[Serusers] Radius accounting

Jan Janak jan at iptel.org
Fri Oct 10 22:29:41 CEST 2003


Did you compile acc with radius support (it is not compiled by default)
and mark transactions that should be accounted with a flag in your
script ?

  Jan.

On 10-10 05:23, Xten India wrote:
> Hai,
> UA's(Kphone and XLite) Authenticated with radius(file users and sql users)
> (when we open the kphone ser sends the authentication request to radius.  radius 
> accepts the request and send back the response to ser whether it is authenticated 
> User Agent.)
> we get the following message in radius screen
> -----------------------------------------------------
> rad_recv: Access-Request packet from host 192.168.100.101:1028, id=9, 
> length=242        User-Name = "neels at localdomain.com"
>         Digest-Attributes = 0x0a076e65656c73
>         Digest-Attributes = 0x01116c6f63616c646f6d61696e2e636f6d
>         Digest-Attributes = 
> 0x022a33663834663638613132613335346339333961656132336366643662323937323636373562353061
>         Digest-Attributes = 0x04157369703a3139322e3136382e3130302e313031
>         Digest-Attributes = 0x030a5245474953544552
>         Digest-Attributes = 0x050661757468
>         Digest-Attributes = 0x090a3030303030303031
>         Digest-Attributes = 0x080b616263646566676869
>         Digest-Response = "dc13b2beeb1a0f47bc5cc4cb10b90baa"
>         Service-Type = IAPP-AP-Check
>         X-Ascend-PW-Lifetime = 0x6e65656c73
>         NAS-IP-Address = 192.168.100.101
>         NAS-Port = 5060
> modcall: entering group authorize
>   hints: Matched DEFAULT at 52
>   modcall[authorize]: module "preprocess" returns ok
>   modcall[authorize]: module "chap" returns noop
>     rlm_digest: Converting Digest-Attributes to something sane...
>         Digest-User-Name = "neels"
>         Digest-Realm = "localdomain.com"
>         Digest-Nonce = "3f84f68a12a354c939aea23cfd6b29726675b50a"
>         Digest-URI = "sip:192.168.100.101"
>         Digest-Method = "REGISTER"
>         Digest-QOP = "auth"
>         Digest-Nonce-Count = "00000001"
>         Digest-CNonce = "abcdefghi"
> rlm_digest: Adding Auth-Type = DIGEST
>   modcall[authorize]: module "digest" returns ok
>     rlm_realm: No '@' in User-Name = "neels", looking up realm NULL
>     rlm_realm: Found realm "NULL"
>     rlm_realm: Setting Stripped-User-Name = "neels"
>     rlm_realm: Proxying request from user neels to realm NULL
>     rlm_realm: Adding Realm = "NULL"
>     rlm_realm: Authentication realm is LOCAL.
>   modcall[authorize]: module "suffix" returns noop
> radius_xlat:  'neels at localdomain.com'
> rlm_sql (sql): sql_set_user escaped user --> 'neels at localdomain.com'
> radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE 
> STRCMP(Username, 'neels at localdomain.com') = 0 ORDER BY id'
> rlm_sql (sql): Reserving sql socket id: 4
> radius_xlat:  'SELECT 
> radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op 
> FROM radgroupcheck,usergroup WHERE STRCMP(usergroup.Username, 
> 'neels at localdomain.com') = 0 AND usergroup.GroupName = 
> radgroupcheck.GroupName ORDER BY radgroupcheck.id'
> radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE 
> STRCMP(Username, 'neels at localdomain.com') = 0 ORDER BY id'
> radius_xlat:  'SELECT 
> radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op  
> FROM radgroupreply,usergroup WHERE
> STRCMP(usergroup.Username, 'neels at localdomain.com') = 0 AND 
> usergroup.GroupName
> = radgroupreply.GroupName ORDER BY radgroupreply.id'
> rlm_sql (sql): Released sql socket id: 4
>   modcall[authorize]: module "sql" returns ok
>   modcall[authorize]: module "mschap" returns noop
> modcall: group authorize returns ok
>   rad_check_password:  Found Auth-Type digest
> auth: type "digest"
> modcall: entering group authenticate
> A1 = neels:localdomain.com:neels
> A2 = REGISTER:sip:192.168.100.101
> KD = 
> 7df128e232c99839ca01e908858d8b4c:3f84f68a12a354c939aea23cfd6b29726675b50a:00000001:abcdefghi:auth:c78a6e92da40f0ac7487471944b929c0
>   modcall[authenticate]: module "digest" returns ok
> modcall: group authenticate returns ok
> Login OK: [neels/<no User-Password attribute>] (from client ser port 5060)
> Sending Access-Accept of id 9 to 192.168.100.101:1028
>         Service-Type := IAPP-Register
>         Framed-Protocol := PPP
>         Framed-Compression := Van-Jacobson-TCP-IP
>         Framed-MTU := 1500
> Finished request 0
> Going to the next request
> -------------------------------------------------------
> 
> we need to start and stop the radius accounting. but ser does not make the 
> accounting request to radius.
> can you help me for radius accounting?
> thanks with regards.
> Xten India.
>  
>  
>  
>  
> 
> 
> ---------------------------------
> Do you Yahoo!?
> The New Yahoo! Shopping - with improved product search
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers




More information about the sr-users mailing list