I'm sure this will seem extremely silly to those who know about RADIUS configuration but the offending statement was hidden deep in my radiusclient.conf....
binaddr localhost
I simply needed to change 'localhost' to the ip address of my ethernet card, and presto, RADIUS packets.
----- Original Message ----- From: "Rod Bacon" rod.bacon@empoweredcomms.com.au To: "Lucas Aimaretto" lucas@cyneric.com Cc: serusers@lists.iptel.org Sent: Friday, March 11, 2005 8:30 AM Subject: Re: [Serusers] SER + RADIUS
Lucas, I have struggled with this RADIUS setup for 2 full days. Would you mind if I sent you my configs to have a look over? I am not getting *any* RADIUS packets leaving my SER box at all, and can't understand why. I have followed your instructions to the *letter*.
----- Original Message ----- From: "Lucas Aimaretto" lucas@cyneric.com Sent: Wednesday, December 22, 2004 9:35 PM Subject: [Serusers] SER + RADIUS
Hello List,
Hello ...
I'm trying to use RADIUS Auth, I followed the steps in Radius How to, but SER doesn't send requests to Radius (I saw in tcpdump) and it log this message rc_send_server: no reply from RADIUS server xxxxx...
- Mmmm, many steps ... First, make sure you've compiled your ser with
support for all modules (I did it that way and worked for me) ... At compiling with support for all modules you won't fail, although you are compiling modules you don't need.
make exclude_modules="" modules.
- Compile the radiusclient library. With the help of the Radius-HowTo
you should get that going. TAKE CARE WITH DICTIONARIES. You need to add both dictionary.sip and dictionary.ser to your radius' dictionary.
- Be sure your radius supports digest authentication. With MD5, at
least, you're done ...
- Be sure to load the auth_radius.so module in the ser.cfg file.
loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
- You might need to configure the auth_radius.so module ... This is my
configuration ... May need to vary something.
# -- RADIUS AUTH -- modparam("auth_radius", "radius_config", "/etc/radiusclient.conf") modparam("auth_radius", "service_type", 15)
- Configure ser.cfg like this for doing authentication at REGISTER time
...
if (uri==myself) {
if (method=="REGISTER") { # Lo siguiente es para auth con RADIUS if (!radius_www_authorize("")) { www_challenge("", "0"); break; }; save("location"); break; };Hope this helps ...
Lucas
-- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.296 / Virus Database: 265.6.4 - Release Date: 22/12/2004
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers