Hello,
as many of you discovered already, a tutorial about OpenSER and FreeRADIUS integration is now available at:
http://openser.org/docs/openser-radius-1.0.x.html
It is a step by step tutorial, with many configuration examples, which tries to reveal all the operations that can be done with RADIUS modules. Along with basic operations, the openser configuration example presents a time-based call blocking, as a proof of using together AVPs and RADIUS, confirming once more that OpenSER went beyond router concept, its powerful scripting model turning it very easy in an application server without any new development.
Hopefully, the tutorial will reduce the number of questions related to radius support in openser. Feedback and improvements are welcome.
Cheers, Daniel
Daniel-Constantin Mierla writes:
just to add that is it now (freeradius 1.1.1) possible to store user passwords encrypted using enc_mode=yes digest parameter.
-- juha
On 05/09/2006 09:37 AM, Juha Heinanen wrote:
Daniel-Constantin Mierla writes:
just to add that is it now (freeradius 1.1.1) possible to store user passwords encrypted using enc_mode=yes digest parameter.
you know the algorithm? do you have to set an encryption/decryption key to the server?
Cheers, Daniel
-- juha
Daniel-Constantin Mierla writes:
just to add that is it now (freeradius 1.1.1) possible to store user passwords encrypted using enc_mode=yes digest parameter.
you know the algorithm? do you have to set an encryption/decryption key to the server?
you calculate md5sum on string userid:realm:password and use that as value of Digest-HA1 radcheck attribute.
-- juha
On 05/11/2006 03:01 PM, Juha Heinanen wrote:
Daniel-Constantin Mierla writes:
just to add that is it now (freeradius 1.1.1) possible to store user passwords encrypted using enc_mode=yes digest parameter.
you know the algorithm? do you have to set an encryption/decryption key to the server?
you calculate md5sum on string userid:realm:password and use that as value of Digest-HA1 radcheck attribute.
ok, I thought is does some encryption just to avoid storing plain-text password.
Daniel
-- juha
Daniel-Constantin Mierla writes:
you calculate md5sum on string userid:realm:password and use that as value of Digest-HA1 radcheck attribute.
ok, I thought is does some encryption just to avoid storing plain-text password.
it does the above encryption. you don't need User-Password attribute any more, just Digest-HA1.
-- juha
Daniel,
thanks for the tutorial.
I do not see anything mentioned in the tutorial regarding the debian package "openser-radius-modules" - which you are the author of.
Does the package for Debian Sarge provide the same functionality as described in the tutoral until step 4.2. ?
Thanks in advance for clarifiying the matter.
Cheers
Gerry
----- Original Message ----- From: "Daniel-Constantin Mierla" daniel@voice-system.ro To: "users" users@openser.org; "devel" devel@openser.org Sent: Tuesday, May 09, 2006 12:47 AM Subject: [Bulk] [Users] openser radius tutorial
Hello,
as many of you discovered already, a tutorial about OpenSER and FreeRADIUS integration is now available at:
http://openser.org/docs/openser-radius-1.0.x.html
It is a step by step tutorial, with many configuration examples, which tries to reveal all the operations that can be done with RADIUS modules. Along with basic operations, the openser configuration example presents a time-based call blocking, as a proof of using together AVPs and RADIUS, confirming once more that OpenSER went beyond router concept, its powerful scripting model turning it very easy in an application server without any new development.
Hopefully, the tutorial will reduce the number of questions related to radius support in openser. Feedback and improvements are welcome.
Cheers, Daniel
Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users
___________________________________________________________ Switch an email account to Yahoo! Mail, you could win FIFA World Cup tickets. http://uk.mail.yahoo.com
On 05/10/2006 11:56 AM, G.Jacobsen wrote:
Daniel,
thanks for the tutorial.
I do not see anything mentioned in the tutorial regarding the debian package "openser-radius-modules" - which you are the author of.
Does the package for Debian Sarge provide the same functionality as described in the tutoral until step 4.2. ?
yes, the exception is for acc module, which has to be re-compiled to enable the radius support. It is why I focused using sources, to touch all radius features within openser.
Cheers, Daniel
Thanks in advance for clarifiying the matter.
Cheers
Gerry
----- Original Message ----- From: "Daniel-Constantin Mierla" daniel@voice-system.ro To: "users" users@openser.org; "devel" devel@openser.org Sent: Tuesday, May 09, 2006 12:47 AM Subject: [Bulk] [Users] openser radius tutorial
Hello,
as many of you discovered already, a tutorial about OpenSER and FreeRADIUS integration is now available at:
http://openser.org/docs/openser-radius-1.0.x.html
It is a step by step tutorial, with many configuration examples, which tries to reveal all the operations that can be done with RADIUS modules. Along with basic operations, the openser configuration example presents a time-based call blocking, as a proof of using together AVPs and RADIUS, confirming once more that OpenSER went beyond router concept, its powerful scripting model turning it very easy in an application server without any new development.
Hopefully, the tutorial will reduce the number of questions related to radius support in openser. Feedback and improvements are welcome.
Cheers, Daniel
Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users
___________________________________________________________ Switch an email account to Yahoo! Mail, you could win FIFA World Cup tickets. http://uk.mail.yahoo.com
-
Daniel-Constantin Mierla -
G.Jacobsen -
Juha Heinanen