For such a simple application I'd use AstDB to avoid having to hassle with an external database (and also means this sort of dialplan will work even on embedded/slimmed Asterisk boxes that may not have db modules loaded/available). In any case, what Tilghman said is what I'd suggest as well.
<br><br> <a href="http://www.voip-info.org/wiki/index.php?page=Asterisk+func+db">http://www.voip-info.org/wiki/index.php?page=Asterisk+func+db</a><br> <a href="http://www.the-asterisk-book.com/unstable/funktionen-db.html">
http://www.the-asterisk-book.com/unstable/funktionen-db.html</a><br><br>Also consider allowing emergency number dialing to bypass authentication, if applicable.<br><br>-jr<br><br><div class="gmail_quote">On Dec 1, 2007 5:32 PM, Tilghman Lesher <
<a href="mailto:tilghman@mail.jeffandtilghman.com">tilghman@mail.jeffandtilghman.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">On Saturday 01 December 2007 18:09:27 Steve Johnson wrote:<br>> Hi List,<br>><br>> We have a remote asterisk SIP phone at the cottage.<br>><br>> I'd like it to have minimal privileges when it first registers with
<br>> Asterisk. Ideally it should be in a restricted context. Dialing any<br>> number would intercept the call and tell the person to log on. This<br>> way, if the phone was stolen or someone got into the cottage, we
<br>> wouldn't have a bunch of surprise charges on our phone bill... :-)<br>><br>> Once the phone has been authenticated, it should go into a context<br>> with normal privileges. After a couple of days of non-use, it should
<br>> auto-logout to the restricted context.<br>><br>> How can I change the sip context of a phone on the fly, based on<br>> authentication login?<br><br></div>I wouldn't. I'd do authentication on the fly, using a database of some kind.
<br><br>extensions.conf:<br>[sip-phones]<br>exten => _X.,1,Set(lastlogin=${ODBC_LOGIN(${CUT(CHANNEL,-,1)})})<br>; Logins expire after 86400 sec = 24 hours<br>exten => _X.,n,GosubIf($[0${lastlogin} + 86400 < ${EPOCH}]?restricted,s,1)
<br>exten => _X.,n,Dial(Zap/g1/${EXTEN})<br><br>[restricted]<br>; VMAuthenticate terminates the call if authentication fails.<br>exten => s,1,VMAuthenticate<br>exten => s,n,Set(ODBC_LOGIN(${CUT(CHANNEL,-,1)})=${EPOCH})
<br>exten => s,n,Set(lastlogin=${EPOCH})<br>exten => s,n,Return<br><br>func_odbc.conf:<br>[LOGIN]<br>dsn=asterisk<br>read=SELECT lastlogin FROM logins WHERE channel='${ARG1}'<br>write=UPDATE logins SET lastlogin=${VAL1} WHERE channel='${ARG1}'
<br><br>logins.sql:<br>CREATE TABLE logins (<br> channel CHAR(50) PRIMARY KEY,<br> lastlogin INTEGER,<br>);<br>INSERT INTO logins VALUES ('SIP/100',0);<br>INSERT INTO logins VALUES ('SIP/101', 0);
<br>INSERT INTO logins VALUES ('SIP/102', 0);<br><br></blockquote></div><br clear="all"><br>-- <br>Grover Beach, California, USA<br><a href="http://blog.joshrichards.org">http://blog.joshrichards.org</a> <a href="mailto:josh.t.richards@gmail.com">
josh.t.richards@gmail.com</a> +1 (805) 471-6923<br><br><a href="http://www.linkedin.com/in/joshrichards">http://www.linkedin.com/in/joshrichards</a><br>Supporting these causes: <a href="http://Kiva.org">Kiva.org</a> &
RoomToRead.org<br>