On Mon, Aug 2, 2010 at 11:44 AM, Pratik Shrestha
<pratikdbl@gmail.com> wrote:
Dear Daniel,
Before I work for the new version, I am first trying to configure old version of openser and radius. I am using openser version 1.0.1 and radius client version 0.5.1 and I am following the tutorial given in http://kamailio.net/docs/openser-radius-1.0.x.html.
My freeradius server is in another machine and when I use radclient to check the user I made, I get the "Authenticated" message.
But when I use X-lite and connect to openser, it seems openser is not talking with freeradius servers. I am sure the "secret" I am using is right as I have already tested from radclient. The log which I am getting in openser is as shown below
9(1986) SIP Request:
9(1986) method: <REGISTER>
9(1986) uri: <sip:192.168.0.56>
9(1986) version: <SIP/2.0>
9(1986) parse_headers: flags=2
9(1986) Found param type 232, <branch> = <z9hG4bK-d8754z-c33212005635f16c-1---d8754z->; state=6
9(1986) Found param type 235, <rport> = <n/a>; state=17
9(1986) end of header reached, state=5
9(1986) parse_headers: Via found, flags=2
9(1986) parse_headers: this is the first via
9(1986) After parse_msg...
9(1986) preparing to run routing scripts...
9(1986) parse_headers: flags=100
9(1986) DEBUG:maxfwd:is_maxfwd_present: value = 70
9(1986) parse_headers: flags=10
9(1986) DEBUG:parse_to:end of header reached, state=9
9(1986) DEBUG: get_hdr_field: <To> [44]; uri=[sip:101%40kamailio.org@192.168.0.56]
9(1986) DEBUG: to body ["101"<sip:101%40kamailio.org@192.168.0.56>
]
9(1986) DEBUG: add_param: tag=cc6e4259
9(1986) DEBUG:parse_to:end of header reached, state=29
9(1986) radius_is_user_in(): Failure
9(1986) parse_headers: flags=200
9(1986) get_hdr_field: cseq <CSeq>: <2> <REGISTER>
9(1986) DEBUG: get_hdr_body : content_length=0
9(1986) found end of header
9(1986) find_first_route: No Route headers found
9(1986) loose_route: There is no Route HF
9(1986) grep_sock_info - checking if host==us: 12==9 && [192.168.0.56] == [127.0.0.1]
9(1986) grep_sock_info - checking if port 5060 matches port 5060
9(1986) grep_sock_info - checking if host==us: 12==12 && [192.168.0.56] == [192.168.0.56]
9(1986) grep_sock_info - checking if port 5060 matches port 5060
9(1986) grep_sock_info - checking if host==us: 12==9 && [192.168.0.56] == [127.0.0.1]
9(1986) grep_sock_info - checking if port 5060 matches port 5060
9(1986) grep_sock_info - checking if host==us: 12==12 && [192.168.0.56] == [192.168.0.56]
9(1986) grep_sock_info - checking if port 5060 matches port 5060
9(1986) check_nonce(): comparing [4c5649b2d78b205e6a5ca1c6dcdc54b84445dd9c] and [4c5649b2d78b205e6a5ca1c6dcdc54b84445dd9c]
9(1986) ERROR:auth_radius:radius_authorize_sterman: rc_auth failed
9(1986) build_auth_hf(): 'WWW-Authenticate: Digest realm="192.168.0.56", nonce="4c5649b2d78b205e6a5ca1c6dcdc54b84445dd9c"
'
9(1986) parse_headers: flags=ffffffffffffffff
9(1986) check_via_address(192.168.0.148, 192.168.182.3, 0)
9(1986) DEBUG:destroy_avp_list: destroying list (nil)
9(1986) receive_msg: cleaning up
At freeradius also, no request goes from openser.
Please advise me how to get rid of this problem.
Best Regards,
Pratik
On Wed, Jul 28, 2010 at 5:56 PM, Pratik Shrestha
<pratikdbl@gmail.com> wrote:
Thanks a lot. I will give it a try
PratikOn Wed, Jul 28, 2010 at 3:48 PM, Daniel-Constantin Mierla
<miconda@gmail.com> wrote:
Hello,
On 7/22/10 6:06 AM, Pratik Shrestha wrote:
Dear All,
I am very new to OpenSer. I want to use latest version of OpenSer with Radius. I need the documentation/tutorial on how to do this. Googling, Ionly found for the old version. Please help me.
indeed, there is a rather old version:
http://www.kamailio.org/docs/openser-radius-1.0.x.html
What I can say now is that you can skip the part of installing kamailio and use next link instead:
http://www.kamailio.org/dokuwiki/doku.php/install:kamailio-3.0.x-from-git
Radius client library is now in most of common Linux distributions, so you can install it with the package manager (you need the devel headers as well, the -dev package).
FreeRadius configuration should be more or less the same.
The config of kamailio has changed quite a lot. Use the default one from kamailio, follow the WITH_AUTH define conditions and replace auth_db with auth_radius modules and functions. Also, the rest of radius modules were merged into misc_radius. For enabling radius acc, you need to recompile acc module after editing the Makefile in module directory.
Hope it helps to start, ask here if you get stuck.