On Sat, Aug 7, 2010 at 7:49 PM, Mircea Carasel <[email protected]> wrote:
> I just noticed that sipx-freeswitch has XML-RPC support, and there is
> already an interface created in sipXconfig, used
> for conferences:
> sipxecs/sipXconfig/neoconf/src/org/sipfoundry/sipxconfig/conference/FreeswitchApi.java
> Probably the simplest thing to do would be to add a method that checks
> G729 codec installation
>
> What do you think ?

I'm afraid if we get too fancy, we'll get into situations where we
cannot configure FS if it's currently down.  Should it be down?
probably not, but all we're trying to do is help the admin get the
default list of codecs.

Also, I think you missed my design.  I was recommending we add the
ability for sipXconfig to remotely execute commands by selecting from
a pre-defined list of available commands installed by sipx-freeswitch
project.  sipXsupervisor will coordinate the transaction thru XMLRPC.

I'm starting to have second thought about the design however because
although this is secure because we're only selecting commands from a
predetermined list and therefore cannot execute some arbitrary
command, you'd have to watch each command argument as well.

For example, here's a  malicious attack
 command name = "testG729"
 arguments  = [`dropdb SIPXCONFIG`]
Industry standard configuration tools like cfengine, puppet, chef
already solve this problem.

So, instead, I would recommend we simply test for existence of local
file,  We can solve distributed setup once we have a more powerful
configuration framework integrated.  Folks with distributed setups can
enable G729 codec manually IMHO.
_______________________________________________
sipx-dev mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev/

Reply via email to