-users] Freeswitch Ldap Integration

2008-05-28 Thread Michael Jerris
Currently the directory interface is only used for that dialplan, I would like to enhance that in the future. The directory dialploan uses a filter of exten=destination number, and then has name/value pairs, I will see if I can find the schema we used back when we developed it, short of th

[Freeswitch-users] Freeswitch Ldap Integration

2008-05-28 Thread Faraz R. Khan
First of all- Amazing project. Tired of asterisk deadlocking all the time we have been deploying asterisk with OpenSER as the registrar. Freeswitch is a huge relief! This is an extremely important feature we have been looking for. Asterisk realtime ldap integration is very flaky. I found this pag