token based authentication
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi everyone, we (Rhizomatica.org) are currently setting up a OpenBSC-based network in Oaxaca, Mexico. I've been looking into the code and found the token-based authentication which was used at the HAR2009 (I still remember receiving that SMS) :) I understand that each phone will get an SMS and then disconnect from the network. What is the API to confirm the token and activate the account? I vaguely remember a web interface at the time, but I could be wrong... Thanks a lot! Ciaby -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iF4EAREKAAYFAlJXerwACgkQC30ZhxNccpFbuAEAjJN+DEjz5rlYBbYJeBw2884e SuSvNHud+XfcDJL0IaYBAJFFIJbEG6XtdTADCt4lyvdaRcbTDn0B2f9NZEod8kJU =KqiR -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 10/10/2013 11:12 PM, Ciaby wrote:
Hi everyone, we (Rhizomatica.org) are currently setting up a OpenBSC-based network in Oaxaca, Mexico. I've been looking into the code and found the token-based authentication which was used at the HAR2009 (I still remember receiving that SMS) :) I understand that each phone will get an SMS and then disconnect from the network. What is the API to confirm the token and activate the account? I vaguely remember a web interface at the time, but I could be wrong... Thanks a lot! Ok, I can just reply to myself... I just looked at the code, apparently the user is created, a number is assigned, it sends an sms to the user and then sets authorized=0. We can just set it back to 1 and activate it. Sorry for the spam, I should have looked at the code first :) Cheers
Ciaby -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iF4EAREKAAYFAlJXfC0ACgkQC30ZhxNccpEaVAEAk9Dcto4VfwAc37qX5Gg7YhM5 YgjFfmFRPzRNIN73ECwBAK9oWnEKcqOOGLUcgDBNuKfN3qnwuUCOXJB+okzIn2WM =XjJ3 -----END PGP SIGNATURE-----
Ciaby, I believe it directly accessed the hlr.sqlite3 database. Or, more likely, synchronized with it once in a while (like every 30 min). The only thing this web-interface should do is to set "authorized" bit in the DB and (optionally) update user's extension number. On Fri, Oct 11, 2013 at 8:12 AM, Ciaby <ciaby@autistici.org> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Hi everyone, we (Rhizomatica.org) are currently setting up a OpenBSC-based network in Oaxaca, Mexico. I've been looking into the code and found the token-based authentication which was used at the HAR2009 (I still remember receiving that SMS) :) I understand that each phone will get an SMS and then disconnect from the network. What is the API to confirm the token and activate the account? I vaguely remember a web interface at the time, but I could be wrong... Thanks a lot!
Ciaby -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iF4EAREKAAYFAlJXerwACgkQC30ZhxNccpFbuAEAjJN+DEjz5rlYBbYJeBw2884e SuSvNHud+XfcDJL0IaYBAJFFIJbEG6XtdTADCt4lyvdaRcbTDn0B2f9NZEod8kJU =KqiR -----END PGP SIGNATURE-----
-- Regards, Alexander Chemeris. CEO, Fairwaves LLC / ООО УмРадио http://fairwaves.ru
On Fri, Oct 11, 2013 at 9:20 AM, Peter Stuge <peter@stuge.se> wrote:
Alexander Chemeris wrote:
I believe it directly accessed the hlr.sqlite3 database.
Don't do that. Script around the VTY so that changes take effect immediately and all internal state is updated correctly.
Yes, good idea. -- Regards, Alexander Chemeris. CEO, Fairwaves LLC / ООО УмРадио http://fairwaves.ru
participants (3)
-
Alexander Chemeris -
Ciaby -
Peter Stuge