Hi all,
I am trying to configure radius for ser, and have installed radiusclient-ng-0.5.1.
But when I run SER, it shows Errors with the four lines:
modparam("acc","radius_config","/usr/local/etc/radiusclient-ng/radiusclient.conf")
modparam("acc", "service_type", 15)
modparam("acc", "radius_flag", 1)
modparam("acc", "radius_missed_flag", 3)
***************************************************************************************
The errors are recorded in /var/log as following:
Jul 22 11:28:13 localhost ser: set_mod_param_regex: parameter <radius_config> not found in module <acc>
Jul 22 11:28:13 localhost ser: parse error (77,18-19): Can't set module parameter
Jul 22 11:28:13 localhost ser: set_mod_param_regex: parameter <service_type> not found in module <acc>
Jul 22 11:28:13 localhost ser: parse error (79,20-21): Can't set module parameter
Jul 22 11:28:13 localhost ser: set_mod_param_regex: parameter <radius_flag> not found in module <acc>
Jul 22 11:28:13 localhost ser: parse error (80,19-20): Can't set module parameter
Jul 22 11:28:13 localhost ser: set_mod_param_regex: parameter <radius_missed_flag> not found in module <acc>
Jul 22 11:28:13 localhost ser: parse error (81,19-20): Can't set module parameter
Jul 22 11:28:13 localhost 7月 22 11:28:13 ser: ERROR: bad config file (4 errors)
***************************************************************************************
Any help in solving this problem will be appreciated.
Thanks
PS:
ser.cfg is as following:
# ------------------ module loading ----------------------------------
# Uncomment this if you want to use SQL database
loadmodule "/usr/local/lib/ser/modules/mysql.so"
loadmodule "/usr/local/lib/ser/modules/sl.so"
loadmodule "/usr/local/lib/ser/modules/tm.so"
loadmodule "/usr/local/lib/ser/modules/rr.so"
loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
loadmodule "/usr/local/lib/ser/modules/usrloc.so"
loadmodule "/usr/local/lib/ser/modules/registrar.so"
loadmodule "/usr/local/lib/ser/modules/textops.so"
loadmodule "/usr/local/lib/ser/modules/uri.so"
# Uncomment this if you want digest authentication
# mysql.so must be loaded !
loadmodule "/usr/local/lib/ser/modules/auth.so"
loadmodule "/usr/local/lib/ser/modules/auth_db.so"
loadmodule "/usr/local/lib/ser/modules/acc.so" #radius
loadmodule "/usr/local/lib/ser/modules/auth_radius.so" #radius
loadmodule "/usr/local/lib/ser/modules/group_radius.so" #radius
# ----------------- setting module-specific parameters ---------------
# -- usrloc params --
#modparam("usrloc", "db_mode", 0)
# Uncomment this if you want to use SQL database
# for persistent storage and comment the previous line
modparam("usrloc", "db_mode", 2)
# -- auth params --
# Uncomment if you are using auth module
#
modparam("auth_db", "calculate_ha1", yes)
#
# If you set "calculate_ha1" parameter to yes (which true in this config),
# uncomment also the following parameter)
#
modparam("auth_db", "password_column", "password")
# -- rr params --
# add value to ;lr param to make some broken UAs happy
modparam("rr", "enable_full_lr", 1)
modparam("auth_radius","radius_config","/usr/local/etc/radiusclient-ng/radiusclient.conf")
modparam("auth_radius","service_type",15)
modparam("acc","radius_config","/usr/local/etc/radiusclient-ng/radiusclient.conf")
modparam("acc","log_level",1)
modparam("acc", "service_type", 15)
modparam("acc", "radius_flag", 1)
modparam("acc", "radius_missed_flag", 3)
modparam("acc", "failed_transactions", 1)
modparam("acc", "report_ack", 0)
modparam("group_radius","radius_config","/usr/local/etc/radiusclient-ng/radiusclient.conf")
modparam("group_radius", "use_domain", 1)
......
Hi Norman,
that example is for OpenSER 0.9.x. The cvs head version uses the pseudo
variable specifiers - see my email
http://openser.org/pipermail/users/2005-July/000263.html
Hoe to do it in the CVS head version is documented at
http://www.openser.org/docs/modules/0.10.x/acc.html#AEN99
with pseudo variables you can do it directly (without storing first the
src_ip in an AVP); just:
....
modparam("acc","db_extra","src_ip=*$si*")
....
regards,
Bogdan
Norman Brandinger wrote:
> Hi,
>
> I tried to implement your suggestion but received a parse error at
> startup. I then went back to the doc and tried to implement the
> sample listed there. This produced a parse error as well. Below are
> the appropriate log entries from the "sample". We are running the CVS
> version from a few days ago.
>
> ACC - initializing
> xl_parse_item: error - bad parameters
> ERROR:acc:parse_acc_extra: parse failed in
> <uuid=avp/i:888;src_ip=avp/i:999> around position 5
> acc:parse_acc_extra: error
> ERROR:acc:mod_init: failed to parse db_extra param
> init_mod(): Error while initializing module acc
>
> Regards,
> Norm
>
>
> Bogdan-Andrei Iancu wrote:
>
>> Hi Jayesh,
>>
>> in OpenSER 0.9.5, you may try the following configuration of the acc
>> module:
>> ....
>> modparam("acc","db_extra","src_ip=avp/i:10")
>> ....
>>
>> ....
>> # were setting the acc flag do also
>> avp_write("src_ip","i:10");
>> .....
>>
>> The idea is to set the acc to extra account the i:10 (ID 10) AVP in
>> which, from script, you store the SRC IP of the message. NOTE you
>> need to add the src_ip column to your acc/missed_calls table.
>>
>> the destination IP cannot be logged yet.....
>>
>> regards,
>> bogdan
>>
>>
>> jayesh nambiar wrote:
>>
>>> hey Bogdan,
>>>
>>> Thanx a lot for that information. I am completely new to Openser.
>>> I've been working on it since last 10 days only. I am still going
>>> through the developers guide. Our company is very much intersested
>>> in implementing the openser for our clients.
>>>
>>> The version that i m using is Openser-0.9.5.
>>>
>>> Any information regarding accounting would be very much valuable
>>> for me.
>>>
>>> Thanx again.
>>>
>>> Bye
>>>
>>> ------------------------------------------------------------------------
>>>
>>> Yahoo! Mail for Mobile
>>> Take Yahoo! Mail with you!
>>> <http://us.rd.yahoo.com/evt=31132/*http://mobile.yahoo.com/learn/mail>
>>> Check email on your mobile phone.
>>
>>
>>
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users(a)openser.org
>> http://openser.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
Hi,
I am working with ser on freeebsd 5.3 and I have some problem with acc
module. The authentification work fine and I am even able to use X-lite
as client.
but when I load the module acc.so, I have in the log file
pid 14501 (ser), uid 0: exited on signal 11 (core dumped)
Here is a basic config file I used from the acc tutorial
loadmodule "/usr/local/lib/ser/modules/acc.so"
loadmodule "/usr/local/lib/ser/modules/auth.so"
loadmodule "/usr/local/lib/ser/modules/sl.so"
loadmodule "/usr/local/lib/ser/modules/tm.so"
loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
modparam("acc", "log_level", 1)
modparam("acc", "log_flag", 1)
Can someone helps me?
Hi,
I have a background with HP-Unix but the last time I used that was 5
years ago. I have just completed setting up a PC on FreeBSD 5.4 RELEASE
and SER 0.9.3 (i386/freebsd). I unpacked the SER on my FreeBSD box and
ran it as per the INSTALL guide from iptel.org and seem to get it
running. (Please see attached FreeBSD-SER.txt)
I can't get the "serctl moni" to work so as to check if it is actually
running. I get "[: -ne: unexpected operator" and that's all I get.
The INSTALL guide isn't all that helpful as it lacks detail regarding
some other settings I might need to do or consider.
Could anyone help me out?
What am I missing? Should I set up other stuff like MySQL, APACHE Web
Server for the SERWEB, scripts & config files for environment
parameters?
I just basically Unzipped the SER Distribution tar file onto /usr/local/
as that was the default path of the distribution.
Thanks in advance for any assistance.
Regards,
Carlo
========================================
This message is the property of Codex Systems Ltd. or its affiliates and subsidiaries. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message.
Thank you.
Hi,
I have updated radiusclient to 0.4.8 and SER to 0.9.3, and also copy file "radiusclient-ng.h" to the /modules/auth_radius directory.
Then run "make", but still shows error :( ---as following
[root@localhost auth_radius]# make all include_modules="auth_radius group_radius uri_radius mysql"
../../Makefile.modules:21: "you should run make from the main ser directory"
gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"ser"' -DVERSION='"0.9.3"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 3.2"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DHAVE_ALLOCA_H -I/usr/local/include -c authrad_mod.c -o authrad_mod.o
authrad_mod.c:51:31: radiusclient-ng.h: cannot find the file
authrad_mod.c: In function `mod_init':
authrad_mod.c:116: `DICT_VENDOR' undeclared (first use in this function)
authrad_mod.c:116: (Each undeclared identifier is reported only once
authrad_mod.c:116: for each function it appears in.)
authrad_mod.c:116: `vend' undeclared (first use in this function)
authrad_mod.c:140: warning: implicit declaration of function `rc_read_config'
authrad_mod.c:140: warning: assignment makes pointer from integer without a cast
authrad_mod.c:145: warning: implicit declaration of function `rc_read_dictionary'
authrad_mod.c:145: warning: implicit declaration of function `rc_conf_str'
authrad_mod.c:150: warning: implicit declaration of function `rc_dict_findvend'
authrad_mod.c:165: `DICT_ATTR' undeclared (first use in this function)
authrad_mod.c:165: `da' undeclared (first use in this function)
authrad_mod.c:165: `DICT_VALUE' undeclared (first use in this function)
authrad_mod.c:165: `dv' undeclared (first use in this function)
authrad_mod.c:165: warning: implicit declaration of function `rc_dict_findattr'
authrad_mod.c:165: warning: implicit declaration of function `rc_dict_findval'
make: *** [authrad_mod.o] Error 1
Your help will be genial.
----- Original Message -----
From: "Andrei Pelinescu-Onciul" <andrei(a)iptel.org>
To: "Kert?sz Csaba" <sign(a)freemail.hu>
Cc: <serusers(a)iptel.org>
Sent: Tuesday, July 12, 2005 8:17 PM
Subject: Re: [Serusers] radius compile problem in ser 0.8.14
> On Jul 11, 2005 at 16:02, Kert?sz Csaba <sign(a)freemail.hu> wrote:
>>
>> Hallo,
>>
>> I'm trying to compile the radius modules of SER 0.8.14 but a following
>> error message and I don't find what is the problem:
>
> You are probably using a wrong libradiusclient library.
> You need libradiusclient-ng 0.4.1 for ser 0.8.14.
> WARNING: it won't work with 0.5.x, you need 0.4.x.
> It would be probably better to upgrade ser to 0.9.3.
>
>
> Andrei
>>
>> gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-
>> stringops -malign-double -falign-loops -mcpu=athlon -
>> DNAME='"auth_radius.so"' -DVERSION='"0.8.14"' -DARCH='"i386"' -
>> DOS='"linux"' -DCOMPILER='"gcc 3.3"' -D__CPU_i386 -D__OS_linux -
>> DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -
>> DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_TCP -
>> DDISABLE_NAGLE -DF_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT -
>> DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -
>> DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -
>> DHAVE_MSGHDR_MSG_CONTROL -I/usr/local/include -c authrad_mod.c -
>> o authrad_mod.o
>> authrad_mod.c: In function `mod_init':
>> authrad_mod.c:111: error: `DICT_VENDOR' undeclared (first use in this
>> function)
>> authrad_mod.c:111: error: (Each undeclared identifier is reported only
>> once
>> authrad_mod.c:111: error: for each function it appears in.)
>> authrad_mod.c:111: error: `vend' undeclared (first use in this function)
>> authrad_mod.c:135: warning: assignment makes pointer from integer
>> without a cast
>> authrad_mod.c:140: error: too many arguments to function
>> `rc_conf_str'
>> authrad_mod.c:140: error: too many arguments to function
>> `rc_read_dictionary'
>> authrad_mod.c:145: warning: implicit declaration of function
>> `rc_dict_findvend'
>> authrad_mod.c:163: error: too many arguments to function
>> `rc_dict_findattr'
>> authrad_mod.c:163: error: too many arguments to function
>> `rc_dict_findval'
>> authrad_mod.c: At top level:
>> ../../dprint.h:51: warning: `fp' defined but not used
>> ../../modules/usrloc/client_socket.h:17: warning: `buff' defined but not
>> used
>> ../../modules/usrloc/client_socket.h:18: warning: `rec_attached'
>> defined but not used
>> make: *** [authrad_mod.o] Error 1
>
> _______________________________________________
> Serusers mailing list
> Serusers(a)iptel.org
> http://mail.iptel.org/mailman/listinfo/serusers
Hi all!
Somone can give me an example how to forward calls to a (Cisco) PSTN Gateway
with rtpproxy? The user is behind a Port Restricted Cone Nat and I have no
idea how to solve the problem, that I have a one way audio stream.
I'm using the following code:
# special handling for NATed clients; first, nat test is
# executed: it looks for via!=received and RFC1918 addresses
# in Contact (may fail if line-folding used); also,
# the received test should, if complete, should check all
# vias for presence of received
if (nat_uac_test("3")) {
# allow RR-ed requests, as these may indicate that
# a NAT-enabled proxy takes care of it; unless it is
# a REGISTER
if (method == "REGISTER" || ! search("^Record-Route:")) {
log("LOG: Someone trying to register from private
IP, rewriting\n");
# This will work only for user agents that support
symmetric
# communication. We tested quite many of them and
majority is
# smart smart enough to be symmetric. In some
phones, like
# it takes a configuration option. With Cisco 7960,
it is
# called NAT_Enable=Yes, with kphone it is called
# "symmetric media" and "symmetric signaling". (The
latter
# not part of public released yet.)
fix_nated_contact(); # Rewrite contact with source
IP of signalling
if (method == "INVITE") {
fix_nated_sdp("1"); # Add direction=active
to SDP
};
force_rport(); # Add rport parameter to topmost Via
setflag(6); # Mark as NATed
};
};
[....]
rewritehostport("xxx.xxx.xxx.xxx:5060"); #forward to the gateway
[....]
if (isflagset(6)) {
force_rtp_proxy();
t_on_reply("2");
append_hf("P-Behind-NAT: Yes\r\n");
append_hf("P-hint: GATEWAY\r\n");
};
if (!t_relay()) {
sl_reply_error();
break;
};
[....]
onreply_route[2] {
if (status=~"2[0-9][0-9]") {
force_rport();
fix_nated_contact();
fix_nated_sdp("2");
force_rtp_proxy();
};
}
Has anyone of you experience with this? How you can imagine... I can't put
the gateway on the ser proxy :-(
Before the OK from the gateway reaches, the phone receives many UDP messages
directly from the gateway... then the conversation is "switching".
I made a ngrep on the messages to the PSTN and the media stream goes out
like this... I'm wondering why the OK message has the IP information twice:
INVITE:
---------
v=0.
o=- 3330963367 3330963367 IN IP4 192.168.1.101.
s=SJphone.
c=IN IP4 xxx.xxx.xxx.xxx. <-- ser server IP
address
t=0 0.
a=direction:active.
m=audio 35076 RTP/AVP 3 8 0 101.
a=rtpmap:3 GSM/8000.
a=rtpmap:8 PCMA/8000.
a=rtpmap:0 PCMU/8000.
a=rtpmap:101 telephone-event/8000.
a=fmtp:101 0-11,16.
a=direction:active.
a=nortpproxy:yes.
OK (from GW to ser)
----------------------
v=0.
o=CiscoSystemsSIP-GW-UserAgent 9220 7434 IN IP4 xxx.xxx.xxx.xxx.
<-- IP of Gateway
s=SIP Call.
c=IN IP4 xxx.xxx.xxx.xxx. <-- IP of Gateway
t=0 0.
m=audio 16460 RTP/AVP 3 101.
c=IN IP4 xxx.xxx.xxx.xxx. <-- IP of Gateway
a=rtpmap:3 GSM/8000.
a=rtpmap:101 telephone-event/8000.
a=fmtp:101 0-11,16.
OK (from ser to phone):
------------------------
v=0.
o=CiscoSystemsSIP-GW-UserAgent 7310 9703 IN IP4 xxx.xxx.xxx.xxx.
<-- IP of the gateway
s=SIP Call.
c=IN IP4 xxx.xxx.xxx.xxx. <-- IP of us
t=0 0.
m=audio 35078 RTP/AVP 3 101.
c=IN IP4 xxx.xxx.xxx.xxx.
a=rtpmap:3 GSM/8000.
a=rtpmap:101 telephone-event/8000.
a=fmtp:101 0-11,16.
a=nortpproxy:yes.
Thanks for your help! I hope there is a solution for this!!
Sebastian
Hi Friends,
I'm using OpenSER 0.9.5 and Mediaproxy together and it works okay, i've tried as conditions below ;
* Clients are behind ADSL Modem/Gateway/Routers, many of them,
* Their bandwidth is not lower then 512kbit (up) / 128kbit (down),
* I've tried with ATA's, Zyxel P2002, Zyxel P2000W, Zyxel P2602HW, LinkSys PAP2-NA, Cisco ATA186 and mostly i prefer g729,
* No sound problems or NAT problems,
* OpenSER is connected to PSTN gateway and it works well.
And for anyone interested in postpaid billing, i'm modifying original database since i have somethings to add it and corrected some stuff in it... You will be able to check current position of it, tomorrow, will post URL to list.. Everything is PHP...
Thanks,
Ozan
Hi!
I'm forwarding to the Gateway. I can forward it with a symmetrical cone nat
now,
too. But with a Port Restricted Cone NAT no... this is my last problem I
hope.
Here my routing:
if (isflagset(6)) {
force_rtp_proxy();
t_on_reply("2");
append_hf("P-Behind-NAT: Yes\r\n");
append_hf("P-hint: GATEWAY\r\n");
};
if (method=="INVITE") {
record_route();
setflag(1);
if (uri=~"sip:00") {
strip(3);
prefix("xxxx");
rewritehostport("xxx.xxx.xxx.xxx:5060");
};
};
...
if (!t_relay()) {
sl_reply_error();
break;
};
...
onreply_route[2] {
if (status=~"2[0-9][0-9]") {
force_rport();
fix_nated_contact();
if (search("User-Agent: Cisco ATA.*")) {
fix_nated_sdp("2");
};
force_rtp_proxy();
};
}
Are there any flags to be set??
Thanks!
Sebastian
----- Original Message -----
From: <xwang(a)cascotec.com>
To: "Sebastian Kühner" <skuehner(a)veraza.com>
Sent: Thursday, July 21, 2005 1:36 PM
Subject: RE: [Serusers] NAT
> "A restricted cone NAT is one where all requests from the same internal IP
> address and port are mapped to the same external IP address and port.
Unlike
> a full cone NAT, an external host (with IP address X) can send a packet to
> the internal host only if the internal host had previously sent a packet
to
> IP address X"
>
> do you forward calls from SER proxy to Gateway or call to Gateway
directly?
>
> steven
>
> -----Original Message-----
> From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@lists.iptel.org]On
> Behalf Of Sebastian Kühner
> Sent: Thursday, July 21, 2005 8:14 AM
> To: serusers(a)lists.iptel.org
> Subject: [Serusers] NAT
>
>
> Hi!
>
> Another problem with NAT... I hope I will solve it soon!
>
> My rtpproxy is running and ser can connect to the rtpproxy. I can make
calls
> to users that are connected to the ser server behind a NAT (Restricted
Cone
> NAT and symmetrical NAT). That's working fine!!! Thanks for your help!!!
>
> But I have the problem that if I want to call to a Cisco PSTN-Gateway,
that
> I can establish the call... but I don't hear anything. The callee is
hearing
> me. What is the difference between an internal user and the Gatway?? The
> routing for Gateway and Users is almost equal (the only difference is the
> "P-hint: GATEWAY").
>
> And: I'm wondering why the communication is OK with a symmetrical NAT
> (Linksys) and WITHOUT rtpproxy. If I turn on the rtpproxy (with symetrical
> NAT) the voice stream of the Gateway isn't arriving anymore.
>
> Any ideas?
>
> Thanks!
>
> Sebastian
>
>
> _______________________________________________
> Serusers mailing list
> serusers(a)lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
>
>
>
Hi
I am looking at upgrading soon, and am looking both at ser and openser,
without wanting to open a can of worms, what is better, the features
look pretty much the same, not sure if there are any changes to the
underlying code, in terms of speed etc etc.
I like some of the features in the roadmap of ser, if anyone has migrated
from ser to openser, and has any pointers let me know, would be nice to
be able to go back and forth, between them both, but I dont think
openser cfg is compatible down to some features.
Iqbal