Hello,
On 11-03 15:19, Yang Xiang wrote:
Hi,
I saw many changes in CVS about radius. Is there any progress for radius?
The radius modules from release 0.8.10 are unfortunately not usable.
It seems there will be some fundamental changes in terms of radius_auth and
radius_acc. How will the new structure look?
Yes, authentication modules changed a little bit. There will be 3
modules:
- auth - this module will contain all the code that is not tight to
a specific method of authentication, so it will basically
perform some sanity checks over the credentials in SIP
messages to make sure that the credentials are well formed
before they get to real authentication. This module will also
contain *_challenge functions and consume_credentials.
- auth_db - This module will contain code neccessary to perform
authentication over a database. This module will contain
www_authorize and proxy_authorize functions.
- auth_radius - This module will contain code necessarry to perform
authorization over radius, i.e. radius_www_authorize
and radius_proxy_authorize.
It will be possible to use both radius and database authentication
simultaneously if needed.
Group membership and URI checking (originaly in auth module) have been
moved to separate modules. There will be also support for group
membership checking over radius. Most of the radius related code was
contributed by Juha Heinanen, he has our unfailing thanks for that.
So as you can see, there is some progress :-).
All the code was tested with freeradius server.
In regards to radius_acc: Jiri is working on that but I do not know
what is the current state, he is on vacation right now.
Jan.