I configured OpenSER with Freeradius. It is somewhat messy to have it setup
- of course depends on your background. In my case I missed deeper knowledge
of Radius that had caused me quite some trouble.
I haven't experienced your problem - no OpenSER processes. Sounds a bit
strange.
My advice is: have both SER and freeRadius running in _DEBUG_ mode and read
outputs carefully. Radius: radiusd -X, and ser with entry in cfg file.
Radius is powerful and extremely fragile: passwords and avps need to match
between client and server; user/group blocks must be correctly
defined/specified to your spec etc. But if you have debug info - you can
easily see when something goes wrong.
Good luck.
/Vel
_____
From: users-bounces(a)openser.org [mailto:users-bounces@openser.org] On Behalf
Of C. Ed Felt
Sent: Thursday, March 09, 2006 6:33 AM
To: users(a)openser.org
Cc: Jaime Work
Subject: [Users] OpenSER with freeRadius
Fellow OpenSER users:
We have been using SER at our VoIP company for a few years now and have been
running in to security issues. We are pleased to see someone has taken
improving SER seriously and are trying to move to OpenSER but are having
problems with the implementation we need: OpenSER with Radius Accounting and
Radius Authentication (with freeradius and MySQL).
I compiled the latest stable version of openser on an FC1 Linux PC with the
needed modules added for Radius Authentication and Accounting. I am also
using the latest version of freeradius.
I have spent plenty of time in the email archives and documentation before
asking you for help.
I seemed to have everything installed correctly after adding the line
'modparam("auth_radius", "radius_config",
"/usr/local/etc/radiusclient-ng/radiusclient.conf")' to the default openser
config file. All the radius modules seem to load now and openser doesn't
exit with any errors. But when I start openser and check "ps -eaf | grep
openser" it isn't running so I assume. Here are the last few lines of
/var/log/messages:
I tried adding verbosity to the debug "-ddddd" but didn't get any more
information than the logs above.
I have also all ready included the needed dictionary file from openser for
freeradius in the freeradius dictionary config.
Here is my current config under modules loading for auth (only change to
default config besides modparam above):
# Uncomment this if you want digest authentication
# mysql.so must be loaded !
loadmodule "/usr/local/lib/openser/modules/auth.so"
#loadmodule "/usr/local/lib/openser/modules/auth_db.so"
loadmodule "/usr/local/lib/openser/modules/auth_radius.so"
#loadmodule "/usr/local/lib/openser/modules/group_radius.so"
#loadmodule "/usr/local/lib/openser/modules/uri_radius.so"
Please let me know what else I can try to get this working. Some kind of
walk thru for the freeradius configuration would be helpful as well
(freeradius with MySQL).
--
Thanks,
C. Ed Felt Caflo Network Engineer/Programmer
<http://www.caflo.com/>
(801) 766-8433 (home)
(801) 420-8879 (cell)
74999 (h.323)
74777 (sip)
edeefelt(a)hotmail.com <mailto://edeefelt@hotmail>
efelt(a)caflobvi.com
chat: edeefelt(aim), edeefelt (yahoo), edeefelt(a)hotmail.com (msn),
v_2chafe(a)hotmail.com (msn)
http://www.thefelts.net <http://www.thefelts.net/>