[SR-Users] cnxcc module - make auth for redis connection

Daniel-Constantin Mierla miconda at gmail.com
Tue Mar 6 08:58:30 CET 2018


Hello,

maybe my response was not that clear, but I meant to say to look at
ndb_redis module C code, see how it does the authentication, then
develop a similar capability inside cnxcc. So it requires to do C code
development.

So the answer it is yes to your last question.

Cheers,
Daniel


On 05.03.18 11:36, Donat Zenichev wrote:
> Hi Daniel, first of all thanks for your attention.
>
> Perhaps I missed something. I read documentation about cnxcc and
> ndb_redis again, but I haven't found information that can help me with
> my goal.
> ndb_redis is separate module that implements connections to redis
> databases (and also is able to perform authentication), has it's own
> functions like redis_cmd() to interact directly with redis.
>
> But cnxcc stores real-time amounts in redis hash keys using it's own
> parameter  - modparam("cnxcc", "redis", "addr=127.0.0.1;port=6379;db=1")
> And I can't see possibility to use ndb_redis to perform authentication
> for cnxcc module, correct me if I'm wrong.
>
> Do you offer me to read ndb_redis code sources to use them to edit
> cnxcc code sources?
> Thanks in advance for your advice.
>
>
> 2018-03-01 9:28 GMT+02:00 Donat Zenichev <donat.zenichev at gmail.com
> <mailto:donat.zenichev at gmail.com>>:
>
>     Hi Daniel, first of all thanks for your attention.
>
>     Perhaps I missed something. I read documentation about cnxcc and
>     ndb_redis again, but I haven't found information that can help me
>     with my goal.
>     ndb_redis is separate module that implements connections to redis
>     databases (and also is able to perform authentication), has it's
>     own functions like redis_cmd() to interact directly with redis.
>
>     But cnxcc stores real-time amounts in redis hash keys using it's
>     own parameter  - modparam("cnxcc", "redis",
>     "addr=127.0.0.1;port=6379;db=1")
>     And I can't see possibility to use ndb_redis to perform
>     authentication for cnxcc module, correct me if I'm wrong.
>
>     Do you offer me to read ndb_redis code sources to use them to edit
>     cnxcc code sources?
>     Thanks in advance for your advice.
>
>
>
>     2018-02-28 14:33 GMT+02:00 Daniel-Constantin Mierla
>     <miconda at gmail.com <mailto:miconda at gmail.com>>:
>
>         Hello,
>
>         maybe authentication support was not implemented in cnxcc.
>         Eventually it can be extracted from the ndb_redis, that module
>         has it implemented already.
>
>           *
>         https://www.kamailio.org/docs/modules/stable/modules/ndb_redis.html#ndb_redis.p.server
>         <https://www.kamailio.org/docs/modules/stable/modules/ndb_redis.html#ndb_redis.p.server>
>
>         Cheers,
>         Daniel
>
>
>         On 27.02.18 14:39, Donat Zenichev wrote:
>>         Nevertheless, I want to find the needed solution.
>>         In my opinion - If module is able to connect to redis
>>         databases, it'd better to perform it with authentication.
>>
>>         Because, there are cases when db located on localhost is
>>         improper solution or other users mustn't see hkeys, amounts
>>         inside hkeys it etc.
>>         So I think no one will be mind, to have whole possibility -
>>         real-time billing (cnxcc) working with redis securely.
>>
>>         So please don't be apathetic to my request.
>>
>>         2018-02-26 9:44 GMT+02:00 Donat Zenichev
>>         <donat.zenichev at gmail.com <mailto:donat.zenichev at gmail.com>>:
>>
>>             Hi community.
>>             This message is specially dedicated to developers of the
>>             kamailio project.
>>
>>             I need to find solution how to make authentication for
>>             connections of cnxcc with redis.
>>             For that moment, cnxcc module is able to connect to redis
>>             only without password (Carlos Ruiz Díaz will add this
>>             possibility later?).
>>             So that, this makes database vulnerable.
>>
>>             Well, furthermore I don't want to use local redis
>>             database, cuz I think machine that contains kamailio
>>             daemon, must perform just this kind of actions - SIP
>>             proxying (kamailio server is not to be a database server
>>             or anything else).
>>
>>             For that moment we use separate redis db for cases like
>>             that, but this is not best practice I think.
>>             I already tried to find solution (for e.g. connections
>>             via another module like db_redis:
>>             https://github.com/kamailio/kamailio/pull/1432
>>             <https://github.com/kamailio/kamailio/pull/1432>) but I
>>             got advice - achieving my goal by sr-users mailing list.
>>
>>             Please pay attention for my request. I think this will be
>>             very helpfull for others.
>>
>>
>>
>>             -- 
>>             -- 
>>             BR, Donat Zenichev
>>             Wnet VoIP team
>>             Tel Ukraine:  +380(44) 5-900-800
>>             Tel USA: +164(67) 8-174-17 (ext 1320)
>>             https://w-net.us/ <http://wnet.ua>
>>
>>
>>
>>
>>         -- 
>>         -- 
>>         BR, Donat Zenichev
>>         Wnet VoIP team
>>         Tel Ukraine:  +380(44) 5-900-800
>>         Tel USA: +164(67) 8-174-17 (ext 1320)
>>         https://w-net.us/ <http://wnet.ua>
>>
>>
>>         _______________________________________________
>>         Kamailio (SER) - Users Mailing List
>>         sr-users at lists.kamailio.org <mailto:sr-users at lists.kamailio.org>
>>         https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>         <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>
>
>         -- 
>         Daniel-Constantin Mierla
>         www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>
>         Kamailio Advanced Training - March 5-7, 2018, Berlin - www.asipto.com <http://www.asipto.com>
>         Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com <http://www.kamailioworld.com>
>
>
>
>
>     -- 
>     -- 
>     BR, Donat Zenichev
>     Wnet VoIP team
>     Tel Ukraine:  +380(44) 5-900-800
>     Tel USA: +164(67) 8-174-17 (ext 1320)
>     https://w-net.us/ <http://wnet.ua>
>
>
>
>
> -- 
> -- 
> BR, Donat Zenichev
> Wnet VoIP team
> Tel Ukraine:  +380(44) 5-900-800
> Tel USA: +164(67) 8-174-17 (ext 1320)
> https://w-net.us/ <http://wnet.ua>
>
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training - March 5-7, 2018, Berlin - www.asipto.com
Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20180306/13a06617/attachment.html>


More information about the sr-users mailing list