[OpenSER-Devel] [ openser-Bugs-1974675 ] Set /var/run/openser/openser_radius.seq in radiusclient.conf

SourceForge.net noreply at sourceforge.net
Tue Jul 1 12:06:20 CEST 2008

Bugs item #1974675, was opened at 2008-05-27 13:20
Message generated for change (Comment added) made by ibc_sf
You can respond by visiting: 

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: modules
Group: ver devel
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Iaki Baz (ibc_sf)
Assigned to: Henning Westerholt (henningw)
Summary: Set /var/run/openser/openser_radius.seq in radiusclient.conf

Initial Comment:
'modules/acc/etc/radiusclient.conf' has:

# file which holds sequence number for communication with the
# RADIUS server
seqfile         /var/run/radius.seq

But OpenSer init script (at least Debian's one) creates:

So when restarting computer it will be an error if OpenSer doesn't run as "root" since it couldn't create '/var/run/radius.seq'.

Then I propose to change the file in 'modules/acc/etc/radiusclient.conf' and also document in "acc" module about it.


>Comment By: Iaki Baz (ibc_sf)
Date: 2008-07-01 12:06

Logged In: YES 
Originator: YES

I've added the related info to 'acc_admin.xml' file. The modified part
would be something like this (line ~ 97):

		The SQL backend support is compiled in the module. For RADIUS and
		DIAMETER you need to enable it by recompiling the module with properly 
		set defines: uncomment the RAD_ACC or DDIAM_ACC lines in
		modules/acc/Makefile. To compile RADIUS support, 
		you need to have radiusclient-ng (only versions higher or equal 
		to 0.5.0) installed on your system which is available from
		<ulink url='http://developer.berlios.de/projects/radiusclient-ng/'>
		The radius client needs to be configured properly. To do so, use the 
		template at etc/radiusclient.conf and make sure
		that module's radius_config parameter points to its location.  
		In particular, accounting secret must match that one configured in 
		server and proper dictionary is used (one is available at 
		etc/sip_dictionary). Also note that Debian radiusclient-ng uses 
		/var/run/radius.seq as seqfile but OpenSER Debian init script expects 
		/var/run/openser/openser_radius.seq, so is needed to change it in 
		radiusclient-ng configuration or in OpenSER Debian init script (if not,
		OpenSER can't create the seq file when not running as root). Uses along

		with FreeRadius (<ulink url='http://www.freeradius.org/'> 
		http://www.freeradius.org/</ulink>) and Radiator 
		(<ulink url='http://www.open.com.au/radiator/'>
		http://www.open.com.au/radiator/</ulink>) servers have been 
		reported to us.

Is it ok?


Comment By: Henning Westerholt (henningw)
Date: 2008-07-01 11:27

Logged In: YES 
Originator: NO

Hi Iaki,

i fixed this in the acc example configuration. Do you have an idea about
what should be added to the acc module documentation?



You can respond by visiting: 

More information about the Devel mailing list