Hello;
i am testing to radius modules. i have found this tutorial http://www.kamailio.org/docs/openser-radius-1.0.x.html . it is old but i changed some variables. i configured radiusclient-ng and free radius. But kamailio cann't start because of 0(17813) ERROR: misc_radius [misc_radius.c:208]: mod_init(): misc_radius: can't get code for the SIP-AVP attribute 0(17813) ERROR: <core> [sr_module.c:968]: init_mod(): Error while initializing module misc_radius (/usr/local/lib64/kamailio/modules/misc_radius.so)
i already defined SIP-AVP in dictionary.kamailio.
And when i set radius_config in misc_radius , it try to find in default path (/usr/local/etc/radiusclient-ng). So i linked to path /usr/local/etc/radiusclient-ng to solve this problem. ---- kamailio V 4.2.4 ----
------------------dictionary.kamailio------------ #### Attributes ### ATTRIBUTE Sip-Method 101 integer # Schulzrinne, acc ATTRIBUTE Sip-Response-Code 102 integer # Schulzrinne, acc ATTRIBUTE Sip-Cseq 103 string # Schulzrinne, acc ATTRIBUTE Sip-To-Tag 104 string # Schulzrinne, acc ATTRIBUTE Sip-From-Tag 105 string # Schulzrinne, acc ATTRIBUTE Sip-Translated-Request-URI 107 string # Proprietary, acc ATTRIBUTE Sip-Src-IP 108 string # Proprietary, acc ATTRIBUTE Sip-Src-Port 109 string # Proprietary, acc ATTRIBUTE Digest-Response 206 string # Sterman, auth_radius ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius ATTRIBUTE Sip-Group 211 string # Proprietary, group_radius ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius ATTRIBUTE SIP-AVP 225 string # Proprietary, avp_radius ATTRIBUTE Digest-Realm 1063 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce 1064 string # Sterman, auth_radius ATTRIBUTE Digest-Method 1065 string # Sterman, auth_radius ATTRIBUTE Digest-URI 1066 string # Sterman, auth_radius ATTRIBUTE Digest-QOP 1067 string # Sterman, auth_radius ATTRIBUTE Digest-Algorithm 1068 string # Sterman, auth_radius ATTRIBUTE Digest-Body-Digest 1069 string # Sterman, auth_radius ATTRIBUTE Digest-CNonce 1070 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce-Count 1071 string # Sterman, auth_radius ATTRIBUTE Digest-User-Name 1072 string # Sterman, auth_radius
### Acct-Status-Type Values ### #VALUE Acct-Status-Type Start 1 # RFC2866, acc #VALUE Acct-Status-Type Stop 2 # RFC2866, acc #VALUE Acct-Status-Type Failed 15 # RFC2866, acc
### Service-Type Values ### #VALUE Service-Type Call-Check 10 # RFC2865, uri_radius VALUE Service-Type Group-Check 12 # Proprietary, group_radius ##VALUE Service-Type Sip-Session 15 # Schulzrinne, acc, auth_radius VALUE Service-Type SIP-Caller-AVPs 30 # Proprietary, avp_radius VALUE Service-Type SIP-Callee-AVPs 31 # Proprietary, avp_radius
### Sip-Method Values ### VALUE Sip-Method Undefined 0 VALUE Sip-Method Invite 1 VALUE Sip-Method Cancel 2 VALUE Sip-Method Ack 4 VALUE Sip-Method Bye 8 VALUE Sip-Method Info 16 VALUE Sip-Method Options 32 VALUE Sip-Method Update 64 VALUE Sip-Method Register 128 VALUE Sip-Method Message 256 VALUE Sip-Method Subscribe 512 VALUE Sip-Method Notify 1024 VALUE Sip-Method Prack 2048 VALUE Sip-Method Refer 4096 VALUE Sip-Method Other 8192
---------------------------Kamailio.cfg--------------------------------------------------------
#modparam("acc", "log_flag", FLT_ACC) modparam("acc_radius", "radius_extra", "Sip-Src-IP=$si;Sip-Src-Port=$sp") modparam("acc_radius", "radius_config","/etc/radiusclient-ng/radiusclient.conf") modparam("acc_radius", "radius_flag", FLT_ACC) modparam("acc_radius", "radius_missed_flag", FLT_ACCMISSED) modparam("acc_radius", "service_type", 15)
modparam("misc_radius", "radius_config", "/etc/radiusclient-ng/radiusclient.conf") modparam("misc_radius", "group_service_type", 12) modparam("misc_radius", "uri_service_type", 10) modparam("misc_radius", "caller_extra", "Calling-Station-Id=$fu") modparam("misc_radius", "callee_extra", "SIP-URI-User=$rU;SIP-URI-Host=$rd") modparam("misc_radius", "group_extra", "My-Special=$avp(i:100)") modparam("misc_radius", "uri_extra", "Called-Station-Id=$tu")
------------------------------------------------------------------------------------------------
Thanks
i solved problem. radiusclient-ng looks dictionary under /usr/share/radiusclient-ng/dictionary. so i copied dictionary.kamailio to it. and i reconfigured dictionary.kamailio like below. so problem was solved.
#### Attributes ### ATTRIBUTE Sip-Method 101 integer # Schulzrinne, acc ATTRIBUTE Sip-Response-Code 102 integer # Schulzrinne, acc ATTRIBUTE Sip-Cseq 103 string # Schulzrinne, acc ATTRIBUTE Sip-To-Tag 104 string # Schulzrinne, acc ATTRIBUTE Sip-From-Tag 105 string # Schulzrinne, acc ATTRIBUTE Sip-Translated-Request-URI 107 string # Proprietary, acc ATTRIBUTE Sip-Src-IP 108 string # Proprietary, acc ATTRIBUTE Sip-Src-Port 109 string # Proprietary, acc ATTRIBUTE Digest-Response 206 string # Sterman, auth_radius ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius ATTRIBUTE Sip-Group 211 string # Proprietary, misc_radius ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius ATTRIBUTE SIP-AVP 225 string # Proprietary, misc_radius ATTRIBUTE Digest-Realm 1063 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce 1064 string # Sterman, auth_radius ATTRIBUTE Digest-Method 1065 string # Sterman, auth_radius ATTRIBUTE Digest-URI 1066 string # Sterman, auth_radius ATTRIBUTE Digest-QOP 1067 string # Sterman, auth_radius ATTRIBUTE Digest-Algorithm 1068 string # Sterman, auth_radius ATTRIBUTE Digest-Body-Digest 1069 string # Sterman, auth_radius ATTRIBUTE Digest-CNonce 1070 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce-Count 1071 string # Sterman, auth_radius ATTRIBUTE Digest-User-Name 1072 string # Sterman, auth_radius /*ATTRIBUTE SIP-URI-Host 1073 string #i dont know what the hack ,misc_radius*/
### Acct-Status-Type Values ### VALUE Acct-Status-Type Failed 15 # RFC2866, acc
### Service-Type Values ### VALUE Service-Type Call-Check 10 # RFC2865, uri_radius VALUE Service-Type Group-Check 12 # Proprietary, group_radius VALUE Service-Type Sip-Session 15 # Schulzrinne, acc, auth_radius VALUE Service-Type SIP-Caller-AVPs 30 # Proprietary, avp_radius VALUE Service-Type SIP-Callee-AVPs 31 # Proprietary, avp_radius
### Sip-Method Values ### VALUE Sip-Method Undefined 0 VALUE Sip-Method Invite 1 VALUE Sip-Method Cancel 2 VALUE Sip-Method Ack 4 VALUE Sip-Method Bye 8 VALUE Sip-Method Info 16 VALUE Sip-Method Options 32 VALUE Sip-Method Update 64 VALUE Sip-Method Register 128 VALUE Sip-Method Message 256 VALUE Sip-Method Subscribe 512 VALUE Sip-Method Notify 1024 VALUE Sip-Method Prack 2048 VALUE Sip-Method Refer 4096 VALUE Sip-Method Other 8192
-- View this message in context: http://sip-router.1086192.n5.nabble.com/misc-radius-and-auth-radius-configur... Sent from the Users mailing list archive at Nabble.com.
Hello,
thanks for replying with your solution, it will be helpful for others facing similar issues in the future.
We can add a note about where to place the dictionary in the readme of auth_radius. On the other hand, what changes you had to do to its content? Maybe we can integrate them in the version stored in the repository.
Cheers, Daniel
On 14/05/15 09:32, ycaner wrote:
i solved problem. radiusclient-ng looks dictionary under /usr/share/radiusclient-ng/dictionary. so i copied dictionary.kamailio to it. and i reconfigured dictionary.kamailio like below. so problem was solved.
#### Attributes ### ATTRIBUTE Sip-Method 101 integer # Schulzrinne, acc ATTRIBUTE Sip-Response-Code 102 integer # Schulzrinne, acc ATTRIBUTE Sip-Cseq 103 string # Schulzrinne, acc ATTRIBUTE Sip-To-Tag 104 string # Schulzrinne, acc ATTRIBUTE Sip-From-Tag 105 string # Schulzrinne, acc ATTRIBUTE Sip-Translated-Request-URI 107 string # Proprietary, acc ATTRIBUTE Sip-Src-IP 108 string # Proprietary, acc ATTRIBUTE Sip-Src-Port 109 string # Proprietary, acc ATTRIBUTE Digest-Response 206 string # Sterman, auth_radius ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius ATTRIBUTE Sip-Group 211 string # Proprietary, misc_radius ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius ATTRIBUTE SIP-AVP 225 string # Proprietary, misc_radius ATTRIBUTE Digest-Realm 1063 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce 1064 string # Sterman, auth_radius ATTRIBUTE Digest-Method 1065 string # Sterman, auth_radius ATTRIBUTE Digest-URI 1066 string # Sterman, auth_radius ATTRIBUTE Digest-QOP 1067 string # Sterman, auth_radius ATTRIBUTE Digest-Algorithm 1068 string # Sterman, auth_radius ATTRIBUTE Digest-Body-Digest 1069 string # Sterman, auth_radius ATTRIBUTE Digest-CNonce 1070 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce-Count 1071 string # Sterman, auth_radius ATTRIBUTE Digest-User-Name 1072 string # Sterman, auth_radius /*ATTRIBUTE SIP-URI-Host 1073 string #i dont know what the hack ,misc_radius*/
### Acct-Status-Type Values ### VALUE Acct-Status-Type Failed 15 # RFC2866, acc
### Service-Type Values ### VALUE Service-Type Call-Check 10 # RFC2865, uri_radius VALUE Service-Type Group-Check 12 # Proprietary, group_radius VALUE Service-Type Sip-Session 15 # Schulzrinne, acc, auth_radius VALUE Service-Type SIP-Caller-AVPs 30 # Proprietary, avp_radius VALUE Service-Type SIP-Callee-AVPs 31 # Proprietary, avp_radius
### Sip-Method Values ### VALUE Sip-Method Undefined 0 VALUE Sip-Method Invite 1 VALUE Sip-Method Cancel 2 VALUE Sip-Method Ack 4 VALUE Sip-Method Bye 8 VALUE Sip-Method Info 16 VALUE Sip-Method Options 32 VALUE Sip-Method Update 64 VALUE Sip-Method Register 128 VALUE Sip-Method Message 256 VALUE Sip-Method Subscribe 512 VALUE Sip-Method Notify 1024 VALUE Sip-Method Prack 2048 VALUE Sip-Method Refer 4096 VALUE Sip-Method Other 8192
-- View this message in context: http://sip-router.1086192.n5.nabble.com/misc-radius-and-auth-radius-configur... Sent from the Users mailing list archive at Nabble.com.
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
Hello Daniel; i still working on it because acc radius dont trigger itself so don't send any start and stop actions to freeradius. just send failed transaction , when i invoke "acc_rad_request("Some comment");" function. there is no error or something else. i am not good at Radius so need to learn some stuffs. After complete configuration , i am gonna share my cfg. But firstly , i need to solve this acc_radius problem.
and when i look acc module in doc , there is information radius but when it is setted , i got error. i think it is removed from acc.
For Example; modparam("acc", "radius_config", "/etc/radiusclient/radiusclient.conf")
---ERROR---- parameter <radius_config> of type <1> not found in module <acc> 0(3528) : <core> [cfg.y:3426]: yyerror_at(): parse error in config file /usr/local/etc/kamailio/kamailio.cfg, line 193, column 71: Can't set module parameter -----------
------kamailio.cfg------- #!define FLT_ACC 1 #!define FLT_ACCMISSED 2 #!define FLT_ACCFAILED 3
modparam("acc", "log_flag", FLT_ACC) modparam("acc", "log_missed_flag", FLT_ACCMISSED) modparam("acc", "cdr_enable", 1) modparam("acc", "report_ack", 1) modparam("acc", "report_cancels", 1) modparam("acc", "detect_direction", 0) modparam("acc", "early_media", 0)
modparam("acc", "radius_config", "/etc/radiusclient/radiusclient.conf")
modparam("acc_radius", "radius_extra", "Sip-Src-IP=$si;Sip-Src-Port=$sp") modparam("acc_radius", "radius_config","/etc/radiusclient-ng/radiusclient.conf") modparam("acc_radius", "radius_flag", FLT_ACC) modparam("acc_radius", "radius_missed_flag", FLT_ACCMISSED) modparam("acc_radius", "service_type", 15)
modparam("misc_radius", "radius_config", "/etc/radiusclient-ng/radiusclient.conf") modparam("misc_radius", "group_service_type", 12) modparam("misc_radius", "uri_service_type", 10) modparam("misc_radius", "caller_extra", "Calling-Station-Id=$fu") modparam("misc_radius", "callee_extra", "SIP-URI-User=$rU;SIP-URI-Host=$rd") #modparam("misc_radius", "group_extra", "My-Special=$avp(i:100)") modparam("misc_radius", "uri_extra", "Called-Station-Id=$tu")
route[GW_SWITCHING]{ if(!is_method("INVITE")){ return; } setflag(FLT_ACCMISSED); setflag(FLT_ACCFAILED); setflag(FLT_ACC); # do accounting .... BLA BLA BLA } --------------------------
-- View this message in context: http://sip-router.1086192.n5.nabble.com/misc-radius-and-auth-radius-configur... Sent from the Users mailing list archive at Nabble.com.
Hello,
radius support is disabled by default in acc module. You should use acc_radius module instead. Otherwise, you would need to recompile acc module with extra flags (see modules/acc/Makefile) -- but again, is recommended to use acc_radius module.
Cheers, Daniel
On 14/05/15 11:09, ycaner wrote:
Hello Daniel; i still working on it because acc radius dont trigger itself so don't send any start and stop actions to freeradius. just send failed transaction , when i invoke "acc_rad_request("Some comment");" function. there is no error or something else. i am not good at Radius so need to learn some stuffs. After complete configuration , i am gonna share my cfg. But firstly , i need to solve this acc_radius problem.
and when i look acc module in doc , there is information radius but when it is setted , i got error. i think it is removed from acc.
For Example; modparam("acc", "radius_config", "/etc/radiusclient/radiusclient.conf")
---ERROR---- parameter <radius_config> of type <1> not found in module <acc> 0(3528) : <core> [cfg.y:3426]: yyerror_at(): parse error in config file /usr/local/etc/kamailio/kamailio.cfg, line 193, column 71: Can't set module parameter
------kamailio.cfg------- #!define FLT_ACC 1 #!define FLT_ACCMISSED 2 #!define FLT_ACCFAILED 3
modparam("acc", "log_flag", FLT_ACC) modparam("acc", "log_missed_flag", FLT_ACCMISSED) modparam("acc", "cdr_enable", 1) modparam("acc", "report_ack", 1) modparam("acc", "report_cancels", 1) modparam("acc", "detect_direction", 0) modparam("acc", "early_media", 0)
modparam("acc", "radius_config", "/etc/radiusclient/radiusclient.conf")
modparam("acc_radius", "radius_extra", "Sip-Src-IP=$si;Sip-Src-Port=$sp") modparam("acc_radius", "radius_config","/etc/radiusclient-ng/radiusclient.conf") modparam("acc_radius", "radius_flag", FLT_ACC) modparam("acc_radius", "radius_missed_flag", FLT_ACCMISSED) modparam("acc_radius", "service_type", 15)
modparam("misc_radius", "radius_config", "/etc/radiusclient-ng/radiusclient.conf") modparam("misc_radius", "group_service_type", 12) modparam("misc_radius", "uri_service_type", 10) modparam("misc_radius", "caller_extra", "Calling-Station-Id=$fu") modparam("misc_radius", "callee_extra", "SIP-URI-User=$rU;SIP-URI-Host=$rd") #modparam("misc_radius", "group_extra", "My-Special=$avp(i:100)") modparam("misc_radius", "uri_extra", "Called-Station-Id=$tu")
route[GW_SWITCHING]{ if(!is_method("INVITE")){ return; } setflag(FLT_ACCMISSED); setflag(FLT_ACCFAILED); setflag(FLT_ACC); # do accounting .... BLA BLA BLA }
-- View this message in context: http://sip-router.1086192.n5.nabble.com/misc-radius-and-auth-radius-configur... Sent from the Users mailing list archive at Nabble.com.
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
Hello Daniel; i am still diggin radius. i try to add custom avp to acc_radius extra. i defined custom attributes both side freeradius and client-ng. so it didn't send this extra avp.do you remember that is it possible to send extra AVP with acc_radius?
Btw,I searched radiusclient-ng and see that. it has been merged with freeradius at 2006. radiusclient-ng has been updated last 2007.but freeradius-client has been updated 2015 and so many thing are fixed.as a writer of radius API , could we use freeradius-client with radius API insted of radiusclient-ng?
Thanks.
-- View this message in context: http://sip-router.1086192.n5.nabble.com/misc-radius-and-auth-radius-configur... Sent from the Users mailing list archive at Nabble.com.
Hello,
On 15/05/15 10:42, ycaner wrote:
Hello Daniel; i am still diggin radius. i try to add custom avp to acc_radius extra. i defined custom attributes both side freeradius and client-ng. so it didn't send this extra avp.do you remember that is it possible to send extra AVP with acc_radius?
Btw,I searched radiusclient-ng and see that. it has been merged with freeradius at 2006. radiusclient-ng has been updated last 2007.but freeradius-client has been updated 2015 and so many thing are fixed.as a writer of radius API , could we use freeradius-client with radius API insted of radiusclient-ng?
I haven't write the radius api -- I made a dedicated acc_radius out of acc module, but as for myself, I don't use radius.
It should be possible to send extra AVPs, that worked and many other are using radius. I don't know much about freeradius-client to comment, maybe someone else here.
You can run kamailio with debug=3 in kamailio.cfg and then you should see many log messages that could help to troubleshoot.
Cheers, Daniel
-
Daniel-Constantin Mierla -
Yasin CANER -
ycaner