> -----Original Message-----
> From: Klaus Darilion [mailto:klaus.mailinglists@pernau.at]
> Sent: Thursday, March 18, 2004 12:48 pm
> To: Ticknor, Scott: DGSE
> Cc: serusers(a)lists.iptel.org
> Subject: Re: [Serusers] authentication recommnedations
>
>
> Hi!
>
> I use this setup:
>
> if (is_from_local() ) {
> if (!proxy_authorize("", "subscriber"))
so i tried your logic Klaus, thank you very much. i loaded the necessary
modules in ser.cfg, etc.
but there are problems. first, with FORK=NO, it seems that SER will only
listen on the loopback [is there a listen_on param ?]. if i set fork to YES,
with debug set to 7, the output shows, among other things:
connect_db(): too many connections
is this a result of the forking? this was never a problem before.
either way, it doesnt work. with fork=no, clients cannot register. with
fork=yes, ser wont start.
now i am off to the archive again...
scott t
DSi
Hi List,
Is the Radius HOWTO (http://www.iptel.org/ser/doc/ser_radius/ser_radius.html)
is correct when it stated that
"
To enable RADIUS accounting simply use radius_log_flag and
radius_log_missed_flag parameters instead of log_flag and log_missed_flag.
Mark transactions that should be logged with flags configured in the parameters. "
but in README under ser/sip_router/modules/acc, I don't find any export
parameter "radius_log_flag", and when I did as in Radius HOWTO (as above) I
received :
0(7757) set_mod_param_regex: parameter <radius_log_flag> not found in module <acc>
0(7757) parse error (43,38-39): Can't set module parameter
ERROR: bad config file (1 errors)
But without it, I received:
acc - initializing
0(7767) ERROR: acc: init_child bind_db failed...did you load a database module?
0(7767) init_mod(): Error while initializing module acc
My ser.cfg is:
====================
debug=3
fork=yes
log_stderror=yes
check_via=no # (cmd. line: -v)
dns=no # (cmd. line: -r)
rev_dns=no # (cmd. line: -R)
port=5060
children=4
fifo="/tmp/ser_fifo"
alias="fptnet.vn"
alias="hnluat.edu"
alias="sgluat.edu"
alias="sg.fptnet.com"
alias="fptnet.com"
#loadmodule "/usr/local/lib/ser/modules/mysql.so"
#loadmodule "/usr/local/lib/ser/modules/postgres.so"
loadmodule "/usr/local/lib/ser/modules/sl.so"
loadmodule "/usr/local/lib/ser/modules/tm.so"
loadmodule "/usr/local/lib/ser/modules/rr.so"
loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
loadmodule "/usr/local/lib/ser/modules/usrloc.so"
loadmodule "/usr/local/lib/ser/modules/registrar.so"
#loadmodule "/usr/local/lib/ser/modules/uri_radius.so"
#loadmodule "/usr/local/lib/ser/modules/uri.so"
loadmodule "/usr/local/lib/ser/modules/auth.so"
#loadmodule "/usr/local/lib/ser/modules/auth_db.so"
loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
loadmodule "/usr/local/lib/ser/modules/acc.so"
loadmodule "/usr/local/lib/ser/modules/xlog.so"
#modparam("usrloc", "db_mode", 0)
#modparam("uri_radius", "service_type", 11)
#modparam("rr", "enable_full_lr", 1)
modparam("auth_radius", "radius_config",
"/usr/local/etc/radiusclient/radiusclient.conf")
modparam("acc", "radius_config", "/usr/local/etc/radiusclient/radiusclient.conf")
modparam("xlog", "buf_size", 8192)
###
modparam("acc", "log_level", 1)
modparam("acc", "log_flag" , 1)
modparam("acc", "radius_flag", 1)
modparam("tm", "fr_inv_timer", 15 )
modparam("tm", "fr_timer", 10 )
modparam("auth", "secret", "testing123")
modparam("auth_radius", "service_type", 15)
###
route{
if (!mf_process_maxfwd_header("10")) {
sl_send_reply("483","Too Many Hops");
break;
};
# if ( msg:len > max_len ) {
# sl_send_reply("513", "Message too big");
# break;
# };
record_route();
if (loose_route()) {
t_relay();
break;
};
if (uri==myself) {
xlog("L_ERR", " method <%rm> <%fu> <%tu>\n");
if (method=="REGISTER") {
# # if (!www_authorize("mydomain", "subscriber")) {
if (!radius_www_authorize("")) {
www_challenge("", "0");
break;
};
save("location");
break;
};
setflag(1);
if (method=="INVITE") record_route();
if (method=="REGISTER") {
log(1, "REGISTER received\n");
} else {
log(1, "non-REGISTER received\n");
};
if (uri=~"sip:.*[@:]fptnet.vn") {
log(1, "request for fptnet.vn\n");
} else {
log(1, "request for other domain received\n");
};
if (!lookup("location")) {
sl_send_reply("404", "Not Found");
break;
};
#};
if (!t_relay()) {
sl_reply_error();
};
};
}
========================
How to setup acct to plain text file, while authentification via radius ?
( I would like to see what the acct details looked like to prepare acct table
for radius ).
Thank you very much for any reply.
Best regards
Anton,
Hello ;
What is the highest level of debugging.
I increased to 9 , do not see to much debuggin information.
How can i find out who is registered ?
Thanks
________________________________________________________________________
BerliKomm Telekommunikationsgesellschaft mbH
Ahmet Balamir
Phone: +49 30 8188 9821
Ludwig-Erhard-Haus Fax:
Fasanenstraße 85 CellPhone: +49 163 818 9821
10623 Berlin eMail: Ahmed.Balamir(a)berlikomm.net
Germany WWW: http://www.berlikomm.net
________________________________________________________________________
Hi all,
Is anybody working with current iptel webinterface ?
I made it running on my server , but it dose not login!
http://65.38.211.66/iptel/html/admin/
It hase the standard login, but it rejects it.
I installed everything by the book.
Any recommends?
Thanks,
Oliver
Does anyone have example config files for an SER and RADIUS implementation.
I'll take whatever you can send at this point.
Scott Morris
Enterprise Network Engineer
DOE - ORAU / ORISE
865-576-4672
I'm looking for a SIP-experienced contractor to do development and
deployment of a clustered SER solution - physical location immaterial.
If you are interested, please contact me *off-list*.
Alex
hey Everyone,
me and my partner in the lab here have set up a very simple SER
implementation. up to now we have been using digest authentication with
mysql, and created users with serctl etc.
it was nice to get it working and place some calls, we have a couple cisco
7960 phones as well as X-Lite clients. but in our tests we found that we
could put *any* user name & password in the X-Lite config--and the calls
would still succeed! the message console in X-Lite shows the 401
unautourized response to REGISTER [which is to be expected] but then if we
go ahead and dial...the other phone will ring.
there must be an explanation. i see some people are using RADIUS for
authentication; would a RADIUS implementation solve this problem? i cannot
attach my ser.cfg just now...but it is almost completely stock anyway, the
changes made were uncommenting the digest auth bits, and setting the domain
name.
ideas?
scott t,
DSi
Hello:
I am trying the jabber module.
IM seems to work, but after a while SIP client (Windows Messenger) receives
an "Error: Connection to Jabber server lost. You have to login to Jabber
server again".
I've read that this is caused by a disconnection between Jabber GW and Jabber
Server. Jabber server seems to work after that error.
What can I do to discover where is the problem?.
Thank you,
Mark
