Re: FW: Help Desk and Ledgersmb

["David F. Skoll" <..hidden..>]

Chris Travers wrote:

> Actually, I think it is a very elegant solution.  However, I would
> wonder about security issues in scaling up.  It might work well for a
> 10 person company, but what if you want to add security-sensitive
> information over the messaging layer?

It would completely fail.  We don't issue any security-sensitive
messages over the IRC channel.  And obviously, malicious users could
easily spoof messages.  If we were to do this seriously, we'd have to
use a message bus with guaranteed delivery and proper authentication
and security.  (I supposed you could use a PKI and encrypt/sign the
IRC messages, but that just seems silly.)

> A second point is that Asterisk's AGI ought to allow you to plug into
> your perl scripts with more information than you can with a system()
> call.

We do use AGIs for some things, but for call-notification a system() call
was simpler.

[Anyway... we'd better get back to LedgerSMB discussions. :-)]

I've noticed mention about LedgerSMB 1.3. is it downloadable somewhere?
Well, I guess I could just pull from SVN...

Regards,

David.