[SR-Users] Usage of ldap/db2_ldap

[DEV]

Hi!

First sorry that you received a confirmation email from our ticket system - a forwarding rule matched.
I've now switched the domain to one that does not apply rules.

If I want to try "uid_auth_db", do I just replace "auth_db"?
At least "auth_check" is unknown, which I expect to be caused because it's not maintained (at least I understand that from your email).

I know the tutorial you linked for me but my assumption was, that it was replaced by db2_ldap (because it already implements "auth_check" ready to use).

Just to recap: Your recommendation is sticking to the database driver (in my case mysql) and replace the database specific check by a manual ldap lookup?
This way I seem to be able to avoid db2_ldap but get a similar result(?).

I realy liked the idea of the db2_ldap and h350 modules.

Thank you very much!

Kind regards
Kevin

________________________________________
Von: Daniel-Constantin Mierla <miconda at gmail.com>
Gesendet: Montag, 15. Februar 2021 10:51
An: Kamailio (SER) - Users Mailing List; DEV
Betreff: Re: [SR-Users] Usage of ldap/db2_ldap

Hello,

the db2_ldap implements SER-specific DB API which is not used by
auth_db, but by uid_auth_db. However, that module was not maintained for
long time, not sure if anyone used it during the past decade or so.

Using ldap requires script operations to fetch the password, it cannot
be used as a replacement for other db modules, see some guidlines at:

  * https://www.kamailio.org/wiki/tutorials/mini-howto-admin/ldap-user-auth

Cheers,
Daniel

On 14.02.21 03:02, DEV wrote:
> I've also tried this:
>
> modparam("ldap", "config_file", "/etc/kamailio/my-ldap.cfg")
> modparam("db2_ldap", "config", "/etc/kamailio/ldap.cfg")
>
> -> ERROR: <core> [db.c:204]: db_bind_mod(): Module db_ldap not found. Missing loadmodule?
> -> ERROR: auth_db [auth_db_mod.c:175]: mod_init(): unable to bind to a database driver
>
> modparam("ldap", "config_file", "/etc/kamailio/my-ldap.cfg")
> modparam("ldap", "config", "/etc/kamailio/ldap.cfg")
>
> -> ERROR: <core> [core/modparam.c:164]: set_mod_param_regex(): parameter <config> of type <1:string> not found in module <ldap>
> -> CRITICAL: <core> [core/cfg.y:3591]: yyerror_at(): parse error in config file /etc/kamailio/kamailio.cfg, line 410, column 52: Can't set module parameter
>
> :-(
>
> Kind regards
> Kevin
>
> ________________________________________
> Von: sr-users <sr-users-bounces at lists.kamailio.org> im Auftrag von DEV <dev at dolphin-it.de>
> Gesendet: Sonntag, 14. Februar 2021 01:51
> An: sr-users at lists.kamailio.org
> Betreff: [SR-Users] Usage of ldap/db2_ldap
>
> Hi!
>
> I'm trying to use the ldap / db2_ldap module in kamailio but I'm stuck because the docs seem to either be outdated or me being on the wrong track.
>
> From what I understand, I need a single ldap.conf but there are two example files with different syntax:
> 1) https://github.com/kamailio/kamailio/blob/master/src/modules/db2_ldap/ldap.cfg
> 2) https://github.com/kamailio/kamailio/blob/master/src/modules/ldap/etc/ldap.cfg
>
> I'm already using ldap realtime for asterisk and want to switch kamailio to use the same objects by using this schema:
> https://github.com/kamailio/kamailio/blob/master/src/modules/db2_ldap/ser.schema
>
> When using syntax from (1) I receive this error:
> ERROR: ldap [ldap_mod.c:198]: mod_init(): no section found in config_file [/etc/kamailio/ldap.cfg]
>
> I double-checked my conf and it matches (1).
>
> When using (2), I got an error, telling me I left some tables unconfigured (even when mixing both syntax).
>
> What is the correct syntax to use ldap as my auth module and replace mysql auth tables?
>
> Thank you.
>
> Kind regards
> Kevin
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

--
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Funding: https://www.paypal.me/dcmierla