<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2802" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I config openser authenticate from Radius. when
softphone register to openser, Freeradius response "Sending Access-Accept" but
openser inform "ERROR:auth_radius:radius_authorize_sterman: rc_auth failed" So
softphone not registered. I search this title in google and find on
"<STRONG><FONT face="Times New Roman" size=4>OpenSER Users Mailing
List</FONT></STRONG>", I didnt find solution to
fix problem. Could someone help me fix this problem
?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Here is list of product's version I
used.</FONT></DIV>
<DIV><FONT face=Arial size=2>openser-1.0.1</FONT></DIV>
<DIV><FONT face=Arial size=2>OS : CentOS-4 x86_64</FONT></DIV>
<DIV><FONT face=Arial size=2>radiusclient-ng-0.5.2</FONT></DIV>
<DIV><FONT face=Arial size=2>freeradius-1.0.5</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>openser show debug :</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2> 8(8985) parse_headers:
flags=ffffffffffffffff<BR> 8(8985) check_via_address(192.168.212.123,
192.168.212.123, 0)<BR> 8(8985) DEBUG:destroy_avp_list: destroying list
(nil)<BR> 8(8985) receive_msg: cleaning up<BR> 7(8982) SIP
Request:<BR> 7(8982) method:
<REGISTER><BR> 7(8982) uri:
<sip:vdc.com.vn><BR> 7(8982) version:
<SIP/2.0><BR> 7(8982) parse_headers: flags=2<BR> 7(8982) DEBUG:
get_hdr_body : content_length=0<BR> 7(8982) get_hdr_field: cseq
<CSeq>: <2> <REGISTER><BR> 7(8982) DEBUG:parse_to:end of
header reached, state=9<BR> 7(8982) DEBUG: get_hdr_field: <To> [23];
uri=[sip:5001@vdc.com.vn]<BR> 7(8982) DEBUG: to body
[<sip:5001@vdc.com.vn><BR>]<BR> 7(8982) Found param type 235,
<rport> = <n/a>; state=6<BR> 7(8982) Found param type 232,
<branch> = <z9hG4bKc0a8d47b0131c9b1442b39c80000367c00000003>;
state=16<BR> 7(8982) end of header reached, state=5<BR> 7(8982)
parse_headers: Via found, flags=2<BR> 7(8982) parse_headers: this is the
first via<BR> 7(8982) After parse_msg...<BR> 7(8982) preparing to run
routing scripts...<BR> 7(8982) DEBUG:maxfwd:is_maxfwd_present: value =
70<BR> 7(8982) parse_headers: flags=200<BR> 7(8982) found end of
header<BR> 7(8982) find_first_route: No Route headers
found<BR> 7(8982) loose_route: There is no Route HF<BR> 7(8982)
grep_sock_info - checking if host==us: 10==9 && [vdc.com.vn] ==
[127.0.0.1]<BR> 7(8982) grep_sock_info - checking if port 5060 matches port
5060<BR> 7(8982) grep_sock_info - checking if host==us: 10==13
&& [vdc.com.vn] == [192.168.212.9]<BR> 7(8982) grep_sock_info
- checking if port 5060 matches port 5060<BR> 7(8982) grep_sock_info -
checking if host==us: 10==9 && [vdc.com.vn] ==
[127.0.0.1]<BR> 7(8982) grep_sock_info - checking if port 5060 matches port
5060<BR> 7(8982) grep_sock_info - checking if host==us: 10==13
&& [vdc.com.vn] == [192.168.212.9]<BR> 7(8982) grep_sock_info
- checking if port 5060 matches port 5060<BR> 7(8982) grep_sock_info -
checking if host==us: 10==9 && [vdc.com.vn] ==
[127.0.0.1]<BR> 7(8982) grep_sock_info - checking if port 5060 matches port
5060<BR> 7(8982) grep_sock_info - checking if host==us: 10==13
&& [vdc.com.vn] == [192.168.212.9]<BR> 7(8982) grep_sock_info
- checking if port 5060 matches port 5060<BR> 7(8982) grep_sock_info -
checking if host==us: 10==9 && [vdc.com.vn] ==
[127.0.0.1]<BR> 7(8982) grep_sock_info - checking if port 5060 matches port
5060<BR> 7(8982) grep_sock_info - checking if host==us: 10==13
&& [vdc.com.vn] == [192.168.212.9]<BR> 7(8982) grep_sock_info
- checking if port 5060 matches port 5060<BR> 7(8982) check_nonce():
comparing [442b360523cece6362803c97fa7fb10b37680cd8] and
[442b360523cece6362803c97fa7fb10b37680cd8]<BR> 7(8982)
ERROR:auth_radius:radius_authorize_sterman: rc_auth failed<BR> 7(8982)
build_auth_hf(): 'WWW-Authenticate: Digest realm="vdc.com.vn",
nonce="442b360523cece6362803c97fa7fb10b37680cd8"<BR>'<BR> 7(8982)
parse_headers: flags=ffffffffffffffff<BR> 7(8982)
check_via_address(192.168.212.123, 192.168.212.123, 0)<BR> 7(8982)
DEBUG:destroy_avp_list: destroying list (nil)<BR> 7(8982) receive_msg:
cleaning up</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Radius show debug:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>rad_recv: Access-Request packet from host
192.168.212.9:32826, id=205,
length=203<BR> User-Name = "<A
href="mailto:5001@vdc.com.vn">5001@vdc.com.vn</A>"<BR>
Digest-Attributes = 0x0a0635303031<BR>
Digest-Attributes =
0x010c7664632e636f6d2e766e<BR>
Digest-Attributes =
0x022a34343262333630353233636563653633363238303363393766613766623130623337363830636438<BR>
Digest-Attributes =
0x04107369703a7664632e636f6d2e766e<BR>
Digest-Attributes =
0x030a5245474953544552<BR>
Digest-Response =
"1c3d532fc6c1c37004c6df6027e6242c"<BR>
Service-Type = 0x0000000f00000000<BR>
Sip-Uri-User = "5001"<BR> NAS-Port =
0x000013c400000000<BR> NAS-IP-Address
= 0xc0a8d40900000000<BR> Processing the authorize section of
radiusd.conf<BR>modcall: entering group authorize for request 0<BR>Invalid
operator for item Suffix: reverting to '=='<BR>Invalid operator for item Suffix:
reverting to '=='<BR>Invalid operator for item Suffix: reverting to
'=='<BR>Invalid operator for item Suffix: reverting to '=='<BR>Invalid operator
for item Suffix: reverting to '=='<BR>Invalid operator for item Suffix:
reverting to '=='<BR>Invalid operator for item Suffix: reverting to
'=='<BR>Invalid operator for item Suffix: reverting to '=='<BR> hints:
Matched DEFAULT at 82<BR> modcall[authorize]: module "preprocess" returns
ok for request 0<BR> modcall[authorize]: module "chap" returns noop for
request 0<BR> modcall[authorize]: module "mschap" returns noop for request
0<BR> rlm_digest: Converting Digest-Attributes to something
sane...<BR> Digest-User-Name =
"5001"<BR> Digest-Realm =
"vdc.com.vn"<BR> Digest-Nonce =
"442b360523cece6362803c97fa7fb10b37680cd8"<BR>
Digest-URI = "sip:vdc.com.vn"<BR>
Digest-Method = "REGISTER"<BR>rlm_digest: Adding Auth-Type = DIGEST<BR>
modcall[authorize]: module "digest" returns ok for request
0<BR> rlm_realm: No <A href="mailto:'@'">'@'</A> in User-Name
= "5001", looking up realm NULL<BR> rlm_realm: No such realm
"NULL"<BR> modcall[authorize]: module "suffix" returns noop for request
0<BR>radius_xlat: '5001'<BR>rlm_sql (sql): sql_set_user escaped user
--> '5001'<BR>radius_xlat: 'SELECT 1 as id,'5001' as
UserName,'User-Password' as Attribute,subscriber_password as Value,'==' as op
FROM subscribers WHERE subscriber_username = '5001'AND
subscriber_status=1'<BR>rlm_sql (sql): Reserving sql socket id:
4<BR>radius_xlat: ''<BR>radius_xlat: 'SELECT 1 as id,'5001' as
UserName,'Session-Timeout' as Attribute,getSessionTime('5001','')as Value,'=' as
op FROM dual'<BR>radius_xlat: ''<BR>rlm_sql (sql): Released sql socket id:
4<BR> modcall[authorize]: module "sql" returns ok for request
0<BR>modcall: group authorize returns ok for request 0<BR>
rad_check_password: Found Auth-Type DIGEST<BR>auth: type
"digest"<BR> Processing the authenticate section of
radiusd.conf<BR>modcall: entering group authenticate for request 0<BR>A1 =
5001:vdc.com.vn:test<BR>A2 = REGISTER:sip:vdc.com.vn<BR>H(A1) =
454e15015603bd4bd79faf0c5ddd3346<BR>H(A2) =
ac5bd79ed3d6bd2bddcb1cffafbbd09a<BR>KD =
454e15015603bd4bd79faf0c5ddd3346:442b360523cece6362803c97fa7fb10b37680cd8:ac5bd79ed3d6bd2bddcb1cffafbbd09a<BR>EXPECTED
1c3d532fc6c1c37004c6df6027e6242c<BR>RECEIVED
1c3d532fc6c1c37004c6df6027e6242c<BR> modcall[authenticate]: module
"digest" returns ok for request 0<BR>modcall: group authenticate returns ok for
request 0<BR>Login OK: [5001] (from client 192.168.212.9 port
3134307025)<BR>Sending Access-Accept of id 205 to
192.168.212.9:32826<BR>
Session-Timeout = 60<BR>Finished request 0<BR>Going to the next request<BR>---
Walking the entire request list ---<BR>Waking up in 6 seconds...<BR>--- Walking
the entire request list ---<BR>Cleaning up request 0 ID 205 with timestamp
442b3adf<BR>Nothing to do. Sleeping until we see a request.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Best regards,</FONT></DIV>
<DIV><FONT face=Arial size=2>Nguyen</FONT></DIV></BODY></HTML>