Hi, Just for other people's reference, to get ser to compile with radiusclient 0.4.x you need to get the latest source from CVS.
Now as per the 'radius_howto' testing between freeradius and the client worked fine.
However, after modifying ser.cfg, the following comes up and i would appreciate any help.
0(0) ERROR: acc: error reading radius dictionary 0(0) init_mod(): Error while initializing module acc ERROR: error while initializing modules
If i do not load module 'acc' then a similar error message appears with 'auth_radius' not initialising.
I have appended dictionary.ser to dictionary and included it from raddb. The permissions for dictionary are set to rw/r/r and the relevant parts in ser.cfg are:
# Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/acc.so" loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
# -- usrloc params --
#modparam("usrloc", "db_mode", 0)
# Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2)
# -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # #modparam("auth_db", "password_column", "password") modparam("acc", "radius_config", "/usr/local/etc/radiusclient/radiusclient.conf ") modparam("auth_radius", "radius_config", "/usr/local/etc/radiusclient/radiuscli ent.conf") modparam("auth_radius", "service_type", 15) # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1)
#modparam ("acc", "log_level", 1) #modparam ("acc", "radius_flag", 1)
There was a bug in the dictionary parser of the new libradiusclient library -- it does not like dictionaries having comments at the end of ATTRIBUTE lines, try the attached dictionary.ser or use the latest libradiusclient released by Maxim (it should have this bug fixed).
Jan.
On 15-04 18:31, Lambros Lambrinos wrote:
Hi, Just for other people's reference, to get ser to compile with radiusclient 0.4.x you need to get the latest source from CVS.
Now as per the 'radius_howto' testing between freeradius and the client worked fine.
However, after modifying ser.cfg, the following comes up and i would appreciate any help.
0(0) ERROR: acc: error reading radius dictionary 0(0) init_mod(): Error while initializing module acc ERROR: error while initializing modules
If i do not load module 'acc' then a similar error message appears with 'auth_radius' not initialising.
I have appended dictionary.ser to dictionary and included it from raddb. The permissions for dictionary are set to rw/r/r and the relevant parts in ser.cfg are:
# Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/acc.so" loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
# -- usrloc params --
#modparam("usrloc", "db_mode", 0)
# Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2)
# -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # #modparam("auth_db", "password_column", "password") modparam("acc", "radius_config", "/usr/local/etc/radiusclient/radiusclient.conf ") modparam("auth_radius", "radius_config", "/usr/local/etc/radiusclient/radiuscli ent.conf") modparam("auth_radius", "service_type", 15) # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1)
#modparam ("acc", "log_level", 1) #modparam ("acc", "radius_flag", 1)
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Jan, Thanks for the reply. Can't at the moment get anything from the CVS as berlios seems to be down. On trying the file without the comments after ATTRIBUTE it gives the following:
acc - initializing 0(0) ERROR: acc: can't get code for the Sip-Translated-Request-URI attribute 0(0) init_mod(): Error while initializing module acc ERROR: error while initializing modules
Does this attribute relate to:
ATTRIBUTE Sip-Translated-Req-ID 107 string
Regards, Lambros
There was a bug in the dictionary parser of the new libradiusclient library -- it does not like dictionaries having comments at the end of ATTRIBUTE lines, try the attached dictionary.ser or use the latest libradiusclient released by Maxim (it should have this bug fixed).
Jan.
On 15-04 18:31, Lambros Lambrinos wrote:
Hi, Just for other people's reference, to get ser to compile with radiusclient 0.4.x you need to get the latest source from CVS.
Now as per the 'radius_howto' testing between freeradius and the client worked fine.
However, after modifying ser.cfg, the following comes up and i would appreciate any help.
0(0) ERROR: acc: error reading radius dictionary 0(0) init_mod(): Error while initializing module acc ERROR: error while initializing modules
If i do not load module 'acc' then a similar error message appears with 'auth_radius' not initialising.
I have appended dictionary.ser to dictionary and included it from raddb. The permissions for dictionary are set to rw/r/r and the relevant parts in ser.cfg are:
# Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/acc.so" loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
# -- usrloc params --
#modparam("usrloc", "db_mode", 0)
# Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2)
# -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # #modparam("auth_db", "password_column", "password") modparam("acc", "radius_config", "/usr/local/etc/radiusclient/radiusclient.conf ") modparam("auth_radius", "radius_config", "/usr/local/etc/radiusclient/radiuscli ent.conf") modparam("auth_radius", "service_type", 15) # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1)
#modparam ("acc", "log_level", 1) #modparam ("acc", "radius_flag", 1)
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
# # $Id: dictionary.ser,v 1.2 2003/09/11 22:05:08 janakj Exp $ # # SIP RADIUS attributes # # Schulzrinne indicates attributes according to # draft-schulzrinne-sipping-radius-accounting-00 # # Sterman indicates attributes according to # draft-sterman-aaa-sip-00 # # Standard indicates a standard RADIUS attribute # which is missing in radiusclient dictionary # # Digest indicates attributes according to # # Proprietary indicates an attribute that hasn't # been standardized #
### acc ### ATTRIBUTE Sip-Method 101 integer ATTRIBUTE Sip-Response-Code 102 integer ATTRIBUTE Sip-Cseq 103 string ATTRIBUTE Sip-To-Tag 104 string ATTRIBUTE Sip-From-Tag 105 string ATTRIBUTE Sip-Branch-Id 106 string ATTRIBUTE Sip-Translated-Req-ID 107 string ATTRIBUTE Sip-Source-Ip-Address 108 ipaddr ATTRIBUTE Sip-Source-Port 109 integer VALUE Service-Type Sip-Session 15
### auth_radius ### # Sip-Session service type is already defined in acc section VALUE Service-Type Call-Check 10 VALUE Service-Type Emergency-Call 13
ATTRIBUTE Digest-Response 206 string ATTRIBUTE Digest-Attributes 207 string
ATTRIBUTE Sip-Uri-User 208 string ATTRIBUTE Sip-Rpid 213 string
ATTRIBUTE Digest-Realm 1063 string ATTRIBUTE Digest-Nonce 1064 string ATTRIBUTE Digest-Method 1065 string ATTRIBUTE Digest-Uri 1066 string ATTRIBUTE Digest-Qop 1067 string ATTRIBUTE Digest-Algorithm 1068 string ATTRIBUTE Digest-Body-Digest 1069 string ATTRIBUTE Digest-Cnonce 1070 string ATTRIBUTE Digest-Nonce-Count 1071 string ATTRIBUTE Digest-User-Name 1072 string
### group_radius ### VALUE Service-Type Group-Check 12
ATTRIBUTE Sip-Group 211 string
### uri_radius ### # Call-Check service type is already define in auth_radius
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers