[OpenSER-Devel] [ openser-Bugs-1974675 ] Set /var/run/openser/openser_radius.seq in radiusclient.conf

[SourceForge.net]

Bugs item #1974675, was opened at 2008-05-27 11:20
Message generated for change (Comment added) made by henningw
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=743020&aid=1974675&group_id=139143

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: modules
Group: ver devel
>Status: Closed
>Resolution: Fixed
Priority: 5
Private: No
Submitted By: Iaki Baz (ibc_sf)
Assigned to: Henning Westerholt (henningw)
Summary: Set /var/run/openser/openser_radius.seq in radiusclient.conf

Initial Comment:
'modules/acc/etc/radiusclient.conf' has:

-----------
# file which holds sequence number for communication with the
# RADIUS server
seqfile         /var/run/radius.seq
-----------

But OpenSer init script (at least Debian's one) creates:
/var/run/openser/openser_radius.seq

So when restarting computer it will be an error if OpenSer doesn't run as "root" since it couldn't create '/var/run/radius.seq'.

Then I propose to change the file in 'modules/acc/etc/radiusclient.conf' and also document in "acc" module about it.

----------------------------------------------------------------------

>Comment By: Henning Westerholt (henningw)
Date: 2008-07-01 10:23

Message:
Logged In: YES 
user_id=337916
Originator: NO

Hi Iaki,

looks good, i've applied your changes. I'll backport this to 1.3 too.
Thanks,

Henning

----------------------------------------------------------------------

Comment By: Iaki Baz (ibc_sf)
Date: 2008-07-01 10:06

Message:
Logged In: YES 
user_id=1844020
Originator: YES

I've added the related info to 'acc_admin.xml' file. The modified part
would be something like this (line ~ 97):

	<para>
		The SQL backend support is compiled in the module. For RADIUS and
		DIAMETER you need to enable it by recompiling the module with properly 
		set defines: uncomment the RAD_ACC or DDIAM_ACC lines in
		modules/acc/Makefile. To compile RADIUS support, 
		you need to have radiusclient-ng (only versions higher or equal 
		to 0.5.0) installed on your system which is available from
		<ulink url='http://developer.berlios.de/projects/radiusclient-ng/'>
		http://developer.berlios.de/projects/radiusclient-ng/</ulink>. 
		The radius client needs to be configured properly. To do so, use the 
		template at etc/radiusclient.conf and make sure
		that module's radius_config parameter points to its location.  
		In particular, accounting secret must match that one configured in 
		server and proper dictionary is used (one is available at 
		etc/sip_dictionary). Also note that Debian radiusclient-ng uses 
		/var/run/radius.seq as seqfile but OpenSER Debian init script expects 
		/var/run/openser/openser_radius.seq, so is needed to change it in 
		radiusclient-ng configuration or in OpenSER Debian init script (if not,
		OpenSER can't create the seq file when not running as root). Uses along

		with FreeRadius (<ulink url='http://www.freeradius.org/'> 
		http://www.freeradius.org/</ulink>) and Radiator 
		(<ulink url='http://www.open.com.au/radiator/'>
		http://www.open.com.au/radiator/</ulink>) servers have been 
		reported to us.
	</para>

Is it ok?

----------------------------------------------------------------------

Comment By: Henning Westerholt (henningw)
Date: 2008-07-01 09:27

Message:
Logged In: YES 
user_id=337916
Originator: NO

Hi Iaki,

i fixed this in the acc example configuration. Do you have an idea about
what should be added to the acc module documentation?

Henning

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=743020&aid=1974675&group_id=139143