Hi all

I store user authentication data on a subscriber table with precalculated
hashes for obvious reasons.  Lately we are having issues with these new AI
conversations services. They send requests with random realms, especially
with IP addresses. What I understand, if I store the plain text
password and calculate ha1 at request time, I can accept these requests
even if the realm is different. But I don't want to do that. I tried to
tweak auth_db, when I set `use_domain` to 0, Opensips does not add the
realm to the query but still use is on ha1 challenge since the RFC requires
I think.
Is there a best practice to handle this issue?

Best regards

-- 
Volkan Oransoy
_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Reply via email to