My first problem is that accounting doesn't work... I have followed the http://www.openser.org/docs/openser-radius-1.0.x.html tutorial, compiling freeradius by hand, adding the radius acc but openser doesn't seem to send accounting request to freeradius... (but auth works very well)

My openser.cfg looklikes:

loadmodule "acc.so" # Accounting Module modparam("acc", "radius_config", "/etc/radiusclient-ng/radiusclient.conf")

Is there something else to add?? Thanks

Dan-Cristian Bogos wrote:

Hi Marc,

I am using the scenario u have specified. What do u mean by "Freeradius doesn't work anymore". Can u post us some logs? A good point to start troubleshooting would be starting FreeRADIUS in debug mode (freeradius -X).

Cheers, DanB

On 7/23/07, Marc LEURENT lftsy@free.fr wrote:

...

Good Morning everybody, I hope you had a pleasant week-end! I'm trying to set up an infrastructure for prepaid calls for my school working with OpenSER + Freeradius + CDRTool OpenSER is working well with FreeRadius, but I have followed the CDRTool installation tutorial and now Freeradius doesn't work anymore... Both OpenSER and freeradius data is stored in an mysql database, but when I was installing CDRTool, I had to modify their database following http://cdrtool.ag-projects.com/doc/INSTALL.txt

Is there someone who succeed in setting up this installation...

Any Help or just any hope to succeed? PS: I'm using OpenSER 1.2.1-1 compiled by hand, Freeradius 1.1.3-3 and cdrtool_5.2.1_all.deb

Marc

---

Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users

I've checked in the radiusclient-ng config file, the acctserver is configured. But when I use 'ngrep port 1813' I can't see anything coming What do you mean by setflag for accounting? Is there something to add in the openser config file?

Thanks, Best Regards

Marc

Dan-Cristian Bogos wrote:

Can u see accounting packets coming in FreeRADIUS (in the case you are running this in debug mode it should be easier for you to troubleshoot)? Did u mark the packets to be accounted by openser (setflag for accounting). U must inform also radiusclient-ng where to send the accounting packets.

Let me know what u got.

DanB

On 7/23/07, Marc LEURENT lftsy@free.fr wrote:

...

My first problem is that accounting doesn't work... I have followed the http://www.openser.org/docs/openser-radius-1.0.x.html tutorial, compiling freeradius by hand, adding the radius acc but openser doesn't seem to send accounting request to freeradius... (but auth works very well)

My openser.cfg looklikes:

loadmodule "acc.so" # Accounting Module modparam("acc", "radius_config", "/etc/radiusclient-ng/radiusclient.conf")

Is there something else to add?? Thanks

Dan-Cristian Bogos wrote:

...

Hi Marc,

I am using the scenario u have specified. What do u mean by "Freeradius doesn't work anymore". Can u post us some logs? A good point to start troubleshooting would be starting FreeRADIUS in debug mode (freeradius -X).

Cheers, DanB

On 7/23/07, Marc LEURENT lftsy@free.fr wrote:

...

Good Morning everybody, I hope you had a pleasant week-end! I'm trying to set up an infrastructure for prepaid calls for my

school

...

...

working with OpenSER + Freeradius + CDRTool OpenSER is working well with FreeRadius, but I have followed the

CDRTool

...

...

installation tutorial and now Freeradius doesn't work anymore... Both OpenSER and freeradius data is stored in an mysql database, but when I was installing CDRTool, I had to modify their database

following

...

...

http://cdrtool.ag-projects.com/doc/INSTALL.txt

Is there someone who succeed in setting up this installation...

Any Help or just any hope to succeed? PS: I'm using OpenSER 1.2.1-1 compiled by hand, Freeradius 1.1.3-3

and

...

...

cdrtool_5.2.1_all.deb

Marc

---

Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users

Good Morning, I've followed the tutorial, debugging it because of the upgrade de 1.2.1, but now freeradius doesn't want to register me... Any idea?

Thanks

modcall[authorize]: module "mschap" returns noop for request 35 modcall[authorize]: module "digest" returns noop for request 35 rlm_realm: Looking up realm "192.168.95.248" for User-Name = "bob@192.168.95.248" rlm_realm: No such realm "192.168.95.248" modcall[authorize]: module "suffix" returns noop for request 35 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 35 radius_xlat: 'bob@192.168.95.248' rlm_sql (sql): sql_set_user escaped user --> 'bob@192.168.95.248' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'bob@192.168.95.248' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'bob@192.168.95.248' ORDER BY id radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'bob@192.168.95.248' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'bob@192.168.95.248' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'bob@192.168.95.248' ORDER BY id' rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'bob@192.168.95.248' ORDER BY id radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'bob@192.168.95.248' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'bob@192.168.95.248' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 35 modcall: leaving group authorize (returns ok) for request 35 auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Login incorrect: [bob@192.168.95.248/<no User-Password attribute>] (from client wifirst port 0) Delaying request 35 for 1 seconds Finished request 35 Going to the next request Waking up in 4 seconds.

Dan-Cristian Bogos a écrit :

Yeah,

u must tell openser which request to account by setting the flag for accounting (eg: INVITE and BYE methods).

I would suggest checking the following docs before going further:

http://www.openser.org/docs/modules/1.2.x/acc.html#AEN295 http://www.openser.org/docs/openser-radius-1.0.x.html

DanB

On 7/23/07, Marc LEURENT lftsy@free.fr wrote:

...

I've checked in the radiusclient-ng config file, the acctserver is configured. But when I use 'ngrep port 1813' I can't see anything coming What do you mean by setflag for accounting? Is there something to add in the openser config file?

Thanks, Best Regards

Marc

Dan-Cristian Bogos wrote:

...

Can u see accounting packets coming in FreeRADIUS (in the case you are running this in debug mode it should be easier for you to troubleshoot)? Did u mark the packets to be accounted by openser (setflag for accounting). U must inform also radiusclient-ng where to send the accounting packets.

Let me know what u got.

DanB

On 7/23/07, Marc LEURENT lftsy@free.fr wrote:

...

My first problem is that accounting doesn't work... I have followed the http://www.openser.org/docs/openser-radius-1.0.x.html tutorial, compiling freeradius by hand, adding the radius acc but openser doesn't seem to send accounting request to freeradius... (but auth works very well)

My openser.cfg looklikes:

loadmodule "acc.so" # Accounting Module modparam("acc", "radius_config", "/etc/radiusclient-ng/radiusclient.conf")

Is there something else to add?? Thanks

Dan-Cristian Bogos wrote:

...

Hi Marc,

I am using the scenario u have specified. What do u mean by "Freeradius doesn't work anymore". Can u post us some logs? A good point to start troubleshooting would be starting FreeRADIUS in debug mode (freeradius -X).

Cheers, DanB

On 7/23/07, Marc LEURENT lftsy@free.fr wrote:

...

Good Morning everybody, I hope you had a pleasant week-end! I'm trying to set up an infrastructure for prepaid calls for my

school

...

...

working with OpenSER + Freeradius + CDRTool OpenSER is working well with FreeRadius, but I have followed the

CDRTool

...

...

installation tutorial and now Freeradius doesn't work anymore... Both OpenSER and freeradius data is stored in an mysql

database, but

...

...

...

...

when I was installing CDRTool, I had to modify their database

following

...

...

http://cdrtool.ag-projects.com/doc/INSTALL.txt

Is there someone who succeed in setting up this installation...

Any Help or just any hope to succeed? PS: I'm using OpenSER 1.2.1-1 compiled by hand, Freeradius 1.1.3-3

and

...

...

cdrtool_5.2.1_all.deb

Marc

---

Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users

I have this in my radchech table

Edit http://sip.wifirst.fr/phpmyadmin/tbl_change.php?db=radius&table=radcheck&token=e6aa5a03fd1e8e7625213e99620f1080&pos=0&session_max_rows=30&disp_direction=horizontal&repeat_cells=100&dontlimitchars=0&primary_key=+%60radcheck%60.%60id%60+%3D+4&sql_query=SELECT+%2A+FROM+%60radcheck%60&goto=sql.php Delete http://sip.wifirst.fr/phpmyadmin/sql.php?db=radius&table=radcheck&token=e6aa5a03fd1e8e7625213e99620f1080&pos=0&session_max_rows=30&disp_direction=horizontal&repeat_cells=100&dontlimitchars=0&sql_query=DELETE+FROM+%60radcheck%60+WHERE+%60radcheck%60.%60id%60+%3D+4+LIMIT+1&zero_rows=The+row+has+been+deleted&goto=sql.php%3Fdb%3Dradius%26table%3Dradcheck%26token%3De6aa5a03fd1e8e7625213e99620f1080%26pos%3D0%26session_max_rows%3D30%26disp_direction%3Dhorizontal%26repeat_cells%3D100%26dontlimitchars%3D0%26sql_query%3DSELECT%2B%252A%2BFROM%2B%2560radcheck%2560%26zero_rows%3DThe%2Brow%2Bhas%2Bbeen%2Bdeleted%26goto%3Dtbl_properties_structure.php 4 bob@192.168.95.248 User-Password == test Edit http://sip.wifirst.fr/phpmyadmin/tbl_change.php?db=radius&table=radcheck&token=e6aa5a03fd1e8e7625213e99620f1080&pos=0&session_max_rows=30&disp_direction=horizontal&repeat_cells=100&dontlimitchars=0&primary_key=+%60radcheck%60.%60id%60+%3D+5&sql_query=SELECT+%2A+FROM+%60radcheck%60&goto=sql.php Delete http://sip.wifirst.fr/phpmyadmin/sql.php?db=radius&table=radcheck&token=e6aa5a03fd1e8e7625213e99620f1080&pos=0&session_max_rows=30&disp_direction=horizontal&repeat_cells=100&dontlimitchars=0&sql_query=DELETE+FROM+%60radcheck%60+WHERE+%60radcheck%60.%60id%60+%3D+5+LIMIT+1&zero_rows=The+row+has+been+deleted&goto=sql.php%3Fdb%3Dradius%26table%3Dradcheck%26token%3De6aa5a03fd1e8e7625213e99620f1080%26pos%3D0%26session_max_rows%3D30%26disp_direction%3Dhorizontal%26repeat_cells%3D100%26dontlimitchars%3D0%26sql_query%3DSELECT%2B%252A%2BFROM%2B%2560radcheck%2560%26zero_rows%3DThe%2Brow%2Bhas%2Bbeen%2Bdeleted%26goto%3Dtbl_properties_structure.php 5 bob@192.168.95.248 Auth-Type := Digest

and I have this with freeradius -X

/rlm_sql (sql): Released sql socket id: 1 modcall[authorize]: module "sql" returns ok for request 13 modcall: leaving group authorize (returns ok) for request 13 rad_check_password: Found Auth-Type Digest auth: type "digest" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 13 ERROR: You set 'Auth-Type = Digest' for a request that did not contain any digest attributes! modcall[authenticate]: module "digest" returns invalid for request 13 modcall: leaving group authenticate (returns invalid) for request 13 auth: Failed to validate the user. Login incorrect: [bob@192.168.95.248/<no User-Password attribute>] (from client wifirst port 0) Delaying request 13 for 1 seconds/

Otherwise, I'm using the radius conf file from http://www.openser.org/docs/openser-radius-1.0.x.html and I have activated the sql module

Dan-Cristian Bogos a écrit :

Hi Marc,

can u post somewhere your freeradius configuration(radius.conf+sql.conf)? Do u have in your radcheck table username "bob@192.168.95.248"? Also you should use the digest module to sanitize your message before sending it to rlm_sql.

I will be out for the rest of the day, so earlier you should expect an aswer from me tomorrow morning.

DanB

On 7/24/07, Marc LEURENT lftsy@free.fr wrote:

...

Good Morning, I've followed the tutorial, debugging it because of the upgrade de 1.2.1, but now freeradius doesn't want to register me... Any idea?

Thanks

modcall[authorize]: module "mschap" returns noop for request 35 modcall[authorize]: module "digest" returns noop for request 35 rlm_realm: Looking up realm "192.168.95.248" for User-Name = "bob@192.168.95.248" rlm_realm: No such realm "192.168.95.248" modcall[authorize]: module "suffix" returns noop for request 35 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 35 radius_xlat: 'bob@192.168.95.248' rlm_sql (sql): sql_set_user escaped user --> 'bob@192.168.95.248' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'bob@192.168.95.248' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'bob@192.168.95.248' ORDER BY id radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op

FROM radgroupcheck,usergroup WHERE usergroup.Username = 'bob@192.168.95.248' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op

FROM radgroupcheck,usergroup WHERE usergroup.Username = 'bob@192.168.95.248' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'bob@192.168.95.248' ORDER BY id' rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'bob@192.168.95.248' ORDER BY id radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op

FROM radgroupreply,usergroup WHERE usergroup.Username = 'bob@192.168.95.248' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op

FROM radgroupreply,usergroup WHERE usergroup.Username = 'bob@192.168.95.248' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 35 modcall: leaving group authorize (returns ok) for request 35 auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Login incorrect: [bob@192.168.95.248/<no User-Password attribute>] (from client wifirst port 0) Delaying request 35 for 1 seconds Finished request 35 Going to the next request Waking up in 4 seconds.

Dan-Cristian Bogos a écrit :

...

Yeah,

u must tell openser which request to account by setting the flag for accounting (eg: INVITE and BYE methods).

I would suggest checking the following docs before going further:

http://www.openser.org/docs/modules/1.2.x/acc.html#AEN295 http://www.openser.org/docs/openser-radius-1.0.x.html

DanB

On 7/23/07, Marc LEURENT lftsy@free.fr wrote:

...

I've checked in the radiusclient-ng config file, the acctserver is configured. But when I use 'ngrep port 1813' I can't see anything coming What do you mean by setflag for accounting? Is there something to add in the openser config file?

Thanks, Best Regards

Marc

Dan-Cristian Bogos wrote:

...

Can u see accounting packets coming in FreeRADIUS (in the case

you are

...

...

...

running this in debug mode it should be easier for you to troubleshoot)? Did u mark the packets to be accounted by openser (setflag for accounting). U must inform also radiusclient-ng

where to

...

...

...

send the accounting packets.

Let me know what u got.

DanB

On 7/23/07, Marc LEURENT lftsy@free.fr wrote:

...

My first problem is that accounting doesn't work... I have followed the http://www.openser.org/docs/openser-radius-1.0.x.html tutorial, compiling freeradius by hand, adding the radius acc but openser doesn't seem to send accounting request to

freeradius...

...

...

...

...

(but auth works very well)

My openser.cfg looklikes:

loadmodule "acc.so" # Accounting Module modparam("acc", "radius_config", "/etc/radiusclient-ng/radiusclient.conf")

Is there something else to add?? Thanks

Dan-Cristian Bogos wrote: > Hi Marc, > > I am using the scenario u have specified. > What do u mean by "Freeradius doesn't work anymore". Can u

post us

...

...

...

...

> some logs? A good point to start troubleshooting would be

starting

...

...

...

...

> FreeRADIUS in debug mode (freeradius -X). > > Cheers, > DanB > > On 7/23/07, Marc LEURENT lftsy@free.fr wrote: >> Good Morning everybody, >> I hope you had a pleasant week-end! >> I'm trying to set up an infrastructure for prepaid calls for my school >> working with OpenSER + Freeradius + CDRTool >> OpenSER is working well with FreeRadius, but I have followed

the

...

...

...

...

CDRTool >> installation tutorial and now Freeradius doesn't work

anymore...

...

...

...

...

>> Both OpenSER and freeradius data is stored in an mysql

database, but

...

...

>> when I was installing CDRTool, I had to modify their database following >> http://cdrtool.ag-projects.com/doc/INSTALL.txt >> >> Is there someone who succeed in setting up this installation... >> >> Any Help or just any hope to succeed? >> PS: I'm using OpenSER 1.2.1-1 compiled by hand, Freeradius

1.1.3-3

...

...

...

...

and >> cdrtool_5.2.1_all.deb >> >> Marc >> >> >> _______________________________________________ >> Users mailing list >> Users@openser.org >> http://openser.org/cgi-bin/mailman/listinfo/users >>