HI Kamran you have to include these lines in "setting module-specific parameters":

modparam("auth_radius","radius_config","/usr/local/etc/radiusclient/radiusclient.conf") modparam("auth_radius", "service_type", 15)

rafael

On Wed, 23 Mar 2005 05:54:34 -0800 (PST), Kamran Ahmad p_kami@yahoo.com wrote:

hi

can any tell me what is the problem in my configuration i want to use radius with SER

when i am trying to send request sipsak -U -n -s sip:3000@mydomain -v

it is replying with 401 unauthorized and after that sipsak is saying error: authorization failed request already contains (Proxy-) Authorization, but received 40[1|7], see above

and when i am trying to register with SJPhone it is not registering

radius is working but SER is not requesting radius for authorization

radclient -f digest localhost auth testing123 Received response ID 36, code 3, length = 35 Reply-Message = "Authenticated"

here is user file from radius

#/usr/local/etc/raddb/user 3000 Auth-Type := Digest, User-Password == "1234" Reply-Message = "Authenticated", Sip-Rpid = "1234"

#ser.cfg #------------ # # $Id: ser.cfg,v 1.21.4.1 2003/11/10 15:35:15 andrei Exp $ # # simple quick-start config script #

# ----------- global configuration parameters

#debug=3 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E)

#memlog=3 #sip_warning=yes #server_signature=yes #mhomed=0

#uid="kamran"

#gid="kamran"

/* Uncomment these lines to enter debugging mode debug=7 fork=no log_stderror=yes */

check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) port=5060 #children=4 fifo="/tmp/ser_fifo"

# ------------------ module loading

# Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so"

loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so"

loadmodule "/usr/local/lib/ser/modules/auth_radius.so"

# Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" #loadmodule "/usr/local/lib/ser/modules/auth_db.so"

# ----------------- setting module-specific parameters

# -- usrloc params --

#modparam("usrloc", "db_mode", 0)

# Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2)

# -- auth params -- # Uncomment if you are using auth module # #modparam("auth_db", "calculate_ha1", yes) #modparam("auth_radius", "calculate_ha1", yes)

# # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # #modparam("auth_db", "password_column", "password") #modparam("auth_radius", "password_column", "password")

# -- rr params -- # add value to ;lr param to make some broken UAs happy #modparam("rr", "enable_full_lr", 1)

# ------------------------- request routing logic

# main routing logic

route {

   # initial sanity checks -- messages with
   # max_forwards==0, or excessively long requests

   log(1,"inside route");

   if (!mf_process_maxfwd_header("10")) {
           sl_send_reply("483","Too Many Hops");
           break;
   };

   if ( msg:len > max_len ) {
           sl_send_reply("513", "Message too big");
           break;
   };

   # we record-route all messages -- to make sure that
   # subsequent messages will go through our proxy;

that's # particularly good if upstream and downstream entities # use different transport protocol

   log(1,"calling record_route");

   record_route();

   # loose-route processing

   if (loose_route()) {
           t_relay();
           break;
   };

   # if the request is for other domain use UsrLoc
   # (in case, it does not work, use the following

command # with proper names and addresses in it)

   log(1,"checking register:uri=");
   #log(1,uri);
   #log(1,myself);

   #if (uri==myself) {

           log(1,"checking Register Message received");
           if (method=="REGISTER") {

# Uncomment this if you want to use digest authentication # if (!www_authorize("mydomain.com", "subscriber")) { # www_challenge("mydomain.com", "0"); # break; # };

                   log(1,"Register Message received");

                   if (!radius_www_authorize("MYDOMAIN")) {
                           www_challenge("MYDOMAIN", "0");
                           break;
                   }

                   save("location");
                   break;
           };

           # native SIP destinations are handled using our

USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; #}; # forward to current uri now; use stateful forwarding; that # works reliably even if we forward from TCP to UDP

# if requests URI is numerical and starts with # zero, forward statelessly to a static destination

   if (!t_relay()) {
           sl_reply_error();
   };

}

---

Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/

---

Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers