Hi Ricardo,
We are using freeradius server 0.9.1 and SER 0.9.3. The version of radius client is radiusclient-ng-0.5.1. The users file in the radius server looks like as below:
test(a)sip2.zone Auth-Type := Digest, User-Password == "cisco1234"
Reply-Message = "Authenticated",
Sip-Rpid = "1970"
test(a)sip2.zone Auth-Type := Accept
Reply-Message = "Authorized",
Sip-Group == "ld"
The radius authentication and authorization parts in the ser.cfg file are given below:
if (uri=~"^sip:9[0-9]*@") {
if (method=="INVITE"){
if (!radius_www_authorize("")) {
www_challenge("", "1");
break;
}else{
if (radius_is_user_in("Credentials", "ld")){
forward(192.168.2.101,5060);
break;
}else{
break;
};
};
};
};
And finally the error is as below:
Invalid operator for item Suffix: reverting to '=='
modcall[authorize]: module "preprocess" returns ok
modcall[authorize]: module "chap" returns noop
rlm_eap: No EAP-Message, not doing EAP
modcall[authorize]: module "eap" returns noop
rlm_digest: Converting Digest-Attributes to something sane...
Digest-User-Name = "test"
Digest-Realm = "sip2.zone"
Digest-Nonce = "42de75b2e9e39194a286e8ccd284646ffa14bcc2"
Digest-URI = "sip:94161000@sip2.zone"
Digest-Method = "INVITE"
Digest-QOP = "auth"
Digest-Nonce-Count = "0000000a"
Digest-CNonce = "753F926DB8F5415D8D56EE7816410E33"
rlm_digest: Adding Auth-Type = DIGEST
modcall[authorize]: module "digest" returns ok
rlm_realm: Looking up realm "sip2.zone" for User-Name = "test(a)sip2.zone"
rlm_realm: No such realm "sip2.zone"
modcall[authorize]: module "suffix" returns noop
users: Matched entry test(a)sip2.zone at line 226
modcall[authorize]: module "files" returns ok
modcall[authorize]: module "mschap" returns noop
modcall: group authorize returns ok
rad_check_password: Found Auth-Type Digest
auth: type "digest"
modcall: entering group authenticate
A1 = test:sip2.zone:cisco1234
A2 = INVITE:sip:94161000@sip2.zone
KD = 53d3b82970bada131a062103f553b8b8:42de75b2e9e39194a286e8ccd284646ffa14bcc2:0000000a:753F926DB8F5415D8D56EE7816410E33:auth:18227b358ffe96049a3745eeb449fae2
modcall[authenticate]: module "digest" returns ok
modcall: group authenticate returns ok
radius_xlat: 'Authenticated'
Login OK: [test(a)sip2.zone/<no User-Password attribute>] (from client proxy port 5060)
Sending Access-Accept of id 203 to 192.168.2.1:32831
Reply-Message = "Authenticated"
Sip-Rpid = "1970"
Finished request 6
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 192.168.2.1:32831, id=204, length=53
User-Name = "test"
Sip-Group = "ld"
Service-Type = Group-Check
NAS-IP-Address = 192.168.2.1
NAS-Port = 0
modcall: entering group authorize
Invalid operator for item Suffix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
Invalid operator for item Suffix: reverting to '=='
modcall[authorize]: module "preprocess" returns ok
modcall[authorize]: module "chap" returns noop
rlm_eap: No EAP-Message, not doing EAP
modcall[authorize]: module "eap" returns noop
modcall[authorize]: module "digest" returns noop
rlm_realm: No '@' in User-Name = "test", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop
modcall[authorize]: module "files" returns notfound
modcall[authorize]: module "mschap" returns noop
modcall: group authorize returns ok
auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [test/<no User-Password attribute>] (from client proxy port 0)
Delaying request 7 for 1 seconds
Finished request 7
Going to the next request
Waking up in 6 seconds...
As you can see from the above configuration, the authentication works perfect, its only in the authorization where it fails. Also can you please let me know about the accounting configuration??
Thanks a lot..
Naresh
Ricardo Martinez <rmartinez(a)redvoiss.net> wrote:
Hello Naresh
I have authentication, authorization and accounting (AAA) through radius working fine. What radius server are you using?, can you send us more information about the configuration?
Cheers,
Ricardo.-
-----Mensaje original-----
De: Naresh Parmar [mailto:naresh_parmar14@yahoo.com]
Enviado el: Miércoles, 20 de Julio de 2005 10:37
Para: serusers(a)lists.iptel.org
Asunto: [Serusers] Problem authorizing with radius
hi friends,
I am having problems while authorizing with the radius server. I am using the same configuration as mentioned in the radius-howto. Authentication works perfect as I am able to authenticate using the radius server. However while authorizing against the radius server to make a call I get the following error:
auth: No authenticate method (Auth-Type) configuration found for the user
request: Rejecting the user
auth: Failed to validate the user.
Delaying request 2 for 1 seconds
Finished request 2
When I authorize against the mysql database, it works fine. Any clue???
Best Regards,
Naresh
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Hello Naresh
I have authentication, authorization and accounting (AAA) through radius
working fine. What radius server are you using?, can you send us more
information about the configuration?
Cheers,
Ricardo.-
-----Mensaje original-----
De: Naresh Parmar [mailto:naresh_parmar14@yahoo.com]
Enviado el: Miércoles, 20 de Julio de 2005 10:37
Para: serusers(a)lists.iptel.org
Asunto: [Serusers] Problem authorizing with radius
hi friends,
I am having problems while authorizing with the radius server. I am using
the same configuration as mentioned in the radius-howto. Authentication
works perfect as I am able to authenticate using the radius server. However
while authorizing against the radius server to make a call I get the
following error:
auth: No authenticate method (Auth-Type) configuration found for the user
request: Rejecting the user
auth: Failed to validate the user.
Delaying request 2 for 1 seconds
Finished request 2
When I authorize against the mysql database, it works fine. Any clue???
Best Regards,
Naresh
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Hello Dan.
First of all thanks for your help on this issue, as i mentioned
before this problem is getting very complicated to me.
The machine with problems is a "production" machine, so i need to
make the changes in "low load" hours. But even when the update was made the
crashes are presenting every 4 or 5 days so i need to wait a few day to see
is the problem persist.
A few last things.
1.- You mentioned the possibility to be running out of memory. This
is the output from the "free" command
total used free shared buffers cached
Mem: 1030888 993944 36944 0 100892 695612
-/+ buffers/cache: 197440 833448
Swap: 2040244 5188 2035056
According to this i have 833M of free memory (the other memory is
cached and buffered).
2.- I'm downloading SER from CVS with the command :
cvs -z3 -d:pserver:anonymous@cvs.ser.berlios.de:/cvsroot/ser co
-rrel_0_9_0 sip_router
To download the changes you introduce in mediaproxy.c i need to run
the same command ????
3.- How do i compile SER without optimization?
Thanks again!
Best Regards,
Ricardo Martinez.-
> -----Mensaje original-----
> De: Dan Pascu [mailto:dan@ag-projects.com]
> Enviado el: Miércoles, 20 de Julio de 2005 0:49
> Para: Ricardo Martinez
> CC: 'serdev(a)lists.iptel.org'; 'serusers(a)lists.iptel.org'
> Asunto: Re: [Serdev] Help needed with core.dumps from SER
>
>
> On Tuesday 19 July 2005 22:00, Ricardo Martinez wrote:
> > Hello.
> > On this same issue. Today i had another crash from my SER. I'm
> > attaching the gdb output from the core file. Could this
> be related to a
> > glibc issue as Dmitry Semyonov pointed? Hope that someone
> can help me.!
>
> I don't think it has anything to do with glibc. In mediaproxy
> there is a place
> where a memory allocation is not checked. I noticed this
> before asking you
> all the info, but I wanted to see all the info I asked for
> because I wasn't
> sure that was the only issue. I'm not sure about that even
> now, because of
> the weird pointer value (it's 0x5 not 0x0), but that may be
> because ser was
> compiled with optimizations and in this case some info is
> unreliable in gdb.
> Also unless you have very little memory it's highly unlikely
> that you run out
> of memory.
>
> I'll commit the fix to cvs, but I'm still not sure that this
> memory check is
> the only issue involved. We can see after that if you still
> have issues and
> we can trace them further then if needed. After I commit the
> fix, if the
> problem persists, you may need to compile ser without
> optimizations -O0 to
> get more reliable information from gdb.
>
> --
>
> Dan
>
hi friends,
I am having problems while authorizing with the radius server. I am using the same configuration as mentioned in the radius-howto. Authentication works perfect as I am able to authenticate using the radius server. However while authorizing against the radius server to make a call I get the following error:
auth: No authenticate method (Auth-Type) configuration found for the user
request: Rejecting the user
auth: Failed to validate the user.
Delaying request 2 for 1 seconds
Finished request 2
When I authorize against the mysql database, it works fine. Any clue???
Best Regards,
Naresh
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Hi!
Sorry, but I didn't find anything about "compiling" and "nathelper". Where
can I find that? I looked at the iptel webpage and in the README of the
module.
Has anyone experiences with nathelper, ser-0.9.0 and rtpproxy? I get the
same error messages...
ERROR: send_rtpp_command: can't connect to RTP proxy
WARNING: rtpp_test: can't get version of the RTP proxy
I compiled it like this:
./configure
make
make install
Thanks!
Sebastian
----- Original Message -----
From: "harry gaillac" <gaillacharry(a)yahoo.fr>
To: "Sebastian Kühner" <skuehner(a)veraza.com>
Sent: Wednesday, July 20, 2005 10:45 AM
Subject: Re: [Serusers] rtp proxy
> look at http://developer.berlios.de/cvs/?group_id=480
>
> cvs
> -d:pserver:anonymous@cvs.ser.berlios.de:/cvsroot/ser
> login
> cvs -z3
> -d:pserver:anonymous@cvs.ser.berlios.de:/cvsroot/ser
> co rtpproxy
>
> Read nathelper module and rtpproxy code before
> compiling !
>
> You won't find good docs -:(
>
> Harry
>
> --- Sebastian Kühner <skuehner(a)veraza.com> a écrit :
>
> > Thanks for your answer!
> >
> > How can I download them? Do I have to click to all
> > that files now to
> > download?
> >
> >
> > ----- Original Message -----
> > From: "harry gaillac" <gaillacharry(a)yahoo.fr>
> > To: "Sebastian Kühner" <skuehner(a)veraza.com>
> > Sent: Wednesday, July 20, 2005 10:21 AM
> > Subject: RE: [Serusers] rtp proxy
> >
> >
> > > hello,
> > >
> > > Look here for the latest rtpproxy :
> > >
> >
> http://cvs.berlios.de/cgi-bin/viewcvs.cgi/ser/rtpproxy/
> > >
> > > Check config for nathelper module
> > >
> > > harry
> > > --- Sebastian Kühner <skuehner(a)veraza.com> a écrit
> > :
> > >
> > > > Hi all,
> > > >
> > > > I want to implement a rtpproxy, but after
> > > > installation and implementation in
> > > > ser I get the follwing error messages:
> > > >
> > > > ERROR: send_rtpp_command: can't connect to RTP
> > proxy
> > > > 18(5422) WARNING: rtpp_test: can't get version
> > of
> > > > the RTP proxy
> > > > 18(5422) WARNING: rtpp_test: support for RTP
> > > > proxyhas been disabled
> > > > temporarily
> > > > 19(5423) ERROR: send_rtpp_command: can't connect
> > to
> > > > RTP proxy
> > > > 19(5423) WARNING: rtpp_test: can't get version
> > of
> > > > the RTP proxy
> > > > 19(5423) WARNING: rtpp_test: support for RTP
> > > > proxyhas been disabled
> > > > temporarily
> > > > 0(5378) ERROR: send_rtpp_command: can't connect
> > to
> > > > RTP proxy
> > > > 0(5378) WARNING: rtpp_test: can't get version
> > of
> > > > the RTP proxy
> > > > 0(5378) WARNING: rtpp_test: support for RTP
> > > > proxyhas been disabled
> > > > temporarily
> > > >
> > > > Where can I get the newest rtpproxy (for ser
> > 0.9.0)?
> > > > I wanted to enter at
> > > > the ftp-site of iptel, but I think it's down.
> > > >
> > > > Thanks!
> > > >
> > > > Sebastian
> > > >
> > > >
> > > > _______________________________________________
> > > > Serusers mailing list
> > > > serusers(a)lists.iptel.org
> > > > http://lists.iptel.org/mailman/listinfo/serusers
> > > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> >
>
___________________________________________________________________________
> > > Appel audio GRATUIT partout dans le monde avec le
> > nouveau Yahoo! Messenger
> > > Téléchargez cette version sur
> > http://fr.messenger.yahoo.com
> > >
> > >
> >
> >
> > _______________________________________________
> > Serusers mailing list
> > serusers(a)lists.iptel.org
> > http://lists.iptel.org/mailman/listinfo/serusers
> >
>
>
>
>
>
>
>
>
___________________________________________________________________________
> Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger
> Téléchargez cette version sur http://fr.messenger.yahoo.com
>
>
Thanks for your answer!
How can I download them? Do I have to click to all that files now to
download?
----- Original Message -----
From: "harry gaillac" <gaillacharry(a)yahoo.fr>
To: "Sebastian Kühner" <skuehner(a)veraza.com>
Sent: Wednesday, July 20, 2005 10:21 AM
Subject: RE: [Serusers] rtp proxy
> hello,
>
> Look here for the latest rtpproxy :
> http://cvs.berlios.de/cgi-bin/viewcvs.cgi/ser/rtpproxy/
>
> Check config for nathelper module
>
> harry
> --- Sebastian Kühner <skuehner(a)veraza.com> a écrit :
>
> > Hi all,
> >
> > I want to implement a rtpproxy, but after
> > installation and implementation in
> > ser I get the follwing error messages:
> >
> > ERROR: send_rtpp_command: can't connect to RTP proxy
> > 18(5422) WARNING: rtpp_test: can't get version of
> > the RTP proxy
> > 18(5422) WARNING: rtpp_test: support for RTP
> > proxyhas been disabled
> > temporarily
> > 19(5423) ERROR: send_rtpp_command: can't connect to
> > RTP proxy
> > 19(5423) WARNING: rtpp_test: can't get version of
> > the RTP proxy
> > 19(5423) WARNING: rtpp_test: support for RTP
> > proxyhas been disabled
> > temporarily
> > 0(5378) ERROR: send_rtpp_command: can't connect to
> > RTP proxy
> > 0(5378) WARNING: rtpp_test: can't get version of
> > the RTP proxy
> > 0(5378) WARNING: rtpp_test: support for RTP
> > proxyhas been disabled
> > temporarily
> >
> > Where can I get the newest rtpproxy (for ser 0.9.0)?
> > I wanted to enter at
> > the ftp-site of iptel, but I think it's down.
> >
> > Thanks!
> >
> > Sebastian
> >
> >
> > _______________________________________________
> > Serusers mailing list
> > serusers(a)lists.iptel.org
> > http://lists.iptel.org/mailman/listinfo/serusers
> >
>
>
>
>
>
>
>
>
___________________________________________________________________________
> Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger
> Téléchargez cette version sur http://fr.messenger.yahoo.com
>
>
Hi all,
I want to implement a rtpproxy, but after installation and implementation in
ser I get the follwing error messages:
ERROR: send_rtpp_command: can't connect to RTP proxy
18(5422) WARNING: rtpp_test: can't get version of the RTP proxy
18(5422) WARNING: rtpp_test: support for RTP proxyhas been disabled
temporarily
19(5423) ERROR: send_rtpp_command: can't connect to RTP proxy
19(5423) WARNING: rtpp_test: can't get version of the RTP proxy
19(5423) WARNING: rtpp_test: support for RTP proxyhas been disabled
temporarily
0(5378) ERROR: send_rtpp_command: can't connect to RTP proxy
0(5378) WARNING: rtpp_test: can't get version of the RTP proxy
0(5378) WARNING: rtpp_test: support for RTP proxyhas been disabled
temporarily
Where can I get the newest rtpproxy (for ser 0.9.0)? I wanted to enter at
the ftp-site of iptel, but I think it's down.
Thanks!
Sebastian