<div dir="ltr">Hi all.<div>Have a problem with radius authorization.</div><div><br></div><div>I'm using auth_radius.so</div><div><br></div><div>modparams, only path to client file:</div><div>modparam("auth_radius", "radius_config", "/etc/radiusclient/radiusclient.conf")<br></div><div><br></div><div>Freeradius installed and is working properly, radtest authentication from kamailio host succeed .</div><div><br></div><div>How authorization block looks like:</div><div><br></div><div><div><span class="gmail-Apple-tab-span" style="white-space:pre">    </span>if (!is_present_hf("Authorization")) {</div><div><span class="gmail-Apple-tab-span" style="white-space:pre">               </span>xlog("L_NOTICE", "----- Athorization HF is not found - passing the challenge -----\n");</div><div><br></div><div><span class="gmail-Apple-tab-span" style="white-space:pre">           </span>if (nat_uac_test("2")) {</div><div><span class="gmail-Apple-tab-span" style="white-space:pre">                     </span>force_rport();</div><div><span class="gmail-Apple-tab-span" style="white-space:pre">         </span>}</div><div><br></div><div><span class="gmail-Apple-tab-span" style="white-space:pre">             </span>www_challenge("$fd", "1");</div><div><span class="gmail-Apple-tab-span" style="white-space:pre">         </span>exit;</div></div><div><br></div><div><br></div><div><div><span class="gmail-Apple-tab-span" style="white-space:pre"> </span>if (!radius_www_authorize("$fd","$fU")) {</div><div><br></div><div><span class="gmail-Apple-tab-span" style="white-space:pre">         </span>if (nat_uac_test("2")) {</div><div><span class="gmail-Apple-tab-span" style="white-space:pre">                     </span>force_rport();</div><div><span class="gmail-Apple-tab-span" style="white-space:pre">         </span>}</div><div><span class="gmail-Apple-tab-span" style="white-space:pre">              </span>xlog("L_NOTICE", "----- Registeration $au@$ar ($fU) from $si:$sp Rejected. Code: $rc -----\n");</div><div><br></div><div><span class="gmail-Apple-tab-span" style="white-space:pre">           </span>sl_send_reply("401","Unauthorized");</div><div><span class="gmail-Apple-tab-span" style="white-space:pre">               </span>exit;</div></div><div><br></div><div>Radius log is filled by rows like:</div><div>Auth: [digest] Cleartext-Password or Digest-HA1 is required for authentication.<br></div><div><br></div><div>Tried to use radius_www_authorize without $fU - didn't change anything.</div><div>Tried to use www_challenge without qop - didn't change anything.<br></div><div><br></div><div>So, this solution is quite simple, but I have a fail while digest authentication.</div><div>Any ideas? </div><div><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><span>-- <br></span>BR, Donat Zenichev
<br>Wnet VoIP team
<br>Tel:  +380(44) 5-900-808
<br><a href="http://wnet.ua" target="_blank">http://wnet.ua</a></div></div>
</div></div>