[Serusers] radius logon problems

Floris Roset floris_roset at yahoo.com
Wed Oct 8 18:20:05 CEST 2003


Hello Jan,

Here are the logs and config.

I followed radius howto to configure everything. When
I use radclient to test it, freeradius server works
fine. It seems a problem with SER finding credentials
for the realm. There is no connection between ser and
freeradius.

I am running ser and freeradius on the same machine. I
have compiled ser with the last version of sterman.c
as I saw some email saying to do that.  

thanks a lot,

=========================
LOG FREERADIUS

Module: Instantiated radutmp (radutmp)
Listening on IP address 10.0.0.32, ports 1812/udp and
1813/udp, with proxy on 18
14/udp.
Ready to process requests.


=========================
ngrep 

U 10.0.0.32:5060 -> 10.0.0.33:5060
  SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
10.0.0.33..CSeq: 2017 REGISTER..To: "Floris"
<sip:test at pildo.com>;tag=2f8a75b
  015520947f50ab939181a7caf.46af..From: "Floris"
<sip:test at pildo.com>..Call-ID:
789921619 at 10.0.0.33..WWW-Authenticate: Dig
  est realm="pildo.com",
nonce="3f8484d3c58cba0a3540edd7c338d99284aa37ab"..Server:
Sip EXpress router (0.8.11 (i386/linux)
  )..Content-Length: 0..Warning: 392 10.0.0.32:5060
"Noisy feedback tells:  pid=2315 req_src_ip=10.0.0.33
req_src_port=328
  01 in_uri=sip:pildo.com out_uri=sip:pildo.com
via_cnt==1"....
#
U 10.0.0.33:32801 -> 10.0.0.32:5060
  REGISTER sip:pildo.com SIP/2.0..Via: SIP/2.0/UDP
10.0.0.33..CSeq: 2018 REGISTER..To: "Floris"
<sip:test at pildo.com>..Auth
  orization: Digest username="test",
realm="pildo.com",
nonce="3f8484d3c58cba0a3540edd7c338d99284aa37ab",
uri="sip:10.0.0.
  32", cnonce="abcdefghi", nc=00000001,
response="89fc4a2cfb0076a1a385104ae299f1f2",
opaque=""..Expires: 900..From: "Flori
  s" <sip:test at pildo.com>..Call-ID:
789921619 at 10.0.0.33..Content-Length: 0..User-Agent:
KPhone/3.12..Event: registration..
  Allow-Events: presence..Contact: "root"
<sip:root at 10.0.0.33;transport=udp>;q=0.0;methods="INVITE,
MESSAGE, INFO, SUBSCRI
  BE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"....
#
U 10.0.0.32:5060 -> 10.0.0.33:5060
  SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
10.0.0.33..CSeq: 2018 REGISTER..To: "Floris"
<sip:test at pildo.com>;tag=2f8a75b
  015520947f50ab939181a7caf.46af..From: "Floris"
<sip:test at pildo.com>..Call-ID:
789921619 at 10.0.0.33..WWW-Authenticate: Dig
  est realm="pildo.com",
nonce="3f8484d7858c9c70569404a8a5a087ab8501e663"..Server:
Sip EXpress router (0.8.11 (i386/linux)
  )..Content-Length: 0..Warning: 392 10.0.0.32:5060
"Noisy feedback tells:  pid=2315 req_src_ip=10.0.0.33
req_src_port=328
  01 in_uri=sip:pildo.com out_uri=sip:pildo.com
via_cnt==1"....

===============================

 --- Jan Janak <jan at iptel.org> wrote: > Hello,
> 
> check out radius howto --
> http://iptel.org/ser/ser_radius.html
> 
> If that doesn't help to fix your problems then
> please send us complete
> description, possibly including message dumps and
> your config file.
>   
>   Jan.
> 
> On 08-10 15:19, Floris Roset wrote:
> > Hi,
> >  
> > I wonder if there has been an answer to the email
> below. I do have the same problem.
> >  
> > thanks
> > _______________________________________________
> >  
> > Radius logon problems
> >  
> > Jiri Kuthan jiri at iptel.org 
> > Sat Sep 6 11:40:03 CEST 2003 
> > 
> > 
> >    Previous message: [Serusers] Radius logon
> problems 
> >    Next message: [Serusers] sip_msg_cloner 
> >    Messages sorted by: [ date ] [ thread ] [
> subject ] [ author ] 
> > 
> > ---------------------------------
> > 
> > Joseph, can you send us perhaps the SIP messages
> (ngrepped, etc.)?It is hard to guess what happens
> otherwise.-jiriAt 08:33 AM 9/6/2003, Jan Janak
> wrote:>Hello,>>On 06-09 00:25, Jiri Kuthan wrote:>> 
> From these logs:>> >> 10(28016) pre_auth():
> Credentials with given realm not found>> 10(28016)
> REGISTER: challenging user>> 10(28016)
> build_auth_hf(): 'WWW-Authenticate: Digest
> realm="ford.com",
> nonce="3f578eaee00b29a57d6fb234024d112ecf485627">> 
> "Credentials with given realm not found" means that
> the server received>  a SIP message that contained
> no credentials with given realm (ford.com>  in this
> case). >  >> I infer that the radius database
> includes no user identified by>> the username in
> question and domain "ford.com".>>  No, it didn't
> make any request to the radius server in this case> 
> because it was unable to find proper credentials in
> the SIP message.>>  
>
Jan.>>_______________________________________________>Serusers
> mailing list>Serusers at
> > 
>
iptel.org>http://lists.iptel.org/mailman/listinfo/serusers--Jiri
> Kuthan            http://iptel.org/~jiri/ 
> > 
> > 
> > 
> > 
> > ---------------------------------
> > Want to chat instantly with your online
> friends? Get the FREE Yahoo!Messenger
> > _______________________________________________
> > Serusers mailing list
> > serusers at lists.iptel.org
> > http://lists.iptel.org/mailman/listinfo/serusers
>  

________________________________________________________________________
Want to chat instantly with your online friends?  Get the FREE Yahoo!
Messenger http://mail.messenger.yahoo.co.uk
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: log-kphone.txt
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20031008/921f77c6/attachment.txt>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: log-ser.txt
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20031008/921f77c6/attachment-0001.txt>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ser-radius.cfg
Type: application/octet-stream
Size: 3882 bytes
Desc: ser-radius.cfg
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20031008/921f77c6/attachment.obj>


More information about the sr-users mailing list