It is an interesting proposal to find a way for Kamailio to fetch external 
credentials in run-time,
not having them in clear text in config files. Like integration with hashicorp 
vault or something.

/O

> On 18 Nov 2020, at 15:50, Ahmed Marsou <amarsou1...@gmail.com> wrote:
> 
>  Thank you so much, David and Alexandru. 
> I'm not sure but i read something about reading the config from my.cnf
> 
> http://www.kamailio.org/docs/modules/5.0.x/modules/db_mysql.html#idp419 
> <http://www.kamailio.org/docs/modules/5.0.x/modules/db_mysql.html#idp419>
> 
> The problem is that my.cnf, have 600 permission and I'm running kamailio with 
> user kamailio, so the question is, 
> There is a way to read this file as root on startup but run kamailio as 
> kamailio?
> The option AWS Parameter Store, is something related to amazon, right?
> 
> Tank you so much.
> 
> El mié., 18 nov. 2020 a las 15:29, David Villasmil 
> (<david.villasmil.w...@gmail.com <mailto:david.villasmil.w...@gmail.com>>) 
> escribió:
> I just get the params from AWS Parameter Store and pass it to Kamailio on 
> startup. Downsize is you can see them in “ps”.
> 
> On Wed, 18 Nov 2020 at 12:40, Alexandru Covalschi <568...@gmail.com 
> <mailto:568...@gmail.com>> wrote:
> Alternative way is to use unixodbc, but it just means you put the password 
> into another file.
> 
> ср, 18 нояб. 2020 г. в 14:35, Alexandru Covalschi <568...@gmail.com 
> <mailto:568...@gmail.com>>:
> Don't use databases. Create an API and use it to access the data you need. 
> Won't work for every possible usage, but in general API-driven SIP-routing is 
> very possible with Kamailio, especially with KEMI.
> 
> ср, 18 нояб. 2020 г. в 11:32, Ahmed Marsou <amarsou1...@gmail.com 
> <mailto:amarsou1...@gmail.com>>:
> Hi;
> I want to remove all plain text usernames an passwords from kamailio.cfg 
> file. Like modparam("auth_db", "db_url", 
> "dbdriver://username:password@dbhost/dbname")
> or this  
> modparam("sqlops","sqlcon","ca=>dbdriver://username:password@dbhost/dbname")
> Can you help me with some ideas of how can I handle that?
> Thank you.
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users 
> <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>
> 
> 
> -- 
> Alexandru Covalschi
> VoIP engineer and system administrator
> tel: +37367398493
> 
> 
> 
> -- 
> Alexandru Covalschi
> VoIP engineer and system administrator
> tel: +37367398493
> 
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users 
> <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>
> -- 
> Regards,
> 
> David Villasmil
> email: david.villasmil.w...@gmail.com <mailto:david.villasmil.w...@gmail.com>
> phone: +34669448337
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org>
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users 
> <https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users@lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Reply via email to