similar to: OT: certificate for softphone

Hi, I am not sure if this the right place for the question. Sorry if not ... My System: SuSE 9.2 OpenSSH 3.9p1 I have trouble to use a Smartcard with openssh. If i try to connect directly to the Smartcard, it fails: ssh -I 0:45 localhost card-etoken.c:175:etoken_check_sw: required access right not granted card-etoken.c:631:do_compute_signature: returning with: Security status not satisfied

Hello For customers who need a small IP PBX to handle up to four ISDN lines (in France, so I guess that means EuroISDN) instead of a PC + Asterisk and an ISDN gateway box, has someone already played with the Atcom IP-4B? www.atcom.cn/IP-BRIM.html Any feedback appreciated.

My main asterisk server is under unusual heavy attack, and so far Fail2Ban has blocked about 30 IPs, from various different countries. At this time it is blocking about 1 IP address every few minutes. Just wondering if anybody else is also experiencing unusually increased hack attempts today? Zeeshan A Zakaria -- www.ilovetovoip.com www.pbxforall.com (beta) -------------- next part

Hi all, Perhaps someone has dealt with it before. I want to activate a bunch of my own scripts after someone has registred om my asterisk, or when his cient has de-registerded. have been skimming through AGI and AMI, and seen a lot of nice features, but not the (de-)registering events. Kind regards, Hans

Just curious, I noticed that with SetLanguage() you can change it into a lot of other languages. Yes one can record them easily enough with "record", but don't like to re-invent the wheel.. Browsed through a lot of google-pages but failed to find any other languages (except for FR and ES on the digium site) Any pointers for german, dutch, greek, italian, .... prompts? Hans --

Hi all, Perhaps someone can give me a hint i the right direction... Sometimes dtmf is recognized, sometimes not. I'm using 1.2.19 asterisk with misdn for my hfc card. When i got in incoming sip-call, dtmf is recognized, When i phone my self (isdn-phone or gsm-phone) no problem with dtmf When SOME (not all) people phone me (isdn-incoming) DTMF is not recognized. How come? Either it works

Morning! This may be the "day of the dead" in some regions, but we expect the usual lively discussion today at 9AM PDT, 11 Central, 12 Noon EDT, 4PM UK and Portugal, 5PM Paris, $deity-forsaken hour down under. This Sunday, I believe the USA falls back to Standard time. Future VUC are still at 12 Noon EST. Info site: http://voipusersconference.org PSTN (724) 444-7444 enter 22622# 1#

Hi all, Can anybody inform me wether the "RedHat Certificate System" or actually a CentOS equivalent is available for CentOS. Just skimmed on a download site through the RPM's for 5.3 and I couldn't find it. According to their pressrelease, it the code should be gpl, allthough I can't find any rpm for RH, FC or Centos. It seems that this is one of the few CA-packages for

Retrying, falling of the list some how :-( -------- Original Message -------- Subject: feeling n00b again Date: 2018-08-20 09:51 From: asterisk at a-domani.nl To: asterisk-users at lists.digium.com Hi all, Long time ago, I followed a Asterisk training, and both at work and at home, was able to deploy Asterisk, make all sorts of internal call (hard/soft voip-phones, incoming/outgoing,

Greetings- I'm about to dive into the process of virtualizing some of my Asterisk (primarily 1.4.x) infrastructure. In the past, when looking at virt solutions, the primary issue preventing me from moving was the lack of proper timing. We do not need it for MeetMe but rather for IAX2 trunking. I'd like to use either OpenVZ or KVM, but each seem to have independent "issues" that

Hi, I've been looking at the list at: http://www.voip-info.org/wiki/view/chan_mobile But when googling of any of the "known working" devices, there ain't any for sale anymore, probably replaced by more recent types. So, anyone around here who bought recently an BT-dongle that is working with asterisk? hw

I know OpenSSH currently supports PKCS11 devices (such as smartcards) for publickey authentication, but I would love to see PKCS11 extended further. It is currently possible to perform PKCS11 certificate authentication, via pam_krb5.so (on Linux at least and likely something similar on other *NIX) which allows smartcard auth to a Kerberos (including AD) server, where a TGT can also be granted.

Alon, I should have provided more background. You are assuming that I could perform the PKINIT prior to connecting to the SSH server. In this case (and others) there is an interest in not exposing the kerberos servers to the world and thus someone connecting remotely would not be able to obtain a TGT or do a PKINIT. The goal would be for SSH to handle all the auth and only after connecting to

Alon, On 12/18/2018 06:52 PM, Alon Bar-Lev wrote: > OK... So you have an issue... > > First, you need to delegate your smartcard to remote machine, probably > using unix socket redirection managed by openssh. This can be done in > many levels... > 1. Delegate USB device, this will enable only exclusive usage of the > smartcard by remote machine. > 2. Delegate PC/SC, this

Hi all, I'm new to this mailing list, so I apologize if my question is "obsolete" for you. I'd like to know if anybody has a clear idea about how to connect smartcards to the SSH framework. I yet got a modified ssh-agent (by Stephen Pellicer) that uses SSP-Lite (CyberflexAccess driver by me) in order to use the smartcard instead of the HD files. Instead, I'd like to

Hello OpenSSH developers, A week ago I've posted a patch that enables openssh to work with PKCS#11 tokens. I didn't receive any comments regarding the patch or reply to my questions. In current software world, providing a security product that does not support standard interface for external cryptographic hardware makes the product obsolete. Please comment my patch, so I can know

Hi there, has anybody managed to get the eToken Pro Anywhere work with SSH? I'm using the latest SafeNetAuthentication drivers available for Ubuntu 64bit (8.3) and everything is working just fine except for ssh. I can use the eToken for logging in, openvpn, rdestkop, etc. but it seems ssh does not recognize the device properly. The command "ssh -I /usr/lib/libeToken.so.8 user at

Dear List, I self-host my e-mail and run Dovecot since ever I do that. Dovecot version is 2.3.4.1 (f79e8e7e4), running on Debian testing. Now I am trying to configure Dovecot for client TLS certificates. I have a self-signed certificate whose private key resides on a smartcard (Yubikey, to be exact). I wanted Dovecot to accept that TLS client certificate instead of a password. So I searched and

Hi all, Been reading about chan_motif / chan_xmpp in the wiki's for 1.8, 10 and 11 version of asterisk. In each example i got the impression that the asterisk server is registering on a XMPP server as a single user with the credentials as specified in jabber.conf. Instead of a single xmpp-user, could that also be multiple users? For instance, for each sip-user an xmpp-user? When i skim

[[Sending again, as for some strange reason it is not accepted]] Hello OpenSSH developers, I maintain external patch for PKCS#11 smartcard support into OpenSSH[1] , many users already apply and use this patch. I wish to know if anyone is interesting in working toward merging this into mainline. I had some discussion with Damien Miller, but then he disappeared. Having standard smartcard