redis_ippool_tool is not supporting password authentication
Hi, I have a redis server on AWS with auth token enabled. I am trying to add some ip pools in the db via rlm_redis_ippool_tool command. However, this command does not work for this auth enabled redis db. $ cat redis_ippool redis { server = <server_ip> port = 6379 password = <pass> } $ /usr/local/bin/rlm_redis_ippool_tool -a 10.88.112.3-10.88.112.62 -f redis_ippool TESTPOOL Error : Need pool to operate on $ /usr/local/bin/rlm_redis_ippool_tool -a 10.88.112.3-10.88.112.62 -f redis_ippool <server_ip>:6379 TESTPOOL $ echo $? 1 $ redis-cli -c -h <server_ip> -p 6379 -a <pass> Warning: Using a password with '-a' or '-u' option on the command line interface may not be safe. localhost:6379> keys * (empty list or set) localhost:6379> exit Regards, Nagamani Chinnapaiyan
On Jul 19, 2019, at 8:22 AM, Chinnapaiyan, Nagamani <Nagamani.Chinnapaiyan@viasat.com> wrote:
I have a redis server on AWS with auth token enabled. I am trying to add some ip pools in the db via rlm_redis_ippool_tool command. However, this command does not work for this auth enabled redis db.
Yes. The rlm_redis_ippool_tool does not support passwords or the AUTH command. We're in the process of refactoring that code, so it might be a bit before that functionality is added. Alan DeKok.
Sorry... It worked after changing the config file to, $ cat redis_ippool server = <server_ip> port = 6379 password = <pass> However, I see a problem because of redis cluster. Sometimes it is not adding with following output. $ /usr/local/bin/rlm_redis_ippool_tool -a 10.88.112.3-10.88.112.62 -f redis_ippool <server_ip>:6379 TESTPOOL Info : Initiating cluster remap $ /usr/local/bin/rlm_redis_ippool_tool -a 10.88.112.3-10.88.112.62 -f redis_ippool <server_ip>:6379 TESTPOOL Info : Initiating cluster remap Sometimes it adds correctly, $ /usr/local/bin/rlm_redis_ippool_tool -a 10.88.112.3-10.88.112.62 -f redis_ippool <server_ip>:6379 TESTPOOL Info : Added 60 address(es)/prefix(es) Regards, Nagamani Chinnapaiyan From: Chinnapaiyan, Nagamani Sent: Friday, July 19, 2019 5:52 PM To: 'freeradius-users@lists.freeradius.org' <freeradius-users@lists.freeradius.org> Subject: redis_ippool_tool is not supporting password authentication Hi, I have a redis server on AWS with auth token enabled. I am trying to add some ip pools in the db via rlm_redis_ippool_tool command. However, this command does not work for this auth enabled redis db. $ cat redis_ippool redis { server = <server_ip> port = 6379 password = <pass> } $ /usr/local/bin/rlm_redis_ippool_tool -a 10.88.112.3-10.88.112.62 -f redis_ippool TESTPOOL Error : Need pool to operate on $ /usr/local/bin/rlm_redis_ippool_tool -a 10.88.112.3-10.88.112.62 -f redis_ippool <server_ip>:6379 TESTPOOL $ echo $? 1 $ redis-cli -c -h <server_ip> -p 6379 -a <pass> Warning: Using a password with '-a' or '-u' option on the command line interface may not be safe. localhost:6379> keys * (empty list or set) localhost:6379> exit Regards, Nagamani Chinnapaiyan
participants (2)
-
Alan DeKok -
Chinnapaiyan, Nagamani