Re: [Serusers] radius logon problems

9 Oct 2003

It worked!!, I reinstalled the radius client.

thanks a lot.

Floris.  

Jan Janak &lt;jan(a)iptel.org&gt; wrote:
In that case you didn't configure the radius client library properly,
make sure that you did all the steps described in the howto.

Jan.

On 08-10 19:34, Floris Roset wrote:
...
  no, nothing at all.

 Floris.

 Jan Janak wrote:
 Does ser send any radius message when you try to authenticate ?

 Jan.

 On 08-10 17:20, Floris Roset wrote:
  Hello Jan,

 Here are the logs and config.

 I followed radius howto to configure everything. When
 I use radclient to test it, freeradius server works
 fine. It seems a problem with SER finding credentials
 for the realm. There is no connection between ser and
 freeradius.

 I am running ser and freeradius on the same machine. I
 have compiled ser with the last version of sterman.c
 as I saw some email saying to do that. 

 thanks a lot,

 =========================
 LOG FREERADIUS

 Module: Instantiated radutmp (radutmp)
 Listening on IP address 10.0.0.32, ports 1812/udp and
 1813/udp, with proxy on 18
 14/udp.
 Ready to process requests.

 =========================
 ngrep 

 U 10.0.0.32:5060 -> 10.0.0.33:5060
 SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
 10.0.0.33..CSeq: 2017 REGISTER..To: "Floris"
 ;tag=2f8a75b
 015520947f50ab939181a7caf.46af..From: "Floris"
 ..Call-ID:
 789921619@10.0.0.33..WWW-Authenticate: Dig
 est realm="pildo.com",
 nonce="3f8484d3c58cba0a3540edd7c338d99284aa37ab"..Server:
 Sip EXpress router (0.8.11 (i386/linux)
 )..Content-Length: 0..Warning: 392 10.0.0.32:5060
 "Noisy feedback tells: pid=2315 req_src_ip=10.0.0.33
 req_src_port=328
 01 in_uri=sip:pildo.com out_uri=sip:pildo.com
 via_cnt==1"....
 #
 U 10.0.0.33:32801 -> 10.0.0.32:5060
 REGISTER sip:pildo.com SIP/2.0..Via: SIP/2.0/UDP
 10.0.0.33..CSeq: 2018 REGISTER..To: "Floris"
 ..Auth
 orization: Digest username="test",
 realm="pildo.com",
 nonce="3f8484d3c58cba0a3540edd7c338d99284aa37ab",
 uri="sip:10.0.0.
 32", cnonce="abcdefghi", nc=00000001,
 response="89fc4a2cfb0076a1a385104ae299f1f2",
 opaque=""..Expires: 900..From: "Flori
 s" ..Call-ID:
 789921619@10.0.0.33..Content-Length: 0..User-Agent:
 KPhone/3.12..Event: registration..
 Allow-Events: presence..Contact: "root"
 ;q=0.0;methods="INVITE,
 MESSAGE, INFO, SUBSCRI
 BE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"....
 #
 U 10.0.0.32:5060 -> 10.0.0.33:5060
 SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
 10.0.0.33..CSeq: 2018 REGISTER..To: "Floris"
 ;tag=2f8a75b
 015520947f50ab939181a7caf.46af..From: "Floris"
 ..Call-ID:
 789921619@10.0.0.33..WWW-Authenticate: Dig
 est realm="pildo.com",
 nonce="3f8484d7858c9c70569404a8a5a087ab8501e663"..Server:
 Sip EXpress router (0.8.11 (i386/linux)
 )..Content-Length: 0..Warning: 392 10.0.0.32:5060
 "Noisy feedback tells: pid=2315 req_src_ip=10.0.0.33
 req_src_port=328
 01 in_uri=sip:pildo.com out_uri=sip:pildo.com
 via_cnt==1"....

 ===============================

 --- Jan Janak wrote: > Hello,

 check out radius howto --
 http://iptel.org/ser/ser_radius.html

 If that doesn't help to fix your problems then
 please send us complete
 description, possibly including message dumps and
 your config file.

 Jan.

 On 08-10 15:19, Floris Roset wrote:
  Hi,

 I wonder if there has been an answer to the email  below. I do have the same
problem.

 thanks
 _______________________________________________

 Radius logon problems

 Jiri Kuthan jiri at iptel.org 
 Sat Sep 6 11:40:03 CEST 2003 

 Previous message: [Serusers] Radius logon  problems 
  Next message: [Serusers] sip_msg_cloner 
 Messages sorted by: [ date ] [ thread ] [  subject ] [ author ] 

 ---------------------------------

 Joseph, can you send us perhaps the SIP messages  (ngrepped, etc.)?It is hard to
guess what happens
 otherwise.-jiriAt 08:33 AM 9/6/2003, Jan Janak
 wrote:>Hello,>>On 06-09 00:25, Jiri Kuthan wrote:>> 
 From these logs:>> >> 10(28016) pre_auth():
 Credentials with given realm not found>> 10(28016)
 REGISTER: challenging user>> 10(28016)
 build_auth_hf(): 'WWW-Authenticate: Digest
 realm="ford.com",
 nonce="3f578eaee00b29a57d6fb234024d112ecf485627">> 
 "Credentials with given realm not found" means that
 the server received> a SIP message that contained
 no credentials with given realm (ford.com> in this
 case). > >> I infer that the radius database
 includes no user identified by>> the username in
 question and domain "ford.com".>> No, it didn't
 make any request to the radius server in this case> 
 because it was unable to find proper credentials in
 the SIP message.>> 
  Jan.>>_______________________________________________>Serusers
  mailing list>Serusers at

iptel.org>http://lists.iptel.org/mailman/listinfo/serusers--Jiri
  Kuthan http://iptel.org/~jiri/ 

 ---------------------------------
 Want to chat instantly with your online  friends? Get the FREE Yahoo!Messenger
  _______________________________________________
 Serusers mailing list
 serusers(a)lists.iptel.org
 http://lists.iptel.org/mailman/listinfo/serusers 

 ________________________________________________________________________
 Want to chat instantly with your online friends? Get the FREE Yahoo!
 Messenger http://mail.messenger.yahoo.co.uk  Content-Description: log-kphone.txt
  SipClient: Listening UDP on port: 5060
 SipClient: Our address: 10.0.0.33

 [root@justino root]# kphone
 Found 2 interfaces.
 SipClient: Listening UDP on port: 5060
 SipClient: Our address: 10.0.0.33
 SipRegister: Auth is '(null)'
 SipRegister: Proxy Auth is '(null)'

 SipClient: Sending: 17:39:20.210
 --------------------------------
 REGISTER sip:pildo.com SIP/2.0
 Via: SIP/2.0/UDP 10.0.0.33
 CSeq: 2017 REGISTER
 To: "Floris" 
 Expires: 900
 From: "Floris" 
 Call-ID: 789921619(a)10.0.0.33
 Content-Length: 0
 User-Agent: KPhone/3.12
 Event: registration
 Allow-Events: presence
 Contact: "root" ;q=0.0;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS,
BYE, CANCEL, NOTIFY, ACK"

 SipClient: Sending to '10.0.0.32:5060'
 SipClient: Receiving message...

 SipClient: Received: 17:39:20.214
 ---------------------------------
 SIP/2.0 401 Unauthorized
 Via: SIP/2.0/UDP 10.0.0.33
 CSeq: 2017 REGISTER
 To: "Floris" ;tag=2f8a75b015520947f50ab939181a7caf.46af
 From: "Floris" 
 Call-ID: 789921619(a)10.0.0.33
 WWW-Authenticate: Digest realm="pildo.com",
nonce="3f8484d3c58cba0a3540edd7c338d99284aa37ab"
 Server: Sip EXpress router (0.8.11 (i386/linux))
 Content-Length: 0
 Warning: 392 10.0.0.32:5060 "Noisy feedback tells: pid=2315 req_src_ip=10.0.0.33
req_src_port=32801 in_uri=sip:pildo.com out_uri=sip:pildo.com via_cnt==1"

 SipCall: Incoming response
 SipTransaction: Incoming Response
 SipRegister: Authentication required
 WL: SipProtocol: HA1=ec19d9ff5db78198c7c75da0e41527af (test:pildo.com)
 SipProtocol: Digest calculated.
 SipRegister: Auth is 'Digest username="test", realm="pildo.com",
nonce="3f8484d3c58cba0a3540edd7c338d99284aa37ab", uri="sip:10.0.0.32",
cnonce="abcdefghi", nc=00000001,
response="89fc4a2cfb0076a1a385104ae299f1f2", opaque=""'
 SipRegister: Proxy Auth is '(null)'

 SipClient: Sending: 17:39:24.332
 --------------------------------
 REGISTER sip:pildo.com SIP/2.0
 Via: SIP/2.0/UDP 10.0.0.33
 CSeq: 2018 REGISTER
 To: "Floris" 
 Authorization: Digest username="test", realm="pildo.com",
nonce="3f8484d3c58cba0a3540edd7c338d99284aa37ab", uri="sip:10.0.0.32",
cnonce="abcdefghi", nc=00000001,
response="89fc4a2cfb0076a1a385104ae299f1f2", opaque=""
 Expires: 900
 From: "Floris" 
 Call-ID: 789921619(a)10.0.0.33
 Content-Length: 0
 User-Agent: KPhone/3.12
 Event: registration
 Allow-Events: presence
 Contact: "root" ;q=0.0;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS,
BYE, CANCEL, NOTIFY, ACK"

 SipClient: Sending to '10.0.0.32:5060'
 SipClient: Receiving message...

 SipClient: Received: 17:39:24.336
 ---------------------------------
 SIP/2.0 401 Unauthorized
 Via: SIP/2.0/UDP 10.0.0.33
 CSeq: 2018 REGISTER
 To: "Floris" ;tag=2f8a75b015520947f50ab939181a7caf.46af
 From: "Floris" 
 Call-ID: 789921619(a)10.0.0.33
 WWW-Authenticate: Digest realm="pildo.com",
nonce="3f8484d7858c9c70569404a8a5a087ab8501e663"
 Server: Sip EXpress router (0.8.11 (i386/linux))
 Content-Length: 0
 Warning: 392 10.0.0.32:5060 "Noisy feedback tells: pid=2315 req_src_ip=10.0.0.33
req_src_port=32801 in_uri=sip:pildo.com out_uri=sip:pildo.com via_cnt==1"

 SipCall: Incoming response
 SipTransaction: Incoming Response

 Content-Description: log-ser.txt
  Listening on
 10.0.0.32 [10.0.0.32]:5060
 WARNING: no fork mode
 0(2315) DEBUG: init_mod: sl_module
 stateless - initializing
 0(2315) DEBUG: register_fifo_cmd: new command (sl_stats) registered
 0(2315) DEBUG: MD5 calculated: 2f8a75b015520947f50ab939181a7caf
 0(2315) DEBUG: init_mod: tm
 0(2315) TM - initializing...
 0(2315) Call-ID initialization: '657fe6a7'
 0(2315) DEBUG: register_fifo_cmd: new command (t_uac_dlg) registered
 0(2315) DEBUG: register_fifo_cmd: new command (t_hash) registered
 0(2315) DEBUG: lock_initialize: lock initialization started
 0(2315) DEBUG: register_fifo_cmd: new command (t_stats) registered
 0(2315) DEBUG: MD5 calculated: 614ce9f04536daa2eb03c7dbafc221ee
 0(2315) DEBUG: MD5 calculated: f3105287012fae1d6536f5ac2d7e85bc
 0(2315) DEBUG: init_mod: rr
 0(2315) rr - initializing
 0(2315) DEBUG: init_mod: maxfwd_module
 Maxfwd module- initializing
 0(2315) DEBUG: init_mod: usrloc
 0(2315) usrloc - initializing
 0(2315) DEBUG: register_fifo_cmd: new command (ul_stats) registered
 0(2315) DEBUG: register_fifo_cmd: new command (ul_rm) registered
 0(2315) DEBUG: register_fifo_cmd: new command (ul_rm_contact) registered
 0(2315) DEBUG: register_fifo_cmd: new command (ul_dump) registered
 0(2315) DEBUG: register_fifo_cmd: new command (ul_flush) registered
 0(2315) DEBUG: register_fifo_cmd: new command (ul_add) registered
 0(2315) DEBUG: register_fifo_cmd: new command (ul_show_contact) registered
 0(2315) DEBUG: init_mod: registrar
 0(2315) registrar - initializing
 0(2315) find_export: found in module sl_module [/usr/local/lib/ser/modules/sl.so]
 0(2315) find_export: found <~ul_register_udomain> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) find_export: found <~ul_insert_urecord> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) find_export: found <~ul_delete_urecord> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) find_export: found <~ul_get_urecord> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) find_export: found <~ul_lock_udomain> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) find_export: found <~ul_unlock_udomain> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) find_export: found <~ul_release_urecord> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) find_export: found <~ul_insert_ucontact> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) find_export: found <~ul_delete_ucontact> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) find_export: found <~ul_get_ucontact> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) find_export: found <~ul_update_ucontact> in module usrloc
[/usr/local/lib/ser/modules/usrloc.so]
 0(2315) DEBUG: init_mod: auth
 0(2315) auth module - initializing
 0(2315) find_export: found in module sl_module [/usr/local/lib/ser/modules/sl.so]
 0(2315) DEBUG: init_mod: auth_radius
 0(2315) auth_radius - Initializing
 0(2315) find_export: found   in module auth [/usr/local/lib/ser/modules/auth.so]
  0(2315) find_export: found   in module auth
[/usr/local/lib/ser/modules/auth.so]
  0(0) fixing /usr/local/lib/ser/modules/maxfwd.so
mf_process_maxfwd_header
 0(0) fixing /usr/local/lib/ser/modules/sl.so sl_send_reply
 0(0) fixing /usr/local/lib/ser/modules/sl.so sl_send_reply
 0(0) fixing /usr/local/lib/ser/modules/rr.so record_route
 0(0) fixing /usr/local/lib/ser/modules/rr.so loose_route
 0(0) fixing /usr/local/lib/ser/modules/tm.so t_relay
 0(0) fixing /usr/local/lib/ser/modules/auth_radius.so radius_www_authorize
 0(0) fixing /usr/local/lib/ser/modules/auth.so www_challenge
 0(0) fixing /usr/local/lib/ser/modules/registrar.so save
 0(0) fixing /usr/local/lib/ser/modules/registrar.so lookup
 0(0) fixing /usr/local/lib/ser/modules/sl.so sl_send_reply
 0(0) fixing /usr/local/lib/ser/modules/tm.so t_relay
 0(0) fixing /usr/local/lib/ser/modules/sl.so sl_reply_error
 0(0) INFO: udp_init: SO_RCVBUF is initially 65535
 0(0) DEBUG: udp_init: trying SO_RCVBUF: 131070
 0(0) DEBUG: setting SO_RCVBUF; set=131070,verify=131070
 0(0) DEBUG: udp_init: trying SO_RCVBUF: 262140
 0(0) DEBUG: setting SO_RCVBUF; set=262140,verify=131070
 0(0) DEBUG: setting SO_RCVBUF has no effect
 0(0) DEBUG: udp_init: trying SO_RCVBUF: 133118
 0(0) DEBUG: setting SO_RCVBUF; set=133118,verify=131070
 0(0) DEBUG: setting SO_RCVBUF has no effect
 0(0) INFO: udp_init: SO_RCVBUF is finally 131070
 1(0) DEBUG: init_mod_child (-1): tm
 1(0) DEBUG: callid: &#39;657fe6a7-0(a)10.0.0.32&#39;
 1(0) DEBUG: init_mod_child (-1): usrloc
 1(2316) DBG: open_uac_fifo: opening fifo...
 1(2316) DEBUG: fifo /tmp/ser_fifo opened, mode=438
 2(0) INFO: fifo process starting: 2317
 2(0) DEBUG: init_mod_child (-2): tm
 2(0) DEBUG: callid: &#39;657fe6a7-0(a)10.0.0.32&#39;
 2(0) DEBUG: init_mod_child (-2): usrloc
 0(2315) DEBUG: init_mod_child (1): tm
 0(2315) DEBUG: callid: &#39;657fe6a7-2315(a)10.0.0.32&#39;
 0(2315) DEBUG: init_mod_child (1): usrloc
 2(2317) SER: open_uac_fifo: fifo server up at /tmp/ser_fifo...
 0(2315) SIP Request:
 0(2315) method: 
 0(2315) uri: 
 0(2315) version: 
 0(2315) parse_headers: flags=1
 0(2315) end of header reached, state=2
 0(2315) parse_headers: Via found, flags=1
 0(2315) parse_headers: this is the first via
 0(2315) After parse_msg...
 0(2315) preparing to run routing scripts...
 0(2315) DEBUG : is_maxfwd_present: searching for max_forwards header
 0(2315) parse_headers: flags=128
 0(2315) get_hdr_field: cseq : <2017> 
 0(2315) end of header reached, state=9
 0(2315) DEBUG: get_hdr_field: [31]; uri=[sip:test@pildo.com]
 0(2315) DEBUG: to body ["Floris" 
 ]
 0(2315) DEBUG: get_hdr_body : content_length=0
 0(2315) found end of header
 0(2315) DEBUG: is_maxfwd_present: max_forwards header not found!
 0(2315) end of header reached, state=9
 0(2315) parse_headers: flags=256
 0(2315) find_first_route(): No Route headers found
 0(2315) loose_route(): There is no Route HF
 0(2315) check_self - checking if host==us: 9==9 && [pildo.com] == [10.0.0.32]
 0(2315) parse_headers: flags=4096
 0(2315) pre_auth(): Credentials with given realm not found
 0(2315) build_auth_hf(): 'WWW-Authenticate: Digest realm="pildo.com",
nonce="3f8484d3c58cba0a3540edd7c338d99284aa37ab"
 '
 0(2315) parse_headers: flags=-1
 0(2315) check_via_address(10.0.0.33, 10.0.0.33, 0)
 0(2315) receive_msg: cleaning up
 0(2315) SIP Request:
 0(2315) method: 
 0(2315) uri: 
 0(2315) version: 
 0(2315) parse_headers: flags=1
 0(2315) end of header reached, state=2
 0(2315) parse_headers: Via found, flags=1
 0(2315) parse_headers: this is the first via
 0(2315) After parse_msg...
 0(2315) preparing to run routing scripts...
 0(2315) DEBUG : is_maxfwd_present: searching for max_forwards header
 0(2315) parse_headers: flags=128
 0(2315) get_hdr_field: cseq : <2018> 
 0(2315) end of header reached, state=9
 0(2315) DEBUG: get_hdr_field: [31]; uri=[sip:test@pildo.com]
 0(2315) DEBUG: to body ["Floris" 
 ]
 0(2315) DEBUG: get_hdr_body : content_length=0
 0(2315) found end of header
 0(2315) DEBUG: is_maxfwd_present: max_forwards header not found!
 0(2315) end of header reached, state=9
 0(2315) parse_headers: flags=256
 0(2315) find_first_route(): No Route headers found
 0(2315) loose_route(): There is no Route HF
 0(2315) check_self - checking if host==us: 9==9 && [pildo.com] == [10.0.0.32]
 0(2315) check_nonce(): comparing [3f8484d3c58cba0a3540edd7c338d99284aa37ab] and
[3f8484d3c58cba0a3540edd7c338d99284aa37ab]
 0(2315) res: -1
 0(2315) radius_authorize_sterman(): Failure
 0(2315) build_auth_hf(): 'WWW-Authenticate: Digest realm="pildo.com",
nonce="3f8484d7858c9c70569404a8a5a087ab8501e663"
 '
 0(2315) parse_headers: flags=-1
 0(2315) check_via_address(10.0.0.33, 10.0.0.33, 0)
 0(2315) receive_msg: cleaning up

 ---------------------------------
 Want to chat instantly with your online friends? Get the FREE Yahoo!Messenger 
---------------------------------
Want to chat instantly with your online friends? Get the FREE Yahoo!Messenger

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Re: [Serusers] radius logon problems