[Serusers] Troubles setting up radius authentication

[Jan Janak]

Hello,

if there is no radius traffic then radiusclient library has some
problems when buiding the request. Did you extend your radius dictionary
as described in http://iptel.org/ser/ser_radius.html ?

  Jan.

On 23-09 10:38, Steve Dolloff wrote:
> I am trying to switch from database authentication to radius
> authentication.
> 
> I have compiled and installed the module.
> 
> I have added the following to my ser.cfg
> 
> modparam("auth_radius", "radius_config", "/etc/ser/radiusclient.conf")
> modparam("auth_radius", "service_type",15)
> 
>                         if (method=="REGISTER") {
>                                 log(1,"authenticating");
>                                 if (!radius_www_authorize("test.net")) {
>                                         log(1,"radius auth failure");
>                                         www_challenge("test.net", "0");
>                                         break;
>                                 };
> 
> I have configured the following in /etc/ser/radiusclient.conf
> authserver      radius1.test.net:1812
> authserver      radius2.test.net:1812
> servers         /etc/servers
> dictionary      /etc/sip_dictionary
> 
> I have configured the following in /etc/servers
> 
> Radius1.test.net	secret
> Radius2.test.net	secret2
> 
> I get the following in my messages log.
> 
> Sep 23 10:39:03 voip2 /usr/sbin/ser[25945]: authenticating
> Sep 23 10:39:03 voip2 /usr/sbin/ser[25945]: radius auth failure
> Sep 23 10:39:30 voip2 /usr/sbin/ser[25947]: authenticating
> Sep 23 10:39:30 voip2 /usr/sbin/ser[25947]: radius auth failure
> Sep 23 10:39:30 voip2 /usr/sbin/ser[25949]: authenticating
> Sep 23 10:39:30 voip2 /usr/sbin/ser[25949]: radius auth failure
> Sep 23 10:39:34 voip2 /usr/sbin/ser[25948]: authenticating
> Sep 23 10:39:34 voip2 /usr/sbin/ser[25948]: radius auth failure
> Sep 23 10:39:34 voip2 /usr/sbin/ser[25945]: authenticating
> Sep 23 10:39:34 voip2 /usr/sbin/ser[25945]: radius auth failure
> 
> And ngrep port 1812 shows no traffic at all.  Where are these auth
> request going?  How can I get more debug info?
> 
> Thanks for your help.
> 
> Stephen
> 
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers