[Users] Freeradius dictionary additions..

List overview All Threads
Download

newer

older

[Users] Proxy to Proxy...

[Serusers] DNS SRV Query's

nick

25 Aug 2006 25 Aug '06

2:33 p.m.

When I add my dictionary.openser to Freradius v 1.0.1-3 on Centos 4.3, and after following all the steps outlined on the webpage:

http://www.openser.org/docs/openser-radius-1.0.x.html

When I get to testing the configuration, radiusd -X

i get this:

read_config_files: reading dictionary Errors reading dictionary: dict_init: No ATTRIBUTE "Sip-Method" defined for VALUE "Other" Errors reading radiusd.conf

Unfortunately freeradius.org is now a parked domain (seems like a rather large oversight on their part...) so I can't ask them..

Has anyone here ever seen an issue like this?

BTW, I'm using openser 1.1.0-notls compiled from source. Not that seems to apply here though.

Show replies by date

Alberto Pacifico

25 Aug 25 Aug

2:45 p.m.

Hi,

I had a problem like this... I followed the same steps, but in the step 6.3 (include the dictionary.openser) didn't work...Ihad to copy the contents of dictionary.openser into /usr/local/radiusclient-ng...

An other thing, the content of dictionary.openser was copied from the steps on the webpage...

Good luck!

Alberto --- nick nick@mobilia.it wrote:

...

When I add my dictionary.openser to Freradius v 1.0.1-3 on Centos 4.3, and after following all the steps outlined on the webpage:

http://www.openser.org/docs/openser-radius-1.0.x.html

...

When I get to testing the configuration, radiusd -X

i get this:

read_config_files: reading dictionary Errors reading dictionary: dict_init: No ATTRIBUTE "Sip-Method" defined for VALUE "Other" Errors reading radiusd.conf

Unfortunately freeradius.org is now a parked domain (seems like a rather large oversight on their part...) so I can't ask them..

Has anyone here ever seen an issue like this?

BTW, I'm using openser 1.1.0-notls compiled from source. Not that seems to apply here though.

Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users

__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

nick

3:06 p.m.

Alberto Pacifico wrote:

...

Hi,

I had a problem like this... I followed the same steps, but in the step 6.3 (include the dictionary.openser) didn't work...Ihad to copy the contents of dictionary.openser into /usr/local/radiusclient-ng...

An other thing, the content of dictionary.openser was copied from the steps on the webpage...

Good luck!

Alberto

I saw you had asked the same thing, but I couldn't find out what you did to set it right in the end..

I have a feeling that some of the VALUE's might be important late on, it would be nice to figure out they don't work in this combination.

In fact, now that you had me look at the two files, the problem isn't in the VALUE section but the ATTRIBUTE section:

all of these attributes are absent in the 1.1.0 /usr/local/etc/openser/dictionary.radius file:

ATTRIBUTE Sip-Method 101 integer # Schulzrinne, acc ATTRIBUTE Sip-Response-Code 102 integer # Schulzrinne, acc ATTRIBUTE Sip-Cseq 103 string # Schulzrinne, acc ATTRIBUTE Sip-To-Tag 104 string # Schulzrinne, acc ATTRIBUTE Sip-From-Tag 105 string # Schulzrinne, acc ATTRIBUTE Sip-Translated-Request-URI 107 string # Proprietary, acc ATTRIBUTE Sip-Src-IP 108 string # Proprietary, acc ATTRIBUTE Sip-Src-Port 109 string # Proprietary, acc ATTRIBUTE Digest-Response 206 string # Sterman, auth_radius ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius ATTRIBUTE Sip-Group 211 string # Proprietary, group_radius ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius ATTRIBUTE SIP-AVP 225 string # Proprietary, avp_radius ATTRIBUTE Digest-Realm 1063 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce 1064 string # Sterman, auth_radius ATTRIBUTE Digest-Method 1065 string # Sterman, auth_radius ATTRIBUTE Digest-URI 1066 string # Sterman, auth_radius ATTRIBUTE Digest-QOP 1067 string # Sterman, auth_radius ATTRIBUTE Digest-Algorithm 1068 string # Sterman, auth_radius ATTRIBUTE Digest-Body-Digest 1069 string # Sterman, auth_radius ATTRIBUTE Digest-CNonce 1070 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce-Count 1071 string # Sterman, auth_radius ATTRIBUTE Digest-User-Name 1072 string # Sterman, auth_radius

Now, strangely enough, it works!!!

Is this a bug???

Why is the dictionary.radius file missing some many ATTRIBUTEs?

Alberto Pacifico

6:15 p.m.

I've put this attribute into dictionary.openser: ATTRIBUTE Digest-User-Password 1073 string

And to solve the problem of radiusclient library I've used the solution 10.1 of webpage's steps...including /usr/local/lib into /etc/ld.so.conf...

Alberto

--- nick nick@mobilia.it wrote:

...

Alberto Pacifico wrote:

...
Hi,

I had a problem like this... I followed the same steps, but in the step 6.3 (include the dictionary.openser) didn't

work...Ihad

...
to copy the contents of dictionary.openser into /usr/local/radiusclient-ng...

An other thing, the content of dictionary.openser

was

...
copied from the steps on the webpage...

Good luck!

Alberto

I saw you had asked the same thing, but I couldn't find out what you did to set it right in the end..

I have a feeling that some of the VALUE's might be important late on, it would be nice to figure out they don't work in this combination.

In fact, now that you had me look at the two files, the problem isn't in the VALUE section but the ATTRIBUTE section:

all of these attributes are absent in the 1.1.0 /usr/local/etc/openser/dictionary.radius file:

ATTRIBUTE Sip-Method 101 integer # Schulzrinne, acc ATTRIBUTE Sip-Response-Code 102 integer # Schulzrinne, acc ATTRIBUTE Sip-Cseq 103 string # Schulzrinne, acc ATTRIBUTE Sip-To-Tag 104 string # Schulzrinne, acc ATTRIBUTE Sip-From-Tag 105 string # Schulzrinne, acc ATTRIBUTE Sip-Translated-Request-URI 107 string # Proprietary, acc ATTRIBUTE Sip-Src-IP 108 string # Proprietary, acc ATTRIBUTE Sip-Src-Port 109 string # Proprietary, acc ATTRIBUTE Digest-Response 206 string # Sterman, auth_radius ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius ATTRIBUTE Sip-Group 211 string # Proprietary, group_radius ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius ATTRIBUTE SIP-AVP 225 string # Proprietary, avp_radius ATTRIBUTE Digest-Realm 1063 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce 1064 string # Sterman, auth_radius ATTRIBUTE Digest-Method 1065 string # Sterman, auth_radius ATTRIBUTE Digest-URI 1066 string # Sterman, auth_radius ATTRIBUTE Digest-QOP 1067 string # Sterman, auth_radius ATTRIBUTE Digest-Algorithm 1068 string # Sterman, auth_radius ATTRIBUTE Digest-Body-Digest 1069 string # Sterman, auth_radius ATTRIBUTE Digest-CNonce 1070 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce-Count 1071 string # Sterman, auth_radius ATTRIBUTE Digest-User-Name 1072 string # Sterman, auth_radius

Now, strangely enough, it works!!!

Is this a bug???

Why is the dictionary.radius file missing some many ATTRIBUTEs?

__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

Victor

3:53 p.m.

New subject: [Users] TURN - MediaProxy

Hi all,

I'm currently investigating about TURN as the starting phase of a possible subject for a special assignment for the university. I found it very interesting the AG Projects' Media Proxy implementarion of TURN. But I must confess, I don't know very much about it yet.

In a few words: I'm studying the factibility of making RTP stream peer to peer, and not through the Media Proxy, at least, not all the time.

Please, if somebody can give me hand, contact me.

Thanks in advance,

Victor

Franz Edler

27 Aug 27 Aug

6:22 a.m.

New subject: AW: [Users] TURN - MediaProxy

Hi Victor,

...

I'm currently investigating about TURN as the starting phase of a
possible subject for a special assignment for the university. I found it very interesting the AG Projects' Media Proxy implementarion of TURN. But I must confess, I don't know very much about it yet.

As a good starting point I recommend reading of "draft-ietf-behave-nat-udp".

Franz

Bogdan-Andrei Iancu

1 Sep 1 Sep

11:12 a.m.

Hi Nick,

this attribute and its values are defined in the default radius dictionary provided by the libradiusclient library.

regards, bogdan

nick wrote:

...

When I add my dictionary.openser to Freradius v 1.0.1-3 on Centos 4.3, and after following all the steps outlined on the webpage:

http://www.openser.org/docs/openser-radius-1.0.x.html

When I get to testing the configuration, radiusd -X

i get this:

read_config_files: reading dictionary Errors reading dictionary: dict_init: No ATTRIBUTE "Sip-Method" defined for VALUE "Other" Errors reading radiusd.conf

Unfortunately freeradius.org is now a parked domain (seems like a rather large oversight on their part...) so I can't ask them..

Has anyone here ever seen an issue like this?

BTW, I'm using openser 1.1.0-notls compiled from source. Not that seems to apply here though.

Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users

nick

1:04 p.m.

Bogdan-Andrei Iancu wrote:

...

Hi Nick,

this attribute and its values are defined in the default radius dictionary provided by the libradiusclient library.

regards, bogdan

nick wrote:

...
When I add my dictionary.openser to Freradius v 1.0.1-3 on Centos 4.3, and after following all the steps outlined on the webpage:

http://www.openser.org/docs/openser-radius-1.0.x.html

When I get to testing the configuration, radiusd -X

i get this:

read_config_files: reading dictionary Errors reading dictionary: dict_init: No ATTRIBUTE "Sip-Method" defined for VALUE "Other" Errors reading radiusd.conf

Unfortunately freeradius.org is now a parked domain (seems like a rather large oversight on their part...) so I can't ask them..

Has anyone here ever seen an issue like this?

BTW, I'm using openser 1.1.0-notls compiled from source. Not that seems to apply here though.

Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users

The problem is, when you're doing the testing, you're not actually using the libradiusclient-ng libraries.. youre using radiusclient (from the freeradius package) and radiusd only..

so the methods remain undefined.

Bogdan-Andrei Iancu

5 Sep 5 Sep

9:27 a.m.

as probably you are using libradiusclient-ng libraries on the RADIUS client side (required by openser), you need to copy the sip dictionary to the RADIUS server also.

regards, bogdan

nick wrote:

...

Bogdan-Andrei Iancu wrote:

...
Hi Nick,

this attribute and its values are defined in the default radius dictionary provided by the libradiusclient library.

regards, bogdan

The problem is, when you're doing the testing, you're not actually using the libradiusclient-ng libraries.. youre using radiusclient (from the freeradius package) and radiusd only..

so the methods remain undefined.

nick

10:05 a.m.

Bogdan-Andrei Iancu wrote:

...

as probably you are using libradiusclient-ng libraries on the RADIUS client side (required by openser), you need to copy the sip dictionary to the RADIUS server also.

regards, bogdan

nick wrote:

...
Bogdan-Andrei Iancu wrote:

...
Hi Nick,

this attribute and its values are defined in the default radius dictionary provided by the libradiusclient library.

regards, bogdan

The problem is, when you're doing the testing, you're not actually using the libradiusclient-ng libraries.. youre using radiusclient (from the freeradius package) and radiusd only..

so the methods remain undefined.

I copied the dictionary.radius from the openser install, but for use by itself (without the attributes defined by radiusclient-ng) it won't work...

When it's in production, the radiusclient-ng library is also included, so the attributes are properly defined. The problem is during testing, unless you use the dictionary on the How To page, you'll be missing attributes.

these are the attributes defined in the example on the page:

These are the attributes defined in the dictionary.radius

ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius ATTRIBUTE Sip-Group 211 string # Proprietary, group_radius ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius ATTRIBUTE SIP-AVP 225 string # Proprietary, avp_radius

As I said, this is not a problem during production, but it is a problem during testing, as the radiusclient-ng dictionary is not included...

Cseke Tamas

11:41 a.m.

New subject: [Users] openser radius accounting

Hi,

I have problem with radius accounting. I'm using openser1.0.1 and bsdradius 0.6.0

I'd like to send Accounting-Start packet on INVITE and ACK messages, And i would like to differentiate it. I'd like to use Sip-Method radius attribute for this, but it doesn't work

I've added the following lines to the dictionary of radiusclient-ng ### Sip-Method Values ###

VALUE Sip-Method INVITE 1 # Proprietary, acc VALUE Sip-Method CANCEL 2 # Proprietary, acc VALUE Sip-Method ACK 4 # Proprietary, acc VALUE Sip-Method BYE 8 # Proprietary, acc

in openser.cfg the lines in question are:

modparam("acc", "radius_extra", "Sip-Method-Str=$avp(s:method)") route { #....

# set Sip-Method for accounting if (is_method("INVITE")) { avp_printf("s:method", "1"); } else if (is_method("ACK")) { avp_printf("s:method", "4"); } else if (is_method("BYE")) { avp_printf("s:method", "8"); };

#.... }

But i've a more serious problem:

In radius i receive accounting packets for INVITE and ACK in the same time. I'd like to use INVITE for set setuptime, and ACK to set conncettime of a call. But in this way the setuptime is incorrect..

INVITE: [2006-09-05 13:41:37] --AcctPacket-------------------------------------------------- 'NAS-IP-Address': '127.0.0.1' 'User-Name': '222@callshop' 'Acct-Status-Type': 'Start' 'Error-Cause': 1L 'Acct-Delay-Time': 0L 'Called-Station-Id': 'sip:22@192.168.1.8' 'Client-IP-Address': '127.0.0.1' 'Acct-Session-Id': '6PvDX6sDfK3ndBxl@192.168.1.129' 'Sip-Translated-Request-URI': 'sip:222@192.168.1.10' 'Service-Type': 'IAPP-Register' 'Sip-Cseq': '2' 'Sip-From-Tag': 'fTgBvqElrM7eckW6' 'Sip-Src-Port': '5061' 'Sip-To-Tag': 'as797c64fb' 'Sip-Response-Code': 200L 'Sip-Src-IP': '192.168.1.129' 'Calling-Station-Id': 'sip:222@192.168.1.8' 'NAS-Port': 5060L

ACK [2006-09-05 13:41:37] --AcctPacket-------------------------------------------------- 'NAS-IP-Address': '127.0.0.1' 'User-Name': '222@192.168.1.8' 'Acct-Status-Type': 'Start' 'Error-Cause': 4L 'Acct-Delay-Time': 0L 'Called-Station-Id': 'sip:22@192.168.1.8' 'Client-IP-Address': '127.0.0.1' 'Acct-Session-Id': '6PvDX6sDfK3ndBxl@192.168.1.129' 'Sip-Translated-Request-URI': 'sip:222@192.168.1.10' 'Service-Type': 'IAPP-Register' 'Sip-Cseq': '2' 'Sip-From-Tag': 'fTgBvqElrM7eckW6' 'Sip-Src-Port': '5061' 'Sip-To-Tag': 'as797c64fb' 'Sip-Response-Code': 200L 'Sip-Src-IP': '192.168.1.129' 'Calling-Station-Id': 'sip:222@192.168.1.8' 'NAS-Port': 5060L

When are INVITE messages sent to radius? When openser got an INVITE message? I think should be... Or when the session is establised?

Thanks any help, Tamas

6749

Age (days ago)

6760

Last active (days ago)

sr-users@lists.kamailio.org

10 comments

6 participants

tags (0)

participants (6)

Alberto Pacifico
Bogdan-Andrei Iancu
Cseke Tamas
Franz Edler
nick
Victor