[asterisk-dev] voicemail: storing vmsecret in /var/spool/asterisk/voicemail

[Klaus Darilion]

Tzafrir Cohen schrieb:
> On Mon, Jan 19, 2009 at 11:45:01AM +0100, Klaus Darilion wrote:
>> Hi!
>>
>> I do not like that the vmsecret is stored in the same file file as the 
>> other user provisioning and Asterisk writes to this file (users.conf or 
>> voicemail.conf). (so, indirectly a user can write to the configuration 
>> file).
>>
>> What do you think about the idea of storing the vmsecret in the spool 
>> directory - just like all the other user configuration (self recorded 
>> prompts ...). Then we have a clear separation - all the things 
>> configured by the admin are in the configuration file (user.conf or 
>> voicemail.conf) and all the things configured by the user itself are in 
>> the spool directory.
> 
> The secret kept in the directory of the user?
> 
> Does voicemail.conf support a separate context for each user? users.conf
> has it and IIRC minivm also has it. It would be needed if you don't want
> to break the configuration format.

Yes, voicemail.conf supports different voicemail contexts (but I fail to 
see why this matters here).

The syntax of the configuration file would be unchanged. I would just 
add a new general parameter storesecretinspooldirectory=yes. If this is 
activated, the voicemail application does not read the password from the 
configuration file, but from ASTSPOOLDIR/voicemail/VOICEMAILCONTEXT/USERID

The same when storing the password it does not reparse and change 
user|voicemail.conf but just writes to 
ASTSPOOLDIR/voicemail/VOICEMAILCONTEXT/USERID

regards
klaus