Hi, guys...
I'm starting to move my config from a MySQL based one to a Radius one.
The AVP are the challenge. Authentication works fine but 'callee' AVP recovery don't.
I'm getting "rc_auth failure" and 'caller' AVPs instead of 'callee' AVPs. Bellow are the detailed informations...
openser 1.3.0-dev21-tls (i386/linux) svnrevision: 2:2921M running in a VMWare, guested on an OpenSUSE 10.2, on a P4 machine.
Why this behavior? Bug? Radius mis-configuration? Or what am I doing something wrong on the scripts?
Edson.
===============================================================
INVITE message: INVITE sip:1234@domain.test SIP/2.0. Via: SIP/2.0/UDP 172.27.248.6;branch=z9hG4bKac1....00000018;rport. From: "unknown" sip:8999@domain.test;tag=2bf01d7afd4. To: sip:1234@domain.test. Contact: sip:8999@172.27.248.6.
This scripts lines: ... avp_load_radius('callee'); avp_printf(); ...
Gives this LOGs:
***on /var/log/messages:*** avpops:ops_print_avp: p=0xb59c78e0, flags=0x0003 avpops:ops_print_avp: name=<caller_cli> avpops:ops_print_avp: val_str=<"010101@domain.test" / 19> avpops:ops_print_avp: p=0xb59c74d0, flags=0x0003 avpops:ops_print_avp: name=<acc_state> avpops:ops_print_avp: val_str=<call / 4> avpops:ops_print_avp: p=0xb59c7870, flags=0x0003 avpops:ops_print_avp: name=<acc_caller_domain> avpops:ops_print_avp: val_str=<domain.test / 10> avpops:ops_print_avp: p=0xb59c7598, flags=0x0003 avpops:ops_print_avp: name=<acc_caller_user> avpops:ops_print_avp: val_str=<8999 / 4>
***on Radius console ("radius -X"):*** rad_recv: Access-Request packet from host 127.0.0.1:1024, id=31, length=55 User-Name = "1234@domain.test" Service-Type = SIP-Callee-AVPs NAS-Port = 0 NAS-IP-Address = 127.0.0.1 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 250 modcall[authorize]: module "preprocess" returns ok for request 250 radius_xlat: '/var/log/radius/radacct/127.0.0.1/auth-detail-20071017' rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/127.0.0.1/auth-detail-20071017 modcall[authorize]: module "auth_log" returns ok for request 250 rlm_realm: Looking up realm "domain.test" for User-Name = "1234@domain.test" rlm_realm: No such realm "domain.test" modcall[authorize]: module "suffix" returns noop for request 250 modcall[authorize]: module "digest" returns noop for request 250 radius_xlat: '1234@domain.test' rlm_sql (sql): sql_set_user escaped user --> '1234@domain.test' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '1234@domain.test' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '1234@domain.test' ORDER BY id radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '1234@domain.test' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '1234@domain.test' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id rlm_sql: Failed to create the pair: Unknown attribute "Simultaneus-Access" rlm_sql (sql): Error getting data from database radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '1234@domain.test' ORDER BY id' rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '1234@domain.test' ORDER BY id radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '1234@domain.test' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '1234@domain.test' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 250 modcall: leaving group authorize (returns ok) for request 250 auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Login incorrect: [1234@domain.test] (from client localhost port 0) Delaying request 250 for 1 seconds