[Serusers] Associate an USERNAME with more than one Phone Number
Marian Dumitru
marian.dumitru at voice-sistem.ro
Wed Oct 6 13:44:35 CEST 2004
Hi Nicolas,
Now is clear - it was just a matter of terminology, about what do you
understand by username and by phone number.
So, you have a PBX serving multiple SIP IDs (phone numbers) but with
only one username (auth username).
what you can try is to replace check_from() with is_user_in() - group
checking. Make a group PBX1 and put in it the auth name and all phone
numbers which are allowed.
Instead of check_from(), do:
if (is_user_in("Credentials","PBX1") && is_user_in("From","PBX1") )
{
/*ok*/
}
By this you can check also the relationship between auth username and
phone numbers and which phone numbers are allowed.
Best Regards
Marian Dumitru
Nicolas Ruiz wrote:
> Hi,
>
> For me, you have the DIGEST USERNAME for REGISTRATION (mysql Account
> with a password)
> And the username "phone number" : for example : FROM sip:123145 at domain.
>
> And I want to do: One Digest USERNAME can make calls with 5 or 6
> username for example or use another Security Authentification.
>
> I have read in Ser Admin's Guide, page 29:
>
> /Even it authentication is turned on, there is no relationship between
> authentication username and address of
> record. That means that for example a user authenticating himself
> correctly with *"john.doe"* id may register
> *contacts for "gw.bush".* Site policy may wish to mandate authentication
> id to be equal to username claimed in
> To header field. check_to action from auth module can be used to enforce
> such a policy./
>
> Because if i dont' use the function "check_from", a customer can make
> call with an other Phone Number of an other Customer.
>
> If I use Disget Auth with the function "check_from", only a custmer with
> Digest USERNAME == Contact ID can make call >> It's good.
>
> But if I have a PABX with a GW sip who have only one DIGEST USERNAME,the
> phones who are behind teh PABX can't make calls because they are stopped
> by SER (FUNCTION "check_from",)
>
> Thanks a lot for your help.
>
> NICOLAS RUIZ
>
>
>
>
> -----Message d'origine-----
> De : Marian Dumitru [mailto:marian.dumitru at voice-sistem.ro]
> Envoyé : mercredi 6 octobre 2004 12:53
> À : Nicolas Ruiz
> Cc : serusers at lists.iptel.org
> Objet : Re: [Serusers] Associate an USERNAME with more than one Phone
> Number
>
>
> Hi there,
>
> What's exactly do you understand by "username" and "phone number"?
> AFAIK, in SIP, there is only the username (like sip:username at domain")
> and some possible aliases.
>
> Best regards,
> Marian
>
>
>
> Nicolas Ruiz wrote:
> > Hello,
> >
> > Is it possible to associate an Username with more than one Phone Number ?
> >
> > I have use this function to secure SER :
> > if (!check_from()) {
> > sl_send_reply("403", "Only registered
> > users are allowed");
> > break;
> > };
> >
> > That's only good only when the customer send to SER his Username and the
> > same Phone NUMBER.
> >
> > Can i set a function, who says, with this Username, you are authorize
> > with only this 5 Phone numbers (0155632311,0145265213,0133632211 etc...)
> >
> > Thanks a lot
> >
> > Regards
> >
> > Nicolas RUIZ
> >
> >
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > Serusers mailing list
> > serusers at lists.iptel.org
> > http://lists.iptel.org/mailman/listinfo/serusers
>
More information about the sr-users
mailing list