Re: [SR-Users] cnxcc module - make auth for redis connection

[Daniel-Constantin Mierla]

Hello,

maybe my response was not that clear, but I meant to say to look at
ndb_redis module C code, see how it does the authentication, then
develop a similar capability inside cnxcc. So it requires to do C code
development.

So the answer it is yes to your last question.

Cheers,
Daniel


On 05.03.18 11:36, Donat Zenichev wrote:
> Hi Daniel, first of all thanks for your attention.
>
> Perhaps I missed something. I read documentation about cnxcc and
> ndb_redis again, but I haven't found information that can help me with
> my goal.
> ndb_redis is separate module that implements connections to redis
> databases (and also is able to perform authentication), has it's own
> functions like redis_cmd() to interact directly with redis.
>
> But cnxcc stores real-time amounts in redis hash keys using it's own
> parameter  - modparam("cnxcc", "redis", "addr=127.0.0.1;port=6379;db=1")
> And I can't see possibility to use ndb_redis to perform authentication
> for cnxcc module, correct me if I'm wrong.
>
> Do you offer me to read ndb_redis code sources to use them to edit
> cnxcc code sources?
> Thanks in advance for your advice.
>
>
> 2018-03-01 9:28 GMT+02:00 Donat Zenichev  >:
>
> Hi Daniel, first of all thanks for your attention.
>
> Perhaps I missed something. I read documentation about cnxcc and
> ndb_redis again, but I haven't found information that can help me
> with my goal.
> ndb_redis is separate module that implements connections to redis
> databases (and also is able to perform authentication), has it's
> own functions like redis_cmd() to interact directly with redis.
>
> But cnxcc stores real-time amounts in redis hash keys using it's
> own parameter  - modparam("cnxcc", "redis",
> "addr=127.0.0.1;port=6379;db=1")
> And I can't see possibility to use ndb_redis to perform
> authentication for cnxcc module, correct me if I'm wrong.
>
> Do you offer me to read ndb_redis code sources to use them to edit
> cnxcc code sources?
> Thanks in advance for your advice.
>
>
>
> 2018-02-28 14:33 GMT+02:00 Daniel-Constantin Mierla
> >:
>
> Hello,
>
> maybe authentication support was not implemented in cnxcc.
> Eventually it can be extracted from the ndb_redis, that module
> has it implemented already.
>
>   *
> 
> https://www.kamailio.org/docs/modules/stable/modules/ndb_redis.html#ndb_redis.p.server
> 
> 
>
> Cheers,
> Daniel
>
>
> On 27.02.18 14:39, Donat Zenichev wrote:
>> Nevertheless, I want to find the needed solution.
>> In my opinion - If module is able to connect to redis
>> databases, it'd better to perform it with authentication.
>>
>> Because, there are cases when db located on localhost is
>> improper solution or other users mustn't see hkeys, amounts
>> inside hkeys it etc.
>> So I think no one will be mind, to have whole possibility -
>> real-time billing (cnxcc) working with redis securely.
>>
>> So please don't be apathetic to my request.
>>
>> 2018-02-26 9:44 GMT+02:00 Donat Zenichev
>> >:
>>
>> Hi community.
>> This message is specially dedicated to developers of the
>> kamailio project.
>>
>> I need to find solution how to make authentication for
>> connections of cnxcc with redis.
>> For that moment, cnxcc module is able to connect to redis
>> only without password (Carlos Ruiz Díaz will add this
>> possibility later?).
>> So that, this makes database vulnerable.
>>
>> Well, furthermore I don't want to use local redis
>> database, cuz I think machine that contains kamailio
>> daemon, must perform just this kind of actions - SIP
>> proxying (kamailio server is not to be a database server
>> or anything else).
>>
>> For that moment we use separate redis db for cases like
>> that, but this is not best practice I think.
>> I already tried to find solution (for e.g. connections
>> via another module like db_redis:
>> https://github.com/kamailio/kamailio/pull/1432
>> ) but I
>> got advice - achieving my goal by sr-users mailing list.
>>
>> Please pay attention for my request. I think this will be
>> very helpfull for others.
>>
>>
>>
>> -- 
>> -- 
>> BR, Donat Zenichev
>> Wnet VoIP team
>> Tel Ukraine:  +380(44) 5-900-800
>> Tel USA: 

Re: [SR-Users] cnxcc module - make auth for redis connection

[Donat Zenichev]

Hi Daniel, first of all thanks for your attention.

Perhaps I missed something. I read documentation about cnxcc and ndb_redis
again, but I haven't found information that can help me with my goal.
ndb_redis is separate module that implements connections to redis databases
(and also is able to perform authentication), has it's own functions like
redis_cmd() to interact directly with redis.

But cnxcc stores real-time amounts in redis hash keys using it's own
parameter  - modparam("cnxcc", "redis", "addr=127.0.0.1;port=6379;db=1")
And I can't see possibility to use ndb_redis to perform authentication for
cnxcc module, correct me if I'm wrong.

Do you offer me to read ndb_redis code sources to use them to edit cnxcc
code sources?
Thanks in advance for your advice.


2018-03-01 9:28 GMT+02:00 Donat Zenichev :

> Hi Daniel, first of all thanks for your attention.
>
> Perhaps I missed something. I read documentation about cnxcc and ndb_redis
> again, but I haven't found information that can help me with my goal.
> ndb_redis is separate module that implements connections to redis
> databases (and also is able to perform authentication), has it's own
> functions like redis_cmd() to interact directly with redis.
>
> But cnxcc stores real-time amounts in redis hash keys using it's own
> parameter  - modparam("cnxcc", "redis", "addr=127.0.0.1;port=6379;db=1")
> And I can't see possibility to use ndb_redis to perform authentication for
> cnxcc module, correct me if I'm wrong.
>
> Do you offer me to read ndb_redis code sources to use them to edit cnxcc
> code sources?
> Thanks in advance for your advice.
>
>
>
> 2018-02-28 14:33 GMT+02:00 Daniel-Constantin Mierla :
>
>> Hello,
>>
>> maybe authentication support was not implemented in cnxcc. Eventually it
>> can be extracted from the ndb_redis, that module has it implemented already.
>>
>>   * https://www.kamailio.org/docs/modules/stable/modules/ndb_red
>> is.html#ndb_redis.p.server
>>
>> Cheers,
>> Daniel
>>
>> On 27.02.18 14:39, Donat Zenichev wrote:
>>
>> Nevertheless, I want to find the needed solution.
>> In my opinion - If module is able to connect to redis databases, it'd
>> better to perform it with authentication.
>>
>> Because, there are cases when db located on localhost is improper
>> solution or other users mustn't see hkeys, amounts inside hkeys it etc.
>> So I think no one will be mind, to have whole possibility - real-time
>> billing (cnxcc) working with redis securely.
>>
>> So please don't be apathetic to my request.
>>
>> 2018-02-26 9:44 GMT+02:00 Donat Zenichev :
>>
>>> Hi community.
>>> This message is specially dedicated to developers of the kamailio
>>> project.
>>>
>>> I need to find solution how to make authentication for connections of
>>> cnxcc with redis.
>>> For that moment, cnxcc module is able to connect to redis only without
>>> password (Carlos Ruiz Díaz will add this possibility later?).
>>> So that, this makes database vulnerable.
>>>
>>> Well, furthermore I don't want to use local redis database, cuz I think
>>> machine that contains kamailio daemon, must perform just this kind of
>>> actions - SIP proxying (kamailio server is not to be a database server or
>>> anything else).
>>>
>>> For that moment we use separate redis db for cases like that, but this
>>> is not best practice I think.
>>> I already tried to find solution (for e.g. connections via another
>>> module like db_redis:
>>> https://github.com/kamailio/kamailio/pull/1432) but I got advice -
>>> achieving my goal by sr-users mailing list.
>>>
>>> Please pay attention for my request. I think this will be very helpfull
>>> for others.
>>>
>>>
>>>
>>> --
>>> --
>>> BR, Donat Zenichev
>>> Wnet VoIP team
>>> Tel Ukraine:  +380(44) 5-900-800
>>> Tel USA: +164(67) 8-174-17 (ext 1320)
>>> https://w-net.us/ 
>>>
>>
>>
>>
>> --
>> --
>> BR, Donat Zenichev
>> Wnet VoIP team
>> Tel Ukraine:  +380(44) 5-900-800
>> Tel USA: +164(67) 8-174-17 (ext 1320)
>> https://w-net.us/ 
>>
>>
>> ___
>> Kamailio (SER) - Users Mailing 
>> Listsr-users@lists.kamailio.orghttps://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
>>
>> --
>> Daniel-Constantin Mierlawww.twitter.com/miconda -- 
>> www.linkedin.com/in/miconda
>> Kamailio Advanced Training - March 5-7, 2018, Berlin - www.asipto.com
>> Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com
>>
>>
>
>
> --
> --
> BR, Donat Zenichev
> Wnet VoIP team
> Tel Ukraine:  +380(44) 5-900-800
> Tel USA: +164(67) 8-174-17 (ext 1320)
> https://w-net.us/ 
>



-- 
-- 
BR, Donat Zenichev
Wnet VoIP team
Tel Ukraine:  +380(44) 5-900-800
Tel USA: +164(67) 8-174-17 (ext 1320)
https://w-net.us/ 
___
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Re: [SR-Users] cnxcc module - make auth for redis connection

[Daniel-Constantin Mierla]

Hello,

maybe authentication support was not implemented in cnxcc. Eventually it
can be extracted from the ndb_redis, that module has it implemented already.

  *
https://www.kamailio.org/docs/modules/stable/modules/ndb_redis.html#ndb_redis.p.server

Cheers,
Daniel


On 27.02.18 14:39, Donat Zenichev wrote:
> Nevertheless, I want to find the needed solution.
> In my opinion - If module is able to connect to redis databases, it'd
> better to perform it with authentication.
>
> Because, there are cases when db located on localhost is improper
> solution or other users mustn't see hkeys, amounts inside hkeys it etc.
> So I think no one will be mind, to have whole possibility - real-time
> billing (cnxcc) working with redis securely.
>
> So please don't be apathetic to my request.
>
> 2018-02-26 9:44 GMT+02:00 Donat Zenichev  >:
>
> Hi community.
> This message is specially dedicated to developers of the kamailio
> project.
>
> I need to find solution how to make authentication for connections
> of cnxcc with redis.
> For that moment, cnxcc module is able to connect to redis only
> without password (Carlos Ruiz Díaz will add this possibility later?).
> So that, this makes database vulnerable.
>
> Well, furthermore I don't want to use local redis database, cuz I
> think machine that contains kamailio daemon, must perform just
> this kind of actions - SIP proxying (kamailio server is not to be
> a database server or anything else).
>
> For that moment we use separate redis db for cases like that, but
> this is not best practice I think.
> I already tried to find solution (for e.g. connections via another
> module like db_redis:
> https://github.com/kamailio/kamailio/pull/1432
> ) but I got advice
> - achieving my goal by sr-users mailing list.
>
> Please pay attention for my request. I think this will be very
> helpfull for others.
>
>
>
> -- 
> -- 
> BR, Donat Zenichev
> Wnet VoIP team
> Tel Ukraine:  +380(44) 5-900-800
> Tel USA: +164(67) 8-174-17 (ext 1320)
> https://w-net.us/ 
>
>
>
>
> -- 
> -- 
> BR, Donat Zenichev
> Wnet VoIP team
> Tel Ukraine:  +380(44) 5-900-800
> Tel USA: +164(67) 8-174-17 (ext 1320)
> https://w-net.us/ 
>
>
> ___
> Kamailio (SER) - Users Mailing List
> sr-users@lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training - March 5-7, 2018, Berlin - www.asipto.com
Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com

___
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Re: [SR-Users] cnxcc module - make auth for redis connection

[Donat Zenichev]

Nevertheless, I want to find the needed solution.
In my opinion - If module is able to connect to redis databases, it'd
better to perform it with authentication.

Because, there are cases when db located on localhost is improper solution
or other users mustn't see hkeys, amounts inside hkeys it etc.
So I think no one will be mind, to have whole possibility - real-time
billing (cnxcc) working with redis securely.

So please don't be apathetic to my request.

2018-02-26 9:44 GMT+02:00 Donat Zenichev :

> Hi community.
> This message is specially dedicated to developers of the kamailio project.
>
> I need to find solution how to make authentication for connections of
> cnxcc with redis.
> For that moment, cnxcc module is able to connect to redis only without
> password (Carlos Ruiz Díaz will add this possibility later?).
> So that, this makes database vulnerable.
>
> Well, furthermore I don't want to use local redis database, cuz I think
> machine that contains kamailio daemon, must perform just this kind of
> actions - SIP proxying (kamailio server is not to be a database server or
> anything else).
>
> For that moment we use separate redis db for cases like that, but this is
> not best practice I think.
> I already tried to find solution (for e.g. connections via another module
> like db_redis:
> https://github.com/kamailio/kamailio/pull/1432) but I got advice -
> achieving my goal by sr-users mailing list.
>
> Please pay attention for my request. I think this will be very helpfull
> for others.
>
>
>
> --
> --
> BR, Donat Zenichev
> Wnet VoIP team
> Tel Ukraine:  +380(44) 5-900-800
> Tel USA: +164(67) 8-174-17 (ext 1320)
> https://w-net.us/ 
>



-- 
-- 
BR, Donat Zenichev
Wnet VoIP team
Tel Ukraine:  +380(44) 5-900-800
Tel USA: +164(67) 8-174-17 (ext 1320)
https://w-net.us/ 
___
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Re: [SR-Users] cnxcc module - make auth for redis connection

[Dmitri Savolainen]

Hello!
As you mentioned, cnxcc can't perform password auth.
But using redis in local address is good practice in my mind: it used as DB
cache often

On 26 Feb 2018 9:32 p.m., "Donat Zenichev"  wrote:

Hi community.
This message is specially dedicated to developers of the kamailio project.

I need to find solution how to make authentication for connections of cnxcc
with redis.
For that moment, cnxcc module is able to connect to redis only without
password (Carlos Ruiz Díaz will add this possibility later?).
So that, this makes database vulnerable.

Well, furthermore I don't want to use local redis database, cuz I think
machine that contains kamailio daemon, must perform just this kind of
actions - SIP proxying (kamailio server is not to be a database server or
anything else).

For that moment we use separate redis db for cases like that, but this is
not best practice I think.
I already tried to find solution (for e.g. connections via another module
like db_redis:
https://github.com/kamailio/kamailio/pull/1432) but I got advice -
achieving my goal by sr-users mailing list.

Please pay attention for my request. I think this will be very helpfull for
others.



-- 
-- 
BR, Donat Zenichev
Wnet VoIP team
Tel Ukraine:  +380(44) 5-900-800
Tel USA: +164(67) 8-174-17 (ext 1320)
https://w-net.us/ 

___
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
___
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

[SR-Users] cnxcc module - make auth for redis connection

[Donat Zenichev]

Hi community.
This message is specially dedicated to developers of the kamailio project.

I need to find solution how to make authentication for connections of cnxcc
with redis.
For that moment, cnxcc module is able to connect to redis only without
password (Carlos Ruiz Díaz will add this possibility later?).
So that, this makes database vulnerable.

Well, furthermore I don't want to use local redis database, cuz I think
machine that contains kamailio daemon, must perform just this kind of
actions - SIP proxying (kamailio server is not to be a database server or
anything else).

For that moment we use separate redis db for cases like that, but this is
not best practice I think.
I already tried to find solution (for e.g. connections via another module
like db_redis:
https://github.com/kamailio/kamailio/pull/1432) but I got advice -
achieving my goal by sr-users mailing list.

Please pay attention for my request. I think this will be very helpfull for
others.



-- 
-- 
BR, Donat Zenichev
Wnet VoIP team
Tel Ukraine:  +380(44) 5-900-800
Tel USA: +164(67) 8-174-17 (ext 1320)
https://w-net.us/ 
___
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users