Hi all, I have thoroughly read the available documentation and I can't seem to find a workaround for my setup... I'm trying to create a phone conference line that users would call using a unique phone number (no matter if they are moderators or just plain users). I use Asterisk 1.2.6 The available conferences are defined as follows: conf => 1000,user pin1, moderator pin1 conf => 1001,user pin2, moderator pin2 conf => 1002,user pin3, moderator pin3 ... conf => 1009, user pin9, moderator pin9 The users are prompted whether they are a moderator or a user. When they choose, they are redirected to the conference they request: - using options aAPsX for moderators (moderator + marked + ask PIN + allow menu using *) - using options Psw for users (ask PIN + allow menu + wait for a marked user) My problem is that if a user chooses the "moderator" option, he can authenticate using any of the two PINs, and he can become an moderator for the conference by knowing only the user PIN... I think using two different phone numbers (one for users and one for moderators) is neither practical nor safe. Is there a way to authenticate users against only one of the password? For instance, math the password provided against only the moderator PIN, or only the user PIN. Thank you for your help, Silviu PS. Here is the dialplan : [ConfStart] exten => s,1,Answer exten => s,2,Set(TIMEOUT(response)=5) exten => s,3,Set(LANGUAGE()=conf) exten => s,4,Wait(1) exten => s,5,Background(welcome) ; "welcome, press * if you are a user of hold the line if you are a moderator" exten => *,1,MeetMe(|iMPsw|) ; for regular users exten => t,1,MeetMe(|aAiMPsX|) ; for moderators exten => i,1,GoTo(ConfStart,s,1) -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20060516/f78dc66e/attachment.htm
Perhaps you've already figured this out, but I posted an example dialplan and small Perl AGI that would resolve this for you. As it happens this was posted the Friday before you sent this. Look for a posting from me on Friday, May 12th. Josh McAllister ________________________________ From: asterisk-users-bounces@lists.digium.com [mailto:asterisk-users-bounces@lists.digium.com] On Behalf Of Herchi Silviu Sent: Tuesday, May 16, 2006 8:41 AM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: [Asterisk-Users] Meetme and authentication Hi all, I have thoroughly read the available documentation and I can't seem to find a workaround for my setup... I'm trying to create a phone conference line that users would call using a unique phone number (no matter if they are moderators or just plain users). I use Asterisk 1.2.6 The available conferences are defined as follows: conf => 1000,user pin1, moderator pin1 conf => 1001,user pin2, moderator pin2 conf => 1002,user pin3, moderator pin3 ... conf => 1009, user pin9, moderator pin9 The users are prompted whether they are a moderator or a user. When they choose, they are redirected to the conference they request: - using options aAPsX for moderators (moderator + marked + ask PIN + allow menu using *) - using options Psw for users (ask PIN + allow menu + wait for a marked user) My problem is that if a user chooses the "moderator" option, he can authenticate using any of the two PINs, and he can become an moderator for the conference by knowing only the user PIN... I think using two different phone numbers (one for users and one for moderators) is neither practical nor safe. Is there a way to authenticate users against only one of the password? For instance, math the password provided against only the moderator PIN, or only the user PIN. Thank you for your help, Silviu PS. Here is the dialplan : [ConfStart] exten => s,1,Answer exten => s,2,Set(TIMEOUT(response)=5) exten => s,3,Set(LANGUAGE()=conf) exten => s,4,Wait(1) exten => s,5,Background(welcome) ; "welcome, press * if you are a user of hold the line if you are a moderator" exten => *,1,MeetMe(|iMPsw|) ; for regular users exten => t,1,MeetMe(|aAiMPsX|) ; for moderators exten => i,1,GoTo(ConfStart,s,1) -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20060522/1c52693b/attachment.htm
if you don't want to use an AGI, you can do this in the dialplan,
authenticating outside meetme, and, with the possibility to login the user
based on pin, instead of asking which kind of user is.
Basic example:
[ConfStart]
exten => s,1,Answer
exten => s,2,Read(pin|conf-enterpin|4)
exten => s,3,Goto(${pin}|1)
; pin routing
exten => 1234,1,Macro(enterConf|1000|iMsw) ; user access to conf 1000
exten => 4321,1,Macro(enterConf|1000|aAiMsX); admin access to conf 1000
exten => 5678,1,Macro(enterConf|1001|iMsw) ; user access to conf 1001
exten => 8765,1,Macro(enterConf|1001|aAiMsX); admin access to conf 1001
exten => t,1,Goto(s|1)
exten => i,1,Playback(conf-invalidpin)
exten => i,2,Goto(s|1)
[macro-enterConf]
;ARG1 is room number
;ARG2 is meetme options
exten => s,1,Meetme(${ARG1}|${ARG2})
Blank the pins in meetme.conf and you're done. Just be sure to have
different pins for all rooms.
Just an idea
Hope this helps
2006/5/16, Herchi Silviu
<Silviu.Herchi@arcelor.com>:>
> Hi all,
>
> I have thoroughly read the available documentation and I can't seem to
> find a workaround for my setup?
>
> I'm trying to create a phone conference line that users would call
using a
> unique phone number (no matter if they are moderators or just plain users).
> I use Asterisk 1.2.6
>
> The available conferences are defined as follows:
>
> conf => 1000,user pin1, moderator pin1
> conf => 1001,user pin2, moderator pin2
> conf => 1002,user pin3, moderator pin3
> ?
> conf => 1009, user pin9, moderator pin9
>
> The users are prompted whether they are a moderator or a user. When they
> choose, they are redirected to the conference they request:
>
> - using options aAPsX for moderators (moderator + marked + ask PIN + allow
> menu using *)
> - using options Psw for users (ask PIN + allow menu + wait for a marked
> user)
>
> My problem is that if a user chooses the "moderator" option, he
can
> authenticate using any of the two PINs, and he can become an moderator for
> the conference by knowing only the user PIN?
>
> I think using two different phone numbers (one for users and one for
> moderators) is neither practical nor safe. Is there a way to authenticate
> users against only one of the password? For instance, math the password
> provided against only the moderator PIN, or only the user PIN.
>
> Thank you for your help,
>
> Silviu
>
> PS. Here is the dialplan :
>
> [ConfStart]
> exten => s,1,Answer
> exten => s,2,Set(TIMEOUT(response)=5)
> exten => s,3,Set(LANGUAGE()=conf)
> exten => s,4,Wait(1)
> exten => s,5,Background(welcome) ; "welcome, press * if you
are a
> user of hold the line if you are a moderator"
>
> exten => *,1,MeetMe(|iMPsw|) ; for regular users
> exten => t,1,MeetMe(|aAiMPsX|) ; for moderators
>
> exten => i,1,GoTo(ConfStart,s,1)
>
> _______________________________________________
> --Bandwidth and Colocation provided by Easynews.com --
>
> Asterisk-Users mailing list
> To UNSUBSCRIBE or update options visit:
> http://lists.digium.com/mailman/listinfo/asterisk-users
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.digium.com/pipermail/asterisk-users/attachments/20060523/ecf80ae6/attachment.htm