One alternative is to pass user/password via environment variables and
then use #!substdef in configuration file, with the replacement using
the corresponding $env(...) variables.

If the goal is protecting the configuration file content in long term
against being read in the future, two other options:

  - remove kamailio.cfg after starting kamailio, it is not needed at runtime

  - encrypt kamailio.cfg and pipe its decrypted content to kamailio at
startup, like:

decryptapp kamailio-encrypted.cfg | kamailio -f - ...

Cheers,
Daniel

On 18.11.20 15:27, David Villasmil wrote:
> I just get the params from AWS Parameter Store and pass it to Kamailio
> on startup. Downsize is you can see them in “ps”.
>
> On Wed, 18 Nov 2020 at 12:40, Alexandru Covalschi <[email protected]
> <mailto:[email protected]>> wrote:
>
>     Alternative way is to use unixodbc, but it just means you put the
>     password into another file.
>
>     ср, 18 нояб. 2020 г. в 14:35, Alexandru Covalschi
>     <[email protected] <mailto:[email protected]>>:
>
>         Don't use databases. Create an API and use it to access the
>         data you need. Won't work for every possible usage, but in
>         general API-driven SIP-routing is very possible with Kamailio,
>         especially with KEMI.
>
>         ср, 18 нояб. 2020 г. в 11:32, Ahmed Marsou
>         <[email protected] <mailto:[email protected]>>:
>
>             Hi;
>             I want to remove all plain text usernames an
>             passwords from kamailio.cfg file. Like modparam("auth_db",
>             "db_url", "dbdriver://username:password@dbhost/dbname")
>             or this 
>             
> modparam("sqlops","sqlcon","ca=>dbdriver://username:password@dbhost/dbname")
>             Can you help me with some ideas of how can I handle that?
>             Thank you.
>             _______________________________________________
>             Kamailio (SER) - Users Mailing List
>             [email protected]
>             <mailto:[email protected]>
>             https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>             <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>
>
>
>
>         -- 
>         Alexandru Covalschi
>         VoIP engineer and system administrator
>         tel: +37367398493
>
>
>
>     -- 
>     Alexandru Covalschi
>     VoIP engineer and system administrator
>     tel: +37367398493
>
>     _______________________________________________
>     Kamailio (SER) - Users Mailing List
>     [email protected] <mailto:[email protected]>
>     https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>     <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>
>
> -- 
> Regards,
>
> David Villasmil
> email: [email protected]
> <mailto:[email protected]>
> phone: +34669448337
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> [email protected]
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Funding: https://www.paypal.me/dcmierla

_______________________________________________
Kamailio (SER) - Users Mailing List
[email protected]
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Reply via email to