Hi all,

I’m trying to configure SER 0.8.14 to use authentication with NavisRadius 4.5.0.

On my X-Lite (X-Lite v2.0 Build 1103m) client I’m getting “Login Failed! Contact Network Admin.”

I’m getting following message from NavisRadius. Why? => Reply-Message = "No check.password"

I would be very grateful if someone could look at my ser.cfg and output from NavisRadius.

Best regards

*****************************************************************************

This is what I get on RADIUS server (different from SER machine)

Client:

Client-Class = "#default"

Nas_Port_Normalization = off

Radius_Remove_Trailing_Nul = TRUE

Radius_Append_Trailing_Nul = FALSE

Auto_Remove_Check_Items = TRUE

Check_Authenticators = TRUE

Session_Time_From_Time_Of_Day = FALSE

Radius_Charset = "UTF8"

Client-Class = "video"

Client-Dictionary = "draft_ietf_radext_digest_auth_01"

**** dictionary of radiusclient on SER machine is adjusted to dictionary of RADIUS, and RADIUS can recognize attributes - except if I MUST run sterman_aaa_sip_00 on NavisRadius???? I attached dictionary in radiusclient to this message ****

Client-Secret = <hidden>

Request:

User-Name = "djovanov.srce"

Digest-Username = "djovanov.srce"

Digest-Realm = "srce.hr"

Digest-Nonce = "427b5aa983df858da94c50d1f8132a69e3e703ad"

Digest-URI = "sip:srce.hr"

Digest-Method = "REGISTER"

Digest-Response = "ca6202fe55c51501295a9bc6ab325420"

Service-Type = IAPP-Register

Anonymous = v0-a208-646A6F76616E6F7669632E73726365

**** RADIUS doesn’t recognize code 208, which is Sip-Uri-User ****

****Am I missing Digest-Algorithm? Why SER doesn’t send this attribute?****

NAS-IP-Address = 161.53.0.131

NAS-Port = 5060

Packet:

Client-Name = "161.53.0.131"

Packet-Type = Access-Request

Packet-Identifier = 213

Packet-Length = 197

Packet-Authenticator = 2B25D6D4934B930EB21F8E1B6AEFFE50

Source-Address = 161.53.0.131

Source-Port = 33159

Destination-Address = 0.0.0.0

Destination-Port = 1812

Receipt-Time = "2005/05/06 13:44:32"

Full-User-Name = "djovanov.srce"

Base-User-Name = "djovanov.srce"

Normalized-Nas-Port = 5060

19  <engine.worker.0> -> checkDigest[AuthHttpDigest]

19  <plugin.AuthHttpDigest.checkDigest> FAILURE -- No check.password

20  <engine.worker.0> Variable group trace

Reply:

Reply-Message = "No check.password"

**** this is message is which I get from NavisRadius ****

****************************************************************************************

This is my ser.cfg

fifo_db_url="mysql://ser:heslo@localhost/ser"

# ------------------ module loading ----------------------------------

loadmodule "/usr/local/lib/ser/modules/mysql.so"

loadmodule "/usr/local/lib/ser/modules/sl.so"

loadmodule "/usr/local/lib/ser/modules/tm.so"

loadmodule "/usr/local/lib/ser/modules/rr.so"

loadmodule "/usr/local/lib/ser/modules/maxfwd.so"

loadmodule "/usr/local/lib/ser/modules/usrloc.so"

loadmodule "/usr/local/lib/ser/modules/registrar.so"

loadmodule "/usr/local/lib/ser/modules/textops.so"

loadmodule "/usr/local/lib/ser/modules/auth.so"

loadmodule "/usr/local/lib/ser/modules/group.so"

loadmodule "/usr/local/lib/ser/modules/uri.so"

loadmodule "/usr/local/lib/ser/modules/uri_radius.so"

loadmodule "/usr/local/lib/ser/modules/group_radius.so"

loadmodule "/usr/local/lib/ser/modules/auth_radius.so"

loadmodule "/usr/local/lib/ser/modules/msilo.so"

modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser")

modparam("usrloc", "db_mode", 2)

modparam("usrloc", "timer_interval", 10)

modparam("rr", "enable_full_lr", 1)

modparam("auth_radius", "radius_config", "/usr/local/etc/radiusclient-ng/radiusclient.conf")

modparam("auth_radius", "service_type", 15)

modparam("group_radius", "use_domain", 0)

if (uri==myself) {

                if (method=="REGISTER") {

        # Uncomment this if you want to use digest authentication

                        if (!radius_www_authorize("")) {

                                www_challenge("", "0");

                                break;

                        };

                        save("location");

                        break;

                };

                lookup("aliases");

                if (!uri==myself) {

                        append_hf("P-hint: outbound alias\r\n");

                        route(1);

                        break;

                };

                # native SIP destinations are handled using our USRLOC DB

                if (!lookup("location")) {

                        sl_send_reply("404", "Not Found");

                        break;

                };

        };