25 Aug
2006
25 Aug
'06
2:33 p.m.
When I add my dictionary.openser to Freradius v 1.0.1-3 on Centos 4.3,
and after following all the steps outlined on the webpage:
http://www.openser.org/docs/openser-radius-1.0.x.html
When I get to testing the configuration, radiusd -X
i get this:
read_config_files: reading dictionary
Errors reading dictionary: dict_init: No ATTRIBUTE "Sip-Method" defined
for VALUE "Other"
Errors reading radiusd.conf
Unfortunately freeradius.org is now a parked domain (seems like a rather
large oversight on their part...) so I can't ask them..
Has anyone here ever seen an issue like this?
BTW, I'm using openser 1.1.0-notls compiled from source. Not that seems
to apply here though.
25 Aug
25 Aug
2:45 p.m.
Hi,
I had a problem like this...
I followed the same steps, but in the step 6.3
(include the dictionary.openser) didn't work...Ihad
to copy the contents of dictionary.openser into
/usr/local/radiusclient-ng...
An other thing, the content of dictionary.openser was
copied from the steps on the webpage...
Good luck!
Alberto
--- nick <nick(a)mobilia.it> wrote:
When I add my dictionary.openser to Freradius v
1.0.1-3 on Centos 4.3,
and after following all the steps outlined on the
webpage:
http://www.openser.org/docs/openser-radius-1.0.x.html
When I get to testing the configuration, radiusd -X
i get this:
read_config_files: reading dictionary
Errors reading dictionary: dict_init: No ATTRIBUTE
"Sip-Method" defined
for VALUE "Other"
Errors reading radiusd.conf
Unfortunately freeradius.org is now a parked domain
(seems like a rather
large oversight on their part...) so I can't ask
them..
Has anyone here ever seen an issue like this?
BTW, I'm using openser 1.1.0-notls compiled from
source. Not that seems
to apply here though.
_______________________________________________
Users mailing list
Users(a)openser.org
http://openser.org/cgi-bin/mailman/listinfo/users
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
3:06 p.m.
Alberto Pacifico wrote:
Hi,
I had a problem like this...
I followed the same steps, but in the step 6.3
(include the dictionary.openser) didn't work...Ihad
to copy the contents of dictionary.openser into
/usr/local/radiusclient-ng...
An other thing, the content of dictionary.openser was
copied from the steps on the webpage...
Good luck!
Alberto
I saw you had asked the same thing, but I couldn't find out what you did
to set it right in the end..
I have a feeling that some of the VALUE's might be important late on, it
would be nice to figure out they don't work in this combination.
In fact, now that you had me look at the two files, the problem isn't in
the VALUE section but the ATTRIBUTE section:
all of these attributes are absent in the 1.1.0
/usr/local/etc/openser/dictionary.radius file:
ATTRIBUTE Sip-Method 101 integer # Schulzrinne, acc
ATTRIBUTE Sip-Response-Code 102 integer # Schulzrinne, acc
ATTRIBUTE Sip-Cseq 103 string # Schulzrinne, acc
ATTRIBUTE Sip-To-Tag 104 string # Schulzrinne, acc
ATTRIBUTE Sip-From-Tag 105 string # Schulzrinne, acc
ATTRIBUTE Sip-Translated-Request-URI 107 string # Proprietary, acc
ATTRIBUTE Sip-Src-IP 108 string # Proprietary, acc
ATTRIBUTE Sip-Src-Port 109 string # Proprietary, acc
ATTRIBUTE Digest-Response 206 string # Sterman, auth_radius
ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius
ATTRIBUTE Sip-Group 211 string # Proprietary, group_radius
ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius
ATTRIBUTE SIP-AVP 225 string # Proprietary, avp_radius
ATTRIBUTE Digest-Realm 1063 string # Sterman,
auth_radius
ATTRIBUTE Digest-Nonce 1064 string # Sterman,
auth_radius
ATTRIBUTE Digest-Method 1065 string # Sterman,
auth_radius
ATTRIBUTE Digest-URI 1066 string # Sterman,
auth_radius
ATTRIBUTE Digest-QOP 1067 string # Sterman,
auth_radius
ATTRIBUTE Digest-Algorithm 1068 string # Sterman,
auth_radius
ATTRIBUTE Digest-Body-Digest 1069 string # Sterman,
auth_radius
ATTRIBUTE Digest-CNonce 1070 string # Sterman,
auth_radius
ATTRIBUTE Digest-Nonce-Count 1071 string # Sterman,
auth_radius
ATTRIBUTE Digest-User-Name 1072 string # Sterman,
auth_radius
Now, strangely enough, it works!!!
Is this a bug???
Why is the dictionary.radius file missing some many ATTRIBUTEs?
6:15 p.m.
I've put this attribute into dictionary.openser:
ATTRIBUTE Digest-User-Password 1073 string
And to solve the problem of radiusclient library I've
used the solution 10.1 of webpage's steps...including
/usr/local/lib into /etc/ld.so.conf...
Alberto
--- nick <nick(a)mobilia.it> wrote:
Alberto Pacifico wrote:
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Hi,
I had a problem like this...
I followed the same steps, but in the step 6.3
(include the dictionary.openser) didn't
work...Ihad
to copy the contents of dictionary.openser into
/usr/local/radiusclient-ng...
An other thing, the content of dictionary.openser
was
copied from the steps on the webpage...
Good luck!
Alberto
I saw you had asked the same thing, but I couldn't
find out what you did
to set it right in the end..
I have a feeling that some of the VALUE's might be
important late on, it
would be nice to figure out they don't work in this
combination.
In fact, now that you had me look at the two files,
the problem isn't in
the VALUE section but the ATTRIBUTE section:
all of these attributes are absent in the 1.1.0
/usr/local/etc/openser/dictionary.radius file:
ATTRIBUTE Sip-Method 101 integer
# Schulzrinne, acc
ATTRIBUTE Sip-Response-Code 102 integer
# Schulzrinne, acc
ATTRIBUTE Sip-Cseq 103 string
# Schulzrinne, acc
ATTRIBUTE Sip-To-Tag 104 string
# Schulzrinne, acc
ATTRIBUTE Sip-From-Tag 105 string
# Schulzrinne, acc
ATTRIBUTE Sip-Translated-Request-URI 107 string
# Proprietary, acc
ATTRIBUTE Sip-Src-IP 108 string
# Proprietary, acc
ATTRIBUTE Sip-Src-Port 109 string
# Proprietary, acc
ATTRIBUTE Digest-Response 206 string #
Sterman, auth_radius
ATTRIBUTE Sip-Uri-User 208 string #
Proprietary, auth_radius
ATTRIBUTE Sip-Group 211 string #
Proprietary, group_radius
ATTRIBUTE Sip-Rpid 213 string #
Proprietary, auth_radius
ATTRIBUTE SIP-AVP 225 string #
Proprietary, avp_radius
ATTRIBUTE Digest-Realm 1063 string
# Sterman,
auth_radius
ATTRIBUTE Digest-Nonce 1064 string
# Sterman,
auth_radius
ATTRIBUTE Digest-Method 1065 string
# Sterman,
auth_radius
ATTRIBUTE Digest-URI 1066 string
# Sterman,
auth_radius
ATTRIBUTE Digest-QOP 1067 string
# Sterman,
auth_radius
ATTRIBUTE Digest-Algorithm 1068 string
# Sterman,
auth_radius
ATTRIBUTE Digest-Body-Digest 1069 string
# Sterman,
auth_radius
ATTRIBUTE Digest-CNonce 1070 string
# Sterman,
auth_radius
ATTRIBUTE Digest-Nonce-Count 1071 string
# Sterman,
auth_radius
ATTRIBUTE Digest-User-Name 1072 string
# Sterman,
auth_radius
Now, strangely enough, it works!!!
Is this a bug???
Why is the dictionary.radius file missing some many
ATTRIBUTEs?
3:53 p.m.
New subject: [Users] TURN - MediaProxy
Hi all,
I'm currently investigating about TURN as the starting phase of a
possible subject for a special assignment for the university. I found it
very interesting the AG Projects' Media Proxy implementarion of TURN. But I
must confess, I don't know very much about it yet.
In a few words: I'm studying the factibility of making RTP stream peer
to peer, and not through the Media Proxy, at least, not all the time.
Please, if somebody can give me hand, contact me.
Thanks in advance,
Victor
27 Aug
27 Aug
6:22 a.m.
New subject: AW: [Users] TURN - MediaProxy
Hi Victor,
I'm currently investigating about TURN as the
starting phase of a
possible subject for a special assignment for the university. I found it
very interesting the AG Projects' Media Proxy implementarion of TURN. But
I must confess, I don't know very much about it yet.
As a good starting point I recommend reading of "draft-ietf-behave-nat-udp".
Franz
1 Sep
1 Sep
11:12 a.m.
Hi Nick,
this attribute and its values are defined in the default radius
dictionary provided by the libradiusclient library.
regards,
bogdan
nick wrote:
When I add my dictionary.openser to Freradius v
1.0.1-3 on Centos 4.3,
and after following all the steps outlined on the webpage:
http://www.openser.org/docs/openser-radius-1.0.x.html
When I get to testing the configuration, radiusd -X
i get this:
read_config_files: reading dictionary
Errors reading dictionary: dict_init: No ATTRIBUTE "Sip-Method"
defined for VALUE "Other"
Errors reading radiusd.conf
Unfortunately freeradius.org is now a parked domain (seems like a
rather large oversight on their part...) so I can't ask them..
Has anyone here ever seen an issue like this?
BTW, I'm using openser 1.1.0-notls compiled from source. Not that
seems to apply here though.
_______________________________________________
Users mailing list
Users(a)openser.org
http://openser.org/cgi-bin/mailman/listinfo/users
1:04 p.m.
Bogdan-Andrei Iancu wrote:
Hi Nick,
this attribute and its values are defined in the default radius
dictionary provided by the libradiusclient library.
regards,
bogdan
nick wrote:
The problem is, when you're doing the testing, you're not actually
using
the libradiusclient-ng libraries.. youre using radiusclient (from the
freeradius package) and radiusd only..
so the methods remain undefined.
When I add my dictionary.openser to Freradius v
1.0.1-3 on Centos 4.3,
and after following all the steps outlined on the webpage:
http://www.openser.org/docs/openser-radius-1.0.x.html
When I get to testing the configuration, radiusd -X
i get this:
read_config_files: reading dictionary
Errors reading dictionary: dict_init: No ATTRIBUTE "Sip-Method"
defined for VALUE "Other"
Errors reading radiusd.conf
Unfortunately freeradius.org is now a parked domain (seems like a
rather large oversight on their part...) so I can't ask them..
Has anyone here ever seen an issue like this?
BTW, I'm using openser 1.1.0-notls compiled from source. Not that
seems to apply here though.
_______________________________________________
Users mailing list
Users(a)openser.org
http://openser.org/cgi-bin/mailman/listinfo/users
5 Sep
5 Sep
9:27 a.m.
as probably you are using libradiusclient-ng libraries on the RADIUS
client side (required by openser), you need to copy the sip dictionary
to the RADIUS server also.
regards,
bogdan
nick wrote:
Bogdan-Andrei Iancu wrote:
Hi Nick,
this attribute and its values are defined in the default radius
dictionary provided by the libradiusclient library.
regards,
bogdan
The problem is, when you're doing the testing, you're not actually
using the libradiusclient-ng libraries.. youre using radiusclient
(from the freeradius package) and radiusd only..
so the methods remain undefined.
10:05 a.m.
Bogdan-Andrei Iancu wrote:
as probably you are using libradiusclient-ng libraries
on the RADIUS
client side (required by openser), you need to copy the sip dictionary
to the RADIUS server also.
regards,
bogdan
nick wrote:
I copied the dictionary.radius from the openser install, but for use by
itself (without the attributes defined by radiusclient-ng) it won't work...
When it's in production, the radiusclient-ng library is also included,
so the attributes are properly defined. The problem is during testing,
unless you use the dictionary on the How To page, you'll be missing
attributes.
these are the attributes defined in the example on the page:
ATTRIBUTE Sip-Method 101 integer # Schulzrinne, acc
ATTRIBUTE Sip-Response-Code 102 integer # Schulzrinne, acc
ATTRIBUTE Sip-Cseq 103 string # Schulzrinne, acc
ATTRIBUTE Sip-To-Tag 104 string # Schulzrinne, acc
ATTRIBUTE Sip-From-Tag 105 string # Schulzrinne, acc
ATTRIBUTE Sip-Translated-Request-URI 107 string # Proprietary, acc
ATTRIBUTE Sip-Src-IP 108 string # Proprietary, acc
ATTRIBUTE Sip-Src-Port 109 string # Proprietary, acc
ATTRIBUTE Digest-Response 206 string # Sterman, auth_radius
ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius
ATTRIBUTE Sip-Group 211 string # Proprietary, group_radius
ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius
ATTRIBUTE SIP-AVP 225 string # Proprietary, avp_radius
ATTRIBUTE Digest-Realm 1063 string # Sterman,
auth_radius
ATTRIBUTE Digest-Nonce 1064 string # Sterman,
auth_radius
ATTRIBUTE Digest-Method 1065 string # Sterman,
auth_radius
ATTRIBUTE Digest-URI 1066 string # Sterman,
auth_radius
ATTRIBUTE Digest-QOP 1067 string # Sterman,
auth_radius
ATTRIBUTE Digest-Algorithm 1068 string # Sterman,
auth_radius
ATTRIBUTE Digest-Body-Digest 1069 string # Sterman,
auth_radius
ATTRIBUTE Digest-CNonce 1070 string # Sterman,
auth_radius
ATTRIBUTE Digest-Nonce-Count 1071 string # Sterman,
auth_radius
ATTRIBUTE Digest-User-Name 1072 string # Sterman,
auth_radius
These are the attributes defined in the dictionary.radius
ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius
ATTRIBUTE Sip-Group 211 string # Proprietary, group_radius
ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius
ATTRIBUTE SIP-AVP 225 string # Proprietary, avp_radius
As I said, this is not a problem during production, but it is a problem
during testing, as the radiusclient-ng dictionary is not included...
Bogdan-Andrei Iancu wrote:
Hi Nick,
this attribute and its values are defined in the default radius
dictionary provided by the libradiusclient library.
regards,
bogdan
The problem is, when you're doing the testing, you're not actually
using the libradiusclient-ng libraries.. youre using radiusclient
(from the freeradius package) and radiusd only..
so the methods remain undefined. 
11:41 a.m.
New subject: [Users] openser radius accounting
Hi,
I have problem with radius accounting.
I'm using openser1.0.1 and bsdradius 0.6.0
I'd like to send Accounting-Start packet on INVITE and ACK messages,
And i would like to differentiate it.
I'd like to use Sip-Method radius attribute for this, but it doesn't work
I've added the following lines to the dictionary of radiusclient-ng
### Sip-Method Values ###
VALUE Sip-Method INVITE 1 # Proprietary, acc
VALUE Sip-Method CANCEL 2 # Proprietary, acc
VALUE Sip-Method ACK 4 # Proprietary, acc
VALUE Sip-Method BYE 8 # Proprietary, acc
in openser.cfg the lines in question are:
modparam("acc", "radius_extra",
"Sip-Method-Str=$avp(s:method)")
route {
#....
# set Sip-Method for accounting
if (is_method("INVITE")) {
avp_printf("s:method", "1");
}
else if (is_method("ACK")) {
avp_printf("s:method", "4");
}
else if (is_method("BYE")) {
avp_printf("s:method", "8");
};
#....
}
But i've a more serious problem:
In radius i receive accounting packets for INVITE and ACK in the same time.
I'd like to use INVITE for set setuptime,
and ACK to set conncettime of a call.
But in this way the setuptime is incorrect..
INVITE:
[2006-09-05 13:41:37]
--AcctPacket--------------------------------------------------
'NAS-IP-Address': '127.0.0.1'
'User-Name': '222@callshop'
'Acct-Status-Type': 'Start'
'Error-Cause': 1L
'Acct-Delay-Time': 0L
'Called-Station-Id': 'sip:22@192.168.1.8'
'Client-IP-Address': '127.0.0.1'
'Acct-Session-Id': '6PvDX6sDfK3ndBxl(a)192.168.1.129'
'Sip-Translated-Request-URI': 'sip:222@192.168.1.10'
'Service-Type': 'IAPP-Register'
'Sip-Cseq': '2'
'Sip-From-Tag': 'fTgBvqElrM7eckW6'
'Sip-Src-Port': '5061'
'Sip-To-Tag': 'as797c64fb'
'Sip-Response-Code': 200L
'Sip-Src-IP': '192.168.1.129'
'Calling-Station-Id': 'sip:222@192.168.1.8'
'NAS-Port': 5060L
ACK
[2006-09-05 13:41:37]
--AcctPacket--------------------------------------------------
'NAS-IP-Address': '127.0.0.1'
'User-Name': '222(a)192.168.1.8'
'Acct-Status-Type': 'Start'
'Error-Cause': 4L
'Acct-Delay-Time': 0L
'Called-Station-Id': 'sip:22@192.168.1.8'
'Client-IP-Address': '127.0.0.1'
'Acct-Session-Id': '6PvDX6sDfK3ndBxl(a)192.168.1.129'
'Sip-Translated-Request-URI': 'sip:222@192.168.1.10'
'Service-Type': 'IAPP-Register'
'Sip-Cseq': '2'
'Sip-From-Tag': 'fTgBvqElrM7eckW6'
'Sip-Src-Port': '5061'
'Sip-To-Tag': 'as797c64fb'
'Sip-Response-Code': 200L
'Sip-Src-IP': '192.168.1.129'
'Calling-Station-Id': 'sip:222@192.168.1.8'
'NAS-Port': 5060L
When are INVITE messages sent to radius?
When openser got an INVITE message? I think should be...
Or when the session is establised?
Thanks any help,
Tamas
6524
days inactive
6535
days old
10 comments
6 participants
participants (6)
-
Alberto Pacifico -
Bogdan-Andrei Iancu -
Cseke Tamas -
Franz Edler -
nick -
Victor