[SR-Users] cnxcc module - make auth for redis connection

[Donat Zenichev]

Hi Daniel, first of all thanks for your attention.

Perhaps I missed something. I read documentation about cnxcc and ndb_redis
again, but I haven't found information that can help me with my goal.
ndb_redis is separate module that implements connections to redis databases
(and also is able to perform authentication), has it's own functions like
redis_cmd() to interact directly with redis.

But cnxcc stores real-time amounts in redis hash keys using it's own
parameter  - modparam("cnxcc", "redis", "addr=127.0.0.1;port=6379;db=1")
And I can't see possibility to use ndb_redis to perform authentication for
cnxcc module, correct me if I'm wrong.

Do you offer me to read ndb_redis code sources to use them to edit cnxcc
code sources?
Thanks in advance for your advice.


2018-03-01 9:28 GMT+02:00 Donat Zenichev <donat.zenichev at gmail.com>:

> Hi Daniel, first of all thanks for your attention.
>
> Perhaps I missed something. I read documentation about cnxcc and ndb_redis
> again, but I haven't found information that can help me with my goal.
> ndb_redis is separate module that implements connections to redis
> databases (and also is able to perform authentication), has it's own
> functions like redis_cmd() to interact directly with redis.
>
> But cnxcc stores real-time amounts in redis hash keys using it's own
> parameter  - modparam("cnxcc", "redis", "addr=127.0.0.1;port=6379;db=1")
> And I can't see possibility to use ndb_redis to perform authentication for
> cnxcc module, correct me if I'm wrong.
>
> Do you offer me to read ndb_redis code sources to use them to edit cnxcc
> code sources?
> Thanks in advance for your advice.
>
>
>
> 2018-02-28 14:33 GMT+02:00 Daniel-Constantin Mierla <miconda at gmail.com>:
>
>> Hello,
>>
>> maybe authentication support was not implemented in cnxcc. Eventually it
>> can be extracted from the ndb_redis, that module has it implemented already.
>>
>>   * https://www.kamailio.org/docs/modules/stable/modules/ndb_red
>> is.html#ndb_redis.p.server
>>
>> Cheers,
>> Daniel
>>
>> On 27.02.18 14:39, Donat Zenichev wrote:
>>
>> Nevertheless, I want to find the needed solution.
>> In my opinion - If module is able to connect to redis databases, it'd
>> better to perform it with authentication.
>>
>> Because, there are cases when db located on localhost is improper
>> solution or other users mustn't see hkeys, amounts inside hkeys it etc.
>> So I think no one will be mind, to have whole possibility - real-time
>> billing (cnxcc) working with redis securely.
>>
>> So please don't be apathetic to my request.
>>
>> 2018-02-26 9:44 GMT+02:00 Donat Zenichev <donat.zenichev at gmail.com>:
>>
>>> Hi community.
>>> This message is specially dedicated to developers of the kamailio
>>> project.
>>>
>>> I need to find solution how to make authentication for connections of
>>> cnxcc with redis.
>>> For that moment, cnxcc module is able to connect to redis only without
>>> password (Carlos Ruiz Díaz will add this possibility later?).
>>> So that, this makes database vulnerable.
>>>
>>> Well, furthermore I don't want to use local redis database, cuz I think
>>> machine that contains kamailio daemon, must perform just this kind of
>>> actions - SIP proxying (kamailio server is not to be a database server or
>>> anything else).
>>>
>>> For that moment we use separate redis db for cases like that, but this
>>> is not best practice I think.
>>> I already tried to find solution (for e.g. connections via another
>>> module like db_redis:
>>> https://github.com/kamailio/kamailio/pull/1432) but I got advice -
>>> achieving my goal by sr-users mailing list.
>>>
>>> Please pay attention for my request. I think this will be very helpfull
>>> for others.
>>>
>>>
>>>
>>> --
>>> --
>>> BR, Donat Zenichev
>>> Wnet VoIP team
>>> Tel Ukraine:  +380(44) 5-900-800
>>> Tel USA: +164(67) 8-174-17 (ext 1320)
>>> https://w-net.us/ <http://wnet.ua>
>>>
>>
>>
>>
>> --
>> --
>> BR, Donat Zenichev
>> Wnet VoIP team
>> Tel Ukraine:  +380(44) 5-900-800
>> Tel USA: +164(67) 8-174-17 (ext 1320)
>> https://w-net.us/ <http://wnet.ua>
>>
>>
>> _______________________________________________
>> Kamailio (SER) - Users Mailing Listsr-users at lists.kamailio.orghttps://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
>>
>> --
>> Daniel-Constantin Mierlawww.twitter.com/miconda -- www.linkedin.com/in/miconda
>> Kamailio Advanced Training - March 5-7, 2018, Berlin - www.asipto.com
>> Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com
>>
>>
>
>
> --
> --
> BR, Donat Zenichev
> Wnet VoIP team
> Tel Ukraine:  +380(44) 5-900-800
> Tel USA: +164(67) 8-174-17 (ext 1320)
> https://w-net.us/ <http://wnet.ua>
>



-- 
-- 
BR, Donat Zenichev
Wnet VoIP team
Tel Ukraine:  +380(44) 5-900-800
Tel USA: +164(67) 8-174-17 (ext 1320)
https://w-net.us/ <http://wnet.ua>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20180305/dc72f1a9/attachment.html>