Hello,

maybe my response was not that clear, but I meant to say to look at ndb_redis module C code, see how it does the authentication, then develop a similar capability inside cnxcc. So it requires to do C code development.

So the answer it is yes to your last question.

Cheers,
Daniel


On 05.03.18 11:36, Donat Zenichev wrote:
Hi Daniel, first of all thanks for your attention.

Perhaps I missed something. I read documentation about cnxcc and ndb_redis again, but I haven't found information that can help me with my goal.
ndb_redis is separate module that implements connections to redis databases (and also is able to perform authentication), has it's own functions like redis_cmd() to interact directly with redis.

But cnxcc stores real-time amounts in redis hash keys using it's own parameter  - modparam("cnxcc", "redis", "addr=127.0.0.1;port=6379;db=1")
And I can't see possibility to use ndb_redis to perform authentication for cnxcc module, correct me if I'm wrong.

Do you offer me to read ndb_redis code sources to use them to edit cnxcc code sources?
Thanks in advance for your advice.


2018-03-01 9:28 GMT+02:00 Donat Zenichev <donat.zenichev@gmail.com>:
Hi Daniel, first of all thanks for your attention.

Perhaps I missed something. I read documentation about cnxcc and ndb_redis again, but I haven't found information that can help me with my goal.
ndb_redis is separate module that implements connections to redis databases (and also is able to perform authentication), has it's own functions like redis_cmd() to interact directly with redis.

But cnxcc stores real-time amounts in redis hash keys using it's own parameter  - modparam("cnxcc", "redis", "addr=127.0.0.1;port=6379;db=1")
And I can't see possibility to use ndb_redis to perform authentication for cnxcc module, correct me if I'm wrong.

Do you offer me to read ndb_redis code sources to use them to edit cnxcc code sources?
Thanks in advance for your advice.



2018-02-28 14:33 GMT+02:00 Daniel-Constantin Mierla <miconda@gmail.com>:

Hello,

maybe authentication support was not implemented in cnxcc. Eventually it can be extracted from the ndb_redis, that module has it implemented already.

  * https://www.kamailio.org/docs/modules/stable/modules/ndb_redis.html#ndb_redis.p.server

Cheers,
Daniel


On 27.02.18 14:39, Donat Zenichev wrote:
Nevertheless, I want to find the needed solution.
In my opinion - If module is able to connect to redis databases, it'd better to perform it with authentication.

Because, there are cases when db located on localhost is improper solution or other users mustn't see hkeys, amounts inside hkeys it etc.
So I think no one will be mind, to have whole possibility - real-time billing (cnxcc) working with redis securely.

So please don't be apathetic to my request.

2018-02-26 9:44 GMT+02:00 Donat Zenichev <donat.zenichev@gmail.com>:
Hi community.
This message is specially dedicated to developers of the kamailio project.

I need to find solution how to make authentication for connections of cnxcc with redis.
For that moment, cnxcc module is able to connect to redis only without password (Carlos Ruiz Díaz will add this possibility later?).
So that, this makes database vulnerable.

Well, furthermore I don't want to use local redis database, cuz I think machine that contains kamailio daemon, must perform just this kind of actions - SIP proxying (kamailio server is not to be a database server or anything else).

For that moment we use separate redis db for cases like that, but this is not best practice I think.
I already tried to find solution (for e.g. connections via another module like db_redis:
https://github.com/kamailio/kamailio/pull/1432) but I got advice - achieving my goal by sr-users mailing list.

Please pay attention for my request. I think this will be very helpfull for others.



--
-- 
BR, Donat Zenichev
Wnet VoIP team
Tel Ukraine:  +380(44) 5-900-800
Tel USA: +164(67) 8-174-17 (ext 1320)
https://w-net.us/



--
-- 
BR, Donat Zenichev
Wnet VoIP team
Tel Ukraine:  +380(44) 5-900-800
Tel USA: +164(67) 8-174-17 (ext 1320)
https://w-net.us/


_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training - March 5-7, 2018, Berlin - www.asipto.com
Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com



--
-- 
BR, Donat Zenichev
Wnet VoIP team
Tel Ukraine:  +380(44) 5-900-800
Tel USA: +164(67) 8-174-17 (ext 1320)
https://w-net.us/



--
-- 
BR, Donat Zenichev
Wnet VoIP team
Tel Ukraine:  +380(44) 5-900-800
Tel USA: +164(67) 8-174-17 (ext 1320)
https://w-net.us/


_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training - March 5-7, 2018, Berlin - www.asipto.com
Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com