External authentication with redis

91 views
Skip to first unread message

Dimitri Pekarovsky

unread,
Jan 12, 2016, 12:08:03 AM1/12/16
to TURN Server (Open-Source project)
Hi all, please help, I'm lost in documentation (=

I found that topic https://groups.google.com/forum/#!newtopic/turn-server-project-rfc5766-turn-server/turn-server-project-rfc5766-turn-server/BrhFM5YESaU, but it is not suitable for me.

I have my web app with authentication already working. I make temporary auth keys for every user session and store those as a plain-text in the redis db with expiration. So technically I have a 300-chars-long string as a temporary password stored unencrypted in redis database.  Which type of authentication should I use in coturn so I can use those keys as a plain-text password?

I made keys in db#2
hmset turn/user/ninefingers password youhavetoberealistic realm bay.com
hmset turn/realm/timebay.com/user/ninefingers
password youhavetoberealistic realm bay.com
set turn/realm/bay.com/user/ninefingers/password youhavetoberealistic
set /turn/realm/bay.com/user/ninefingers/password youhavetoberealistic

turnserver.conf:
fingerprint
lt
-cred-mech
redis
-userdb="ip=127.0.0.1 dbname=2 connect_timeout=1"
redis
-statsdb="ip=127.0.0.1 dbname=6 connect_timeout=1"
realm
=timebay.com
check
-origin-consistency
user
-quota=3
stale
-nonce
log
-file=/var/log/turnserver/turn.log
no-multicast-peers
max
-allocate-timeout=60
pidfile
="/var/run/turnserver/turnserver.pid"
secure
-stun
cli
-ip=127.0.0.1
no-tlsv1
no-tlsv1_1

I still get an error:
33533: check_stun_auth: Cannot find credentials of user <ninefingers>
33533: session 001000000000000004: realm <bay.com> user <ninefingers>: incoming packet message processed, error 401: Unauthorized

Thank in advance.

Reply all
Reply to author
Forward
0 new messages