Hello,
After I extended the dictionary of radiusclient the auth_radius module works fine. I see lots of messages sent by SER in the logfile of Radiator. However the authentication failed:
Mon May 12 19:48:13 2003: DEBUG: Radius::AuthLDAP2 looks for match with yang Mon May 12 19:48:13 2003: WARNING: No CHAP-Password or User-Password in request: does your dictionary have User-Password in it? Mon May 12 19:48:13 2003: DEBUG: Radius::AuthLDAP2 REJECT: Bad Encrypted password Mon May 12 19:48:13 2003: INFO: Connecting to localhost, port 389 Mon May 12 19:48:13 2003: INFO: Attempting to bind with , (server localhost:389) Mon May 12 19:48:13 2003: DEBUG: No entries for DEFAULT found in LDAP database Mon May 12 19:48:13 2003: INFO: Access rejected for yang: Bad Encrypted password
How can I configure radiator for digest authentication? Does anyone here have a sample config?
Thanks
yang
----- Original Message ----- From: "Jan Janak" jan@iptel.org To: "Yang Xiang" yang.xiang@iitb.fraunhofer.de Cc: "Andrei Pelinescu-Onciul" pelinescu-onciul@fokus.fraunhofer.de; serdev@lists.iptel.org Sent: Monday, May 12, 2003 1:04 PM Subject: Re: [Serdev] configure radius support and question on debug
Xiang writes:
this is just for freeradius but not Radiator.
sorry, i didn't read your message carefully enough. in case of radiator, you don't need to do anything special in the configuration. just install the latest radiator and then make sure your config can handle the service-types you have configured ser to use. for example, you can have
<Handler Service-Type=SIP> ... </AuthBy>
or whatever your strategy is.
-- juha
Hi, juha,
Thank you for your reply. Radiator works now. The mistake was that I used "ServerChecksPassword" instead of "EncryptedPasswordAtrr" for OpenLDAP and the OpenLDAP could not find any password in the request sent by radiator, of course.
Best regards
yang
----- Original Message ----- From: "Juha Heinanen" jh@lohi.eng.song.fi To: "Xiang" xia@iitb.fhg.de Cc: "Yang Xiang" yang.xiang@iitb.fraunhofer.de; "Jan Janak" jan@iptel.org; "Andrei Pelinescu-Onciul" pelinescu-onciul@fokus.fraunhofer.de; serdev@lists.iptel.org; serusers@lists.iptel.org Sent: Tuesday, May 13, 2003 6:34 AM Subject: Re: [Serdev] configure radius support and question on debug
Xiang writes:
this is just for freeradius but not Radiator.
sorry, i didn't read your message carefully enough. in case of radiator, you don't need to do anything special in the configuration. just install the latest radiator and then make sure your config can handle the service-types you have configured ser to use. for example, you can have
<Handler Service-Type=SIP> ... </AuthBy>
or whatever your strategy is.
-- juha
-
Juha Heinanen -
Xiang -
Yang Xiang