Re: [Serusers] Avoiding storing passwords in mysql "subscriber" tablein clear-text

You can use ha1.

modparam("auth_db", "calculate_ha1", 0) modparam("auth_db", "user_column", "username") modparam("auth_db", "password_column", "ha1")

Dave Bath wrote:

Hey Karl,

It might be possible to use encrypted mysql passwords - someone else on the list seems to have mentioned that it might be possible, but I haven't used this before. Otherwise, use radius authentication and it's up to you how you get radius to store the passwords (which could be in a mysql database...) hope that helps slightly?!

Dave

---

From: karl [mailto:ser_newbie@yahoo.com] Sent: 13 October 2004 16:28 To: Dave Bath; serusers@lists.iptel.org Subject: RE: [Serusers] Avoiding storing passwords in mysql "subscriber" tablein clear-text

Hi Dave,

Thanks for your response. Does this mean that it is not possible to achieve this mysql authentication. I happen to be using mysql.

Thanks once again.

Karl

Dave Bath dave@fuuz.com wrote:

Karl,



You could try using radius authentication.  Just google the
archives for some docs on how to use it.



Dave



------------------------------------------------------------------------

From: serusers-bounces@lists.iptel.org
[mailto:serusers-bounces@lists.iptel.org] On Behalf Of karl
Sent: 12 October 2004 08:13
To: serusers@lists.iptel.org
Subject: [Serusers] Avoiding storing passwords in mysql
"subscriber" tablein clear-text



Hi guys,



I would appreciate if someone may help me on the subject.  While
still requiring users to be authenticated against user credentials
(username, password, realm), on the other hand I want to avoid
storing passwords in clear text in mysql "subscriber" table.  Any
ideas?



Thank you in advanced.



Best regards,



Karl