Diego, looks like there was no session started at first place. Did u change the openser.cfg config? You need to add callid into radius_proxy_authorize so that the callid should be used (example in README.txt of the freeradius-cdrtool sources). Also, can u post a full authorize/account_start/account_stop sequence as logged by "radiusd -X". DanB On Tue, Sep 30, 2008 at 3:00 PM, Diego Zuaneti Arruda < diego(a)fasternet.com.br&gt; wrote:

Diego, the problem is with your digest module which is sanitizing the parameters in authentication phase only, therefore the parameters like Username, Digest-URI are not available in the authorization phase (no way for the connector to read them). Did u patch your rlm_digest as per the README.txt? What version of freeradius are u using? DanB On Tue, Sep 30, 2008 at 3:56 PM, Diego Zuaneti Arruda < diego(a)fasternet.com.br&gt; wrote:

Here is an already patched version: http://frad-cdrtool.sourceforge.net/rlm_digest.c You should replace your rlm_digest.c with this one and recompile the server. DanB On Tue, Sep 30, 2008 at 4:14 PM, Diego Zuaneti Arruda < diego(a)fasternet.com.br&gt; wrote:

"The avps received will be available in openser as: callMaxDur and credit, where callMaxDur is the maximum duration the user is allowed to be connected with the destination and credit represents the amount of credit available at starting of the call. This info can be used later in an bbua able to timeout calls based on duration. " On Tue, Sep 30, 2008 at 4:38 PM, Diego Zuaneti Arruda < diego(a)fasternet.com.br&gt; wrote:

Hi Diego, fixed now in pre2. Cheers, DanB On Tue, Sep 30, 2008 at 5:58 PM, Diego Zuaneti Arruda < diego(a)fasternet.com.br&gt; wrote:

Diego, the connector is just the translator between cdrtool and radius/openser, so no need of coding anything inside, but use that information inside openser to make a decision. A good way to go would be an AVP check inside openser.cfg like: check_value_of_ ($avp(s:credit)): (need to be replaced by real condition you want to match) $rU = "ann-insufficient_credit"; Cheers, DanB On Tue, Sep 30, 2008 at 10:38 PM, Diego Zuaneti Arruda < diego(a)fasternet.com.br&gt; wrote:

Diego, It looks like there is another problem (nothing to do with the fact that your account is bellow 0. Can u send me the "radius -X" logs? DanB On Wed, Oct 1, 2008 at 2:02 PM, Diego Zuaneti Arruda &lt;diego(a)fasternet.com.br > Ok, but the radius returns status 407, and the call does not come to > openser. > There is some additional configuration for the call is routed to the > openser when the user do not have credit? > > In the messages logs, I have: > > Oct 1 08:59:52 sipserver1 cdrtool[4698]: Notice: maxduration of 0 is less > then minimumDurationCharged (60) > Oct 1 08:59:52 sipserver1 cdrtool[4698]: GetBalance > From=87004(a)fastervoip.com.br > Oct 1 08:59:53 sipserver1 cdrtool[4698]: MaxSessionTime > CallId=YzcyMWM3YTgzNDg1MWY2YWFlYzhjMzdhNDYxM2Q3NGU. > From=87004(a)fastervoip.com.br To=sip:01591184701@fastervoip.com.br<sip%3A01591184701@fastervoip.com.br>Duration=10800 Gateway= > 127.0.0.1 Lock=1 > Oct 1 08:59:53 sipserver1 cdrtool[4698]: Notice: maxduration of 0 is less > then minimumDurationCharged (60) > Oct 1 08:59:53 sipserver1 cdrtool[4698]: GetBalance > From=87004(a)fastervoip.com.br > Oct 1 08:59:54 sipserver1 cdrtool[4698]: MaxSessionTime > CallId=YzcyMWM3YTgzNDg1MWY2YWFlYzhjMzdhNDYxM2Q3NGU. > From=87004(a)fastervoip.com.br To=sip:01591184701@fastervoip.com.br<sip%3A01591184701@fastervoip.com.br>Duration=10800 Gateway= > 127.0.0.1 Lock=1 > Oct 1 08:59:54 sipserver1 cdrtool[4698]: Notice: maxduration of 0 is less > then minimumDurationCharged (60) > Oct 1 08:59:54 sipserver1 cdrtool[4698]: GetBalance > From=87004(a)fastervoip.com.br > Oct 1 08:59:54 sipserver1 cdrtool[4698]: MaxSessionTime > CallId=YzcyMWM3YTgzNDg1MWY2YWFlYzhjMzdhNDYxM2Q3NGU. > From=87004(a)fastervoip.com.br To=sip:01591184701@fastervoip.com.br<sip%3A01591184701@fastervoip.com.br>Duration=10800 Gateway= > 127.0.0.1 Lock=1 > Oct 1 08:59:54 sipserver1 cdrtool[4698]: Notice: maxduration of 0 is less > then minimumDurationCharged (60) > Oct 1 08:59:54 sipserver1 cdrtool[4698]: GetBalance > From=87004(a)fastervoip.com.br > Oct 1 08:59:54 sipserver1 cdrtool[4698]: MaxSessionTime > CallId=YzcyMWM3YTgzNDg1MWY2YWFlYzhjMzdhNDYxM2Q3NGU. > From=87004(a)fastervoip.com.br To=sip:01591184701@fastervoip.com.br<sip%3A01591184701@fastervoip.com.br>Duration=10800 Gateway= > 127.0.0.1 Lock=1 > Oct 1 08:59:54 sipserver1 cdrtool[4698]: Notice: maxduration of 0 is less > then minimumDurationCharged (60) > Oct 1 08:59:54 sipserver1 cdrtool[4698]: GetBalance > From=87004(a)fastervoip.com.br > Oct 1 08:59:55 sipserver1 cdrtool[4698]: DebitBalance > CallId=NTcyZjgyYzY5N2QzMDdhNmI4Yzk5MTBkZTUwMzljNmU. > From=87004(a)fastervoip.com.br To=sip:01591184701@fastervoip.com.br<sip%3A01591184701@fastervoip.com.br>Gateway= > 127.0.0.1 Duration=0 > Oct 1 08:59:55 sipserver1 cdrtool[4698]: Error: session > NTcyZjgyYzY5N2QzMDdhNmI4Yzk5MTBkZTUwMzljNmU. of 87004(a)fastervoip.com.brdoes not exist > Oct 1 08:59:56 sipserver1 cdrtool[4698]: MaxSessionTime > CallId=YzcyMWM3YTgzNDg1MWY2YWFlYzhjMzdhNDYxM2Q3NGU. > From=87004(a)fastervoip.com.br To=sip:01591184701@fastervoip.com.br<sip%3A01591184701@fastervoip.com.br>Duration=10800 Gateway= > 127.0.0.1 Lock=1 > Oct 1 08:59:56 sipserver1 cdrtool[4698]: Notice: maxduration of 0 is less > then minimumDurationCharged (60) > Oct 1 08:59:56 sipserver1 cdrtool[4698]: GetBalance > From=87004(a)fastervoip.com.br > And after that returns 407 to the user. > > > > Thanks again. > Diego. > > ----- Original Message ----- > *From:* DanB &lt;danb(a)sms4sip.com&gt; > *To:* Diego Zuaneti Arruda &lt;diego(a)fasternet.com.br&gt; > *Cc:* users(a)lists.kamailio.org > *Sent:* Wednesday, October 01, 2008 4:28 AM > *Subject:* Re: [Kamailio-Users] Send MaxCallDuration and UserCredit for > freeradius-cdrtool > > Diego, > > the connector is just the translator between cdrtool and radius/openser, so > no need of coding anything inside, but use that information inside openser > to make a decision. > A good way to go would be an AVP check inside openser.cfg like: > > check_value_of_ ($avp(s:credit)): (need to be replaced by real condition > you want to match) > $rU = "ann-insufficient_credit"; > > Cheers, > DanB > > > On Tue, Sep 30, 2008 at 10:38 PM, Diego Zuaneti Arruda < > diego(a)fasternet.com.br> >> DanB, >> >> The problem was solved with the new version. >> I don't understand very well the python language. >> It's possible to return SIP-AVP = nocredit#1 when the user have no >> credits? So I can return a message to the user saying he has no credits. >> >> >> >> Thanks again. >> Diego. >> >> ----- Original Message ----- >> *From:* DanB &lt;danb(a)sms4sip.com&gt; >> *To:* Diego Zuaneti Arruda &lt;diego(a)fasternet.com.br&gt; >> *Cc:* users(a)lists.kamailio.org >> *Sent:* Tuesday, September 30, 2008 3:15 PM >> *Subject:* Re: [Kamailio-Users] Send MaxCallDuration and UserCredit for >> freeradius-cdrtool >> >> Hi Diego, >> >> fixed now in pre2. >> >> Cheers, >> DanB >> >> On Tue, Sep 30, 2008 at 5:58 PM, Diego Zuaneti Arruda < >> diego(a)fasternet.com.br>> >>> DanB, >>> >>> I'm testing the freeradius-cdrtool, and found a possible problem. >>> When I turn off the call before answer, the session is not finished. >>> Here's a part of the logs: >>> >>> rlm_python [freeradius-cdrtool]: Entering accounting section >>> rlm_python [freeradius-cdrtool]: Got the following params: >>> (('Acct-Status-Type', 'Failed'), ('Service-Type', 'Sip-Session'), >>> ('Sip-Response-Code', '503'), ('Sip-Method', 'Invite'), ('X-Ascend-Bridge', >>> '0x694de248a0b22d087cf199b7'), ('Sip-From-Tag', >>> '"000d6570880e01462b3c62f9-0908d279"'), ('Acct-Session-Id', '" >>> 000d6570-880e0028-2a382841-1ef5c833@200.187.80.9"'<000d6570-880e0028-2a382841-1ef5c833@200.187.80.9%22%27>), >>> ('User-Name', '"87001@fastervoip.com.br"'<87001@fastervoip.com.br%22%27>), >>> ('Calling-Station-Id', '"sip:87001@fastervoip.com.br<sip%3A87001@fastervoip.com.br>"'), >>> ('Called-Station-Id', '"sip:01591184701@fastervoip.com.br<sip%3A01591184701@fastervoip.com.br>"'), >>> ('Sip-Translated-Request-URI', '"sip:01591184701@200.187.80.17:5060;transport=udp"'), >>> ('Sip-Rpid', '"87001"'), ('Source-IP', '"200.187.80.9"'), >>> ('Source-Port', '"5070"'), ('Acct-Authentic', '49'), ('SIP-Proxy-IP', '" >>> 127.0.0.1"'), ('Canonical-URI', '"sip:01591184701@fastervoip.com.br<sip%3A01591184701@fastervoip.com.br>"'), >>> ('Billing-Party', '"87001@fastervoip.com.br"'<87001@fastervoip.com.br%22%27>), >>> ('Contact', '"<sip:87001@200.187.80.9:5070;transport=udp>"'), >>> ('NAS-Port', '5060'), ('Acct-Delay-Time', '0'), ('NAS-IP-Address', ' >>> 127.0.0.1'), ('Client-IP-Address', '127.0.0.1'), >>> ('Acct-Unique-Session-Id', '"3db548b64d9445ce"')) >>> rlm_python [freeradius-cdrtool]: Extracted atribute <Acct-Status-Type> >>> with value <Failed> >>> rlm_python [freeradius-cdrtool]: Extracted atribute <User-Name> with >>> value &lt;87001(a)fastervoip.com.br&gt; >>> rlm_python [freeradius-cdrtool]: Extracted atribute <Canonical-URI> with >>> value <sip:01591184701@fastervoip.com.br<sip%3A01591184701@fastervoip.com.br> >>> > >>> rlm_python [freeradius-cdrtool]: Extracted atribute <Called-Station-Id> >>> with value <sip:01591184701@fastervoip.com.br<sip%3A01591184701@fastervoip.com.br> >>> > >>> rlm_python [freeradius-cdrtool]: Extracted atribute <Acct-Session-Id> >>> with value &lt;000d6570-880e0028-2a382841-1ef5c833(a)200.187.80.9&gt; >>> *rlm_python:EXCEPT:<type 'exceptions.TypeError'>: end_session() takes >>> exactly 6 arguments (4 given)* >>> modcall[accounting]: module "python" returns ?? for request 261 >>> modcall: leaving group accounting (returns ok) for request 261 >>> Sending Accounting-Response of id 147 to 127.0.0.1 port 41560 >>> Finished request 261 >>> >>> >>> Diego. >>> >>> ----- Original Message ----- >>> *From:* DanB &lt;danb(a)sms4sip.com&gt; >>> *To:* Diego Zuaneti Arruda &lt;diego(a)fasternet.com.br&gt; >>> *Cc:* users(a)lists.kamailio.org >>> *Sent:* Tuesday, September 30, 2008 11:54 AM >>> *Subject:* Re: [Kamailio-Users] Send MaxCallDuration and UserCredit for >>> freeradius-cdrtool >>> >>> "The avps received will be available in openser as: callMaxDur and >>> credit, where callMaxDur is the maximum duration the user is allowed to be >>> connected with the destination and credit represents the amount of credit >>> available at starting of the call. This info can be used later in an bbua >>> able to timeout calls based on duration. >>> " >>> >>> On Tue, Sep 30, 2008 at 4:38 PM, Diego Zuaneti Arruda < >>> diego(a)fasternet.com.br>>> >>>> Thanks DanB, the problem was solved. >>>> How send BYE when expires credit in conversation? >>>> >>>> >>>> Thanks. >>>> Diego. >>>> >>>> ----- Original Message ----- >>>> *From:* DanB &lt;danb(a)sms4sip.com&gt; >>>> *To:* Diego Zuaneti Arruda &lt;diego(a)fasternet.com.br&gt; >>>> *Cc:* users(a)lists.kamailio.org >>>> *Sent:* Tuesday, September 30, 2008 11:19 AM >>>> *Subject:* Re: [Kamailio-Users] Send MaxCallDuration and UserCredit for >>>> freeradius-cdrtool >>>> >>>> Here is an already patched version: >>>> http://frad-cdrtool.sourceforge.net/rlm_digest.c >>>> You should replace your rlm_digest.c with this one and recompile the >>>> server. >>>> >>>> DanB >>>> >>>> On Tue, Sep 30, 2008 at 4:14 PM, Diego Zuaneti Arruda < >>>> diego(a)fasternet.com.br>>>> >>>>> I'm using the freeradius 1.1.7, and not patched the rlm_digest. >>>>> Where to find the patch rlm_digest ? >>>>> >>>>> >>>>> Diego. >>>>> >>>>> ----- Original Message ----- >>>>> *From:* DanB &lt;danb(a)sms4sip.com&gt; >>>>> *To:* Diego Zuaneti Arruda &lt;diego(a)fasternet.com.br&gt; >>>>> *Cc:* users(a)lists.kamailio.org >>>>> *Sent:* Tuesday, September 30, 2008 11:08 AM >>>>> *Subject:* Re: [Kamailio-Users] Send MaxCallDuration and UserCredit >>>>> for freeradius-cdrtool >>>>> >>>>> Diego, >>>>> >>>>> the problem is with your digest module which is sanitizing the >>>>> parameters in authentication phase only, therefore the parameters like >>>>> Username, Digest-URI are not available in the authorization phase (no way >>>>> for the connector to read them). >>>>> Did u patch your rlm_digest as per the README.txt? What version of >>>>> freeradius are u using? >>>>> >>>>> DanB >>>>> >>>>> On Tue, Sep 30, 2008 at 3:56 PM, Diego Zuaneti Arruda < >>>>> diego(a)fasternet.com.br>>>>> >>>>>> DanB, >>>>>> >>>>>> Yes, I changed the kamailio.cfg. >>>>>> I´m sending the full log of radius attached. >>>>>> >>>>>> >>>>>> Diego. >>>>>> >>>>>> ----- Original Message ----- >>>>>> *From:* DanB &lt;danb(a)sms4sip.com&gt; >>>>>> *To:* Diego Zuaneti Arruda &lt;diego(a)fasternet.com.br&gt; >>>>>> *Cc:* users(a)lists.kamailio.org >>>>>> *Sent:* Tuesday, September 30, 2008 10:34 AM >>>>>> *Subject:* Re: [Kamailio-Users] Send MaxCallDuration and UserCredit >>>>>> for freeradius-cdrtool >>>>>> >>>>>> Diego, >>>>>> >>>>>> looks like there was no session started at first place. >>>>>> Did u change the openser.cfg config? You need to add callid into >>>>>> radius_proxy_authorize so that the callid should be used (example in >>>>>> README.txt of the freeradius-cdrtool sources). >>>>>> >>>>>> Also, can u post a full authorize/account_start/account_stop sequence >>>>>> as logged by "radiusd -X". >>>>>> >>>>>> DanB >>>>>> On Tue, Sep 30, 2008 at 3:00 PM, Diego Zuaneti Arruda < >>>>>> diego(a)fasternet.com.br>>>>>> >>>>>>> Hi DanB, >>>>>>> >>>>>>> I updated the CDRTool to version 6.6.8 and freeradius-cdrtool to >>>>>>> version 1.2-pre. >>>>>>> I'm getting this log and not doing the Debit. >>>>>>> >>>>>>> Sep 30 09:57:22 sipserver1 cdrtool[12948]: DebitBalance >>>>>>> CallId=000d6570-880e0035-39c8f267-5c77e9d2(a)192.168.0.1 >>>>>>> From=87001(a)mydomain.com.br To=sip:00551599998888@mydomain.com.br<sip%3A00551599998888@mydomain.com.br>Gateway= >>>>>>> 127.0.0.1 Duration=11 >>>>>>> Sep 30 09:57:22 sipserver1 cdrtool[12948]: ConnectFee=0.00 Span=1 >>>>>>> Duration=60 DestId=55159 domain=mydomain.com.br Profile=551 >>>>>>> Period=weekday Rate=551 Interval=0-24 Cost=0.85/60 Price=0.8500 >>>>>>> Sep 30 09:57:22 sipserver1 cdrtool[12948]: Error: session >>>>>>> 000d6570-880e0035-39c8f267-5c77e9d2(a)192.168.0.1 for >>>>>>> 87001(a)mydomain.com.br does not exist >>>>>>> >>>>>>> >>>>>>> Thanks. >>>>>>> Diego. >>>>>>> >>>>>>> ----- Original Message ----- >>>>>>> *From:* DanB &lt;danb(a)sms4sip.com&gt; >>>>>>> *To:* Diego Zuaneti Arruda &lt;diego(a)fasternet.com.br&gt; >>>>>>> *Cc:* users(a)lists.kamailio.org >>>>>>> *Sent:* Tuesday, September 30, 2008 5:47 AM >>>>>>> *Subject:* Re: [Kamailio-Users] Send MaxCallDuration and UserCredit >>>>>>> for freeradius-cdrtool >>>>>>> >>>>>>> Hi Diego, >>>>>>> >>>>>>> you don't need to set anything in Users file. The connector does that >>>>>>> for you dynamically, based on the responses received from cdrtool. Your >>>>>>> configuration will be static and always limit the user to the same call >>>>>>> duration. For more information, see the README file within >>>>>>> freeradius-cdrtool source directory. >>>>>>> >>>>>>> Cheers, >>>>>>> DanB >>>>>>> >>>>>>> On Mon, Sep 29, 2008 at 10:49 PM, Diego Zuaneti Arruda < >>>>>>> diego(a)fasternet.com.br>>>>>>> >>>>>>>> Hi all, >>>>>>>> >>>>>>>> How I send to freeradius-cdrtool the maxCallDuration and >>>>>>>> UserCredit? >>>>>>>> On the /etc/raddb/users I have: >>>>>>>> >>>>>>>> 87001(a)mydomain.com.br Auth-Type := Digest, User-Password == >>>>>>>> "mypassword" >>>>>>>> Reply-Message = "Authenticated", >>>>>>>> SIP-AVP = "authentic#1", >>>>>>>> SIP-AVP = "callMaxDur:60", >>>>>>>> SIP-AVP = "credit:25" >>>>>>>> >>>>>>>> Is this correct ? >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Thanks. >>>>>>>> Diego. >>>>>>>> >>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> Users mailing list >>>>>>>> Users(a)lists.kamailio.org >>>>>>>> http://lists.kamailio.org/cgi-bin/mailman/listinfo/users >>>>>>>> >>>>>>>> >>>>>>> >>>>>> >>>>> >>>> >>> >> >

Diego, I understand now what u mean. If there is no account balance, the radius does not authorize the call. However, the reason I have written it in this way was that there are software not able to process additional avps received from Radius server, therefore I had to make sure that if there is no balance, there will be no call authorized (any limited proxy will deny the call automatically if radius returns unauthorized). I have a mechanism working without this standard behavior, so will consider introducing it into next releases as optional. Cheers, DanB On Wed, Oct 1, 2008 at 2:14 PM, Diego Zuaneti Arruda &lt;diego(a)fasternet.com.br

Raul, from connector README documentation: "radius_proxy_authorize("", "$ci")" This will instruct radius_proxy_authorize() function to send callid as Sip-Uri-User attribute. Cheers, DanB On Thu, Oct 2, 2008 at 6:06 PM, raul2r2 &lt;raul2r2(a)gmail.com&gt; wrote:

Raul, regarding auth parameter, you can either get it as returned from the rad_auth (inside the avp), or force it yourself. Make sure you have the attribute defined into the dictionary and check once again the configurations. If you need further help, send me the "radiusd -X" output for both of your auth and acct-stop as well as your openser config. Cheers, DanB On Tue, Oct 7, 2008 at 1:14 PM, raul2r2 &lt;raul2r2(a)gmail.com&gt; wrote:

Raul, it looks like there is something wrong with the answer you receive from cdrtool (could be wrong handled by connector too...). Can u post me the cdrtool syslog? There it should be seen the answer received. Cheers, DanB On Tue, Oct 7, 2008 at 7:27 PM, raul2r2 &lt;raul2r2(a)gmail.com&gt; wrote:

Raul, this log shows only half of the call(stop one). Can u show a full trace (start and stop of the call)? Cheers, DanB On Thu, Oct 9, 2008 at 12:40 PM, raul2r2 &lt;raul2r2(a)gmail.com&gt; wrote:

Hi Again... It seems that problem 1 is solved... i only have to change the configuration in clients and servers configs file from freeradius and radius-client to point to my gateway ip-address not to my loopbak interface... But for problem two... any advice?... raul2r2 wrote: -- View this message in context: http://www.nabble.com/Send-MaxCallDuration-and-UserCredit-for-freeradius-cd… Sent from the OpenSER Users Mailing List mailing list archive at Nabble.com.