Double-check all your RADIUS config files. Make sure that your authserver and accserver are set correctly in the radiusclient.conf (especially if the RADIUS server is on a different machine). Also check the server.conf in radiusclient-ng and clients.conf in freeredius to make sure that server/client definitions (including shared key) are correct. The thing that got me (I run RADIUS on a different server) was the bindaddr parameter in radiusclient.conf. By default, it only sends RADIUS packets via localhost (127.0.0.1). I had to set this paramater to the IP address of my NIC.
----- Original Message ----- From: "Alex" alexandergav@gmail.com To: serusers@lists.iptel.org Sent: Thursday, April 14, 2005 3:16 PM Subject: [Serusers] Register authentication with ser.
Hi all
I need a little help with that. I have installation of ser-0.8.14 and freeradius1.02.
I am checking my register requests with ngrep and it's coming on port 5060 with no problem. The problem is authentication, I can't authenticate users through radius, freeradius working properly i checked that with radiusclient, but the register request is not going through authentication in the radius.( I don't see anything happens in the radius logs)
If there any way to debug the ser ( i have debug=9 inside ser.cfg). In order to see what's happening when the request is coming, and if it's going to the radius or not.
ser.cfg ----------------------------------- loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_radius.so" -------------------- modparamd"auth_radius", "radius_config","/usr/local/etc/radiusclient/radiusclient.conf") modparam("auth_radius", "service_type", 15) ----------------------
if (method=="REGISTER") { log(1, "REGISTER: Authenticating user\n"); if (!radius_www_authorize("")) { log(1, "REGISTER: challenging user\n"); www_challenge("", "0"); break; }; setflag(1); save("location"); sl_send_reply("200","ok"); break; };
------------------------
Thanks for any help.
_______________________________________________ Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers