On Mon, Aug 9, 2010 at 4:04 AM, Douglas Hubler <[email protected]> wrote:
> On Sat, Aug 7, 2010 at 7:49 PM, Mircea Carasel <[email protected]> 
> wrote:
>> I just noticed that sipx-freeswitch has XML-RPC support, and there is
>> already an interface created in sipXconfig, used
>> for conferences:
>> sipxecs/sipXconfig/neoconf/src/org/sipfoundry/sipxconfig/conference/FreeswitchApi.java
>> Probably the simplest thing to do would be to add a method that checks
>> G729 codec installation
>>
>> What do you think ?
>
> I'm afraid if we get too fancy, we'll get into situations where we
> cannot configure FS if it's currently down.  Should it be down?
> probably not, but all we're trying to do is help the admin get the
> default list of codecs.
>
> Also, I think you missed my design.  I was recommending we add the
> ability for sipXconfig to remotely execute commands by selecting from
> a pre-defined list of available commands installed by sipx-freeswitch
> project.  sipXsupervisor will coordinate the transaction thru XMLRPC.
>
> I'm starting to have second thought about the design however because
> although this is secure because we're only selecting commands from a
> predetermined list and therefore cannot execute some arbitrary
> command, you'd have to watch each command argument as well.
>
> For example, here's a  malicious attack
>  command name = "testG729"
>  arguments  = [`dropdb SIPXCONFIG`]
> Industry standard configuration tools like cfengine, puppet, chef
> already solve this problem.
>
> So, instead, I would recommend we simply test for existence of local
> file,  We can solve distributed setup once we have a more powerful
> configuration framework integrated.  Folks with distributed setups can
> enable G729 codec manually IMHO.
I agree that this would be the nicest and simplest thing to do, but I
am worried about who is going to create that file and where.

Is this fie going to be created on primary host  (where sipXconfig is
installed)  under a predefined path ?
If not, if this is about a file under a secondary host (where
freeswitch is installed) I believe we still need a remote call
(XML-RPC) from sipXconfig to get the information if the file exists or
not

First, I was thinking that the file to check can be the G729 license
file, but then I realized that the license can expire, and we would
still need to run a command to verify if the license is expired.
Thanks,
Mircea
_______________________________________________
sipx-dev mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev/

Reply via email to