Coturn: Empty CLI password even if CLI disabled

[madmath03]

The turnserver displays a configuration error when CLI password is empty even if the CLI has been disabled with --no-cli:
https://github.com/coturn/coturn/blob/856c3c9ff620ae2b00354ac55c539ba3dadb16f7/src/apps/relay/mainrelay.c#L2252-L2255

[misi]

Thanks for reporting and fixing it.

[VolodyaIvanets]

I was trying to start turnserver v4.5.1.1 with no-cli option but got same error message:

# turnserver --no-cli
0: ERROR:
CONFIG ERROR: Empty cli-password, and so telnet cli interface is disabled! Please set a non empty cli-password!

[misi]

Thanks @VolodyaIvanets!
Can you please open a new issue send a PR.
I am busy with other stuff. So sorry..
Thanks.

[theronic]

Also bitten by this. How do I set a CLI password?

[de-saksham]

@theronic cli-password=yourpassword

[developdeez]

Same issue. How do you use that command @de-saksham ?
I'm new to linux
Does this keep the server from running?

[de-saksham]

@developdeez you can enter this in turnserver.conf file like
cli-password = yourpassword

Yes, as experienced until you don't pass this cli-password server won't start. This is the only issue.

[misi]

It is because of security and vulnerability reported by many. Sorry for it.
It is just you should set a password.

[misi]

I fixed the no-cli issue.

[lekhnath]

@misi I generated hashed password using following command:

$ turnadmin -P -p mypassword
$5$2b68f7dfecd69648$d87a5bc81adc17921cea7e4b30c2e2d0f5eb0339d2e0d3f20f3e7ece5489e7ea

And updated configuration file /etc/turnserver.conf as follows:

cli-password=$5$2b68f7dfecd69648$d87a5bc81adc17921cea7e4b30c2e2d0f5eb0339d2e0d3f20f3e7ece5489e7ea

and then re run the turnserver command but still getting the same error message that says CONFIG ERROR: Empty cli-password, and so telnet cli interface is disabled! Please set a non empty cli-password!

What should I do next to apply the configuration changes?

Error log:

0: log file opened: /var/tmp/turn_3295_2020-07-21.log
0: 
RFC 3489/5389/5766/5780/6062/6156 STUN/TURN Server
Version Coturn-4.5.0.7 'dan Eider'
0: 
Max number of open files/sockets allowed for this process: 1048576
0: 
Due to the open files/sockets limitation,
max supported number of TURN Sessions possible is: 524000 (approximately)
0: 

==== Show him the instruments, Practical Frost: ====

0: TLS supported
0: DTLS supported
0: DTLS 1.2 supported
0: TURN/STUN ALPN supported
0: Third-party authorization (oAuth) supported
0: GCM (AEAD) supported
0: OpenSSL compile-time version: OpenSSL 1.1.1  11 Sep 2018 (0x1010100f)
0: 
0: SQLite supported, default database location is /var/lib/turn/turndb
0: Redis supported
0: PostgreSQL supported
0: MySQL supported
0: MongoDB is not supported
0: 
0: Default Net Engine version: 3 (UDP thread per CPU core)

=====================================================

0: Listener address to use: <privateip>
0: Domain name: 
0: Default realm: someRealm
0: ERROR: 
CONFIG ERROR: Empty cli-password, and so telnet cli interface is disabled! Please set a non empty cli-password!
0: Relay address to use: <privateip>

[lekhnath]

@misi never mind I was using -n option in turnserver command which was bypassing the configuration file. :)