I believe the radius server can do the digest work (query for the username and password, generate the hash, and compare the digest sent from the sip message.

 


From: Greger V. Teigre [mailto:greger@teigre.com]
Sent: Tuesday, September 13, 2005 11:37 AM
To: Chris St Denis; 'Jaroslaw Gawron'; serusers@lists.iptel.org
Subject: Re: [Serusers] SER + Windows Domain

 

Are you sure? AD stores hashed passwords and the digest auth method must be implemented. Even though the radius server can authenticate against AD (normally through the LDAP interface), you probably run into problems due to the hash. Another option is using IAS (Internet Authentication Server), basically a simple RADIUS server front-end to AD. I don't know if IAS supports digest, but I wouldn't bet on it.

g-)

---- Original Message ----
From: Chris St Denis
To: 'Jaroslaw Gawron' ; serusers@lists.iptel.org
Sent: Tuesday, September 13, 2005 07:09 PM
Subject: RE: [Serusers] SER + Windows Domain

> You could do it with SER’s radius authentication if you get a radius
> server that can interface with windows active directory.
>
> I think FreeRadius can, but I’ve never tried.
>
>
>
>
> From: serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org]
> On Behalf Of Jaroslaw Gawron
> Sent: Tuesday, September 13, 2005 4:33 AM
> To: serusers@lists.iptel.org
> Subject: [Serusers] SER + Windows Domain
>
> Hi all
>
> Is there a way to integrate sip authentication with  Windows domain
> database - to integrate function www_authorize with the Active
> Directory ? 
> If anyone know how to solve this problem – any suggestions are very
> welcome.
> Best regards,
>
> Jaroslaw Gawron
>
>
>
> _______________________________________________
> Serusers mailing list
> serusers@lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers