Neeraj Chand
2010-Jul-15 04:29 UTC
[asterisk-users] SKYPE - Authenticate incoming call automatically
Hi All, After getting licences for Skype for asterisk a while ago I finally got around to setting up a server with two channels and setting up a bcp on the skype end. The idea behind this is the following: Users can dial into the PBX, get authenticated and only after authentication get access to internal PBX extensions. I CAN do this with a PIN, no sweat, but from a user perspective it becomes a bit clunky, i.e. password to remember, security in terms of pin leaks, multiple passwords for users, etc. I was wondering if there was a way I could extract the "FROM - USER" and assign it to a variable, then do a lookup of that username in a database using ODBC to decide whether to allow or disallow access. NOTE: The bit I need help with is extracting the "FROM - USER" the rest of the stuff I've done already / before. Thanks, Neeraj.
Kevin P. Fleming
2010-Jul-15 13:06 UTC
[asterisk-users] SKYPE - Authenticate incoming call automatically
On 07/14/2010 11:29 PM, Neeraj Chand wrote:> > > Hi All, > > After getting licences for Skype for asterisk a while ago I finally got > around to setting up a server with two channels and setting up a bcp on > the skype end. > > The idea behind this is the following: > > Users can dial into the PBX, get authenticated and only after > authentication get access to internal PBX extensions. > > I CAN do this with a PIN, no sweat, but from a user perspective it > becomes a bit clunky, i.e. password to remember, security in terms of > pin leaks, multiple passwords for users, etc. > > I was wondering if there was a way I could extract the "FROM - USER" and > assign it to a variable, then do a lookup of that username in a database > using ODBC to decide whether to allow or disallow access. > > NOTE: The bit I need help with is extracting the "FROM - USER" the rest > of the stuff I've done already / before.None of this is necessary; Skype already supports restricting to calls to only coming from users on the buddy list. So, if your PBX is connecting to the Skype network as user 'A', and your remote users are 'B' and 'C', then *don't* setup SFA to allow calls from anyone, and don't set it up to automatically add users to the buddy list when they request it. Instead, manually add users B and C to A's buddy list (using a regular Skype client), and those are the only users that will be able to call A. -- Kevin P. Fleming Digium, Inc. | Director of Software Technologies 445 Jan Davis Drive NW - Huntsville, AL 35806 - USA skype: kpfleming | jabber: kfleming at digium.com Check us out at www.digium.com & www.asterisk.org