[Serusers] Ser and Radius (again....)

[Jan Janak]

There was a bug in the dictionary parser of the new libradiusclient
library -- it does not like dictionaries having comments at the end of
ATTRIBUTE lines, try the attached dictionary.ser or use the latest
libradiusclient released by Maxim (it should have this bug fixed).

  Jan.

On 15-04 18:31, Lambros Lambrinos wrote:
> Hi,
> Just for other people's reference, to get
> ser to compile with radiusclient 0.4.x you need
> to get the latest source from CVS.
> 
> Now as per the 'radius_howto' testing between
> freeradius and the client worked fine.
> 
> However, after modifying ser.cfg, the following
> comes up and i would appreciate any help.
> 
> 0(0) ERROR: acc: error reading radius dictionary
> 0(0) init_mod(): Error while initializing module acc
> ERROR: error while initializing modules
> 
> If i do not load module 'acc' then a similar error message
> appears with 'auth_radius' not initialising.
> 
> I have appended dictionary.ser to dictionary and included
> it from raddb. The permissions for dictionary are set to
> rw/r/r and the relevant parts in ser.cfg are:
> 
> # Uncomment this if you want digest authentication
> # mysql.so must be loaded !
> loadmodule "/usr/local/lib/ser/modules/auth.so"
> loadmodule "/usr/local/lib/ser/modules/auth_db.so"
> loadmodule "/usr/local/lib/ser/modules/acc.so"
> loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
> 
> # -- usrloc params --
> 
> #modparam("usrloc", "db_mode",   0)
> 
> # Uncomment this if you want to use SQL database 
> # for persistent storage and comment the previous line
> modparam("usrloc", "db_mode", 2)
> 
> # -- auth params --
> # Uncomment if you are using auth module
> #
> modparam("auth_db", "calculate_ha1", yes)
> #
> # If you set "calculate_ha1" parameter to yes (which true in this config), 
> # uncomment also the following parameter)
> #
> #modparam("auth_db", "password_column", "password")
> modparam("acc", "radius_config", "/usr/local/etc/radiusclient/radiusclient.conf
> ")
> modparam("auth_radius", "radius_config", "/usr/local/etc/radiusclient/radiuscli
> ent.conf")
> modparam("auth_radius", "service_type", 15)
> # -- rr params --
> # add value to ;lr param to make some broken UAs happy
> modparam("rr", "enable_full_lr", 1)
> 
> #modparam ("acc", "log_level", 1)
> #modparam ("acc", "radius_flag", 1)
> 
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
-------------- next part --------------
#
# $Id: dictionary.ser,v 1.2 2003/09/11 22:05:08 janakj Exp $
#
# SIP RADIUS attributes
#
# Schulzrinne indicates attributes according to
# draft-schulzrinne-sipping-radius-accounting-00
#
# Sterman indicates attributes according to
# draft-sterman-aaa-sip-00
#
# Standard indicates a standard RADIUS attribute
# which is missing in radiusclient dictionary
#
# Digest indicates attributes according to
#
# Proprietary indicates an attribute that hasn't
# been standardized
#

### acc ###
ATTRIBUTE Sip-Method                   101  integer
ATTRIBUTE Sip-Response-Code            102  integer
ATTRIBUTE Sip-Cseq                     103  string
ATTRIBUTE Sip-To-Tag                   104  string
ATTRIBUTE Sip-From-Tag                 105  string
ATTRIBUTE Sip-Branch-Id                106  string
ATTRIBUTE Sip-Translated-Req-ID        107  string
ATTRIBUTE Sip-Source-Ip-Address        108  ipaddr
ATTRIBUTE Sip-Source-Port              109  integer
VALUE Service-Type Sip-Session         15 

### auth_radius ###
# Sip-Session service type is already defined in acc section
VALUE Service-Type Call-Check           10
VALUE Service-Type Emergency-Call       13

ATTRIBUTE Digest-Response	       206     string
ATTRIBUTE Digest-Attributes	       207     string

ATTRIBUTE Sip-Uri-User                 208     string
ATTRIBUTE Sip-Rpid                     213     string

ATTRIBUTE Digest-Realm		      1063     string
ATTRIBUTE Digest-Nonce		      1064     string
ATTRIBUTE Digest-Method	              1065     string
ATTRIBUTE Digest-Uri		      1066     string
ATTRIBUTE Digest-Qop		      1067     string
ATTRIBUTE Digest-Algorithm	      1068     string
ATTRIBUTE Digest-Body-Digest	      1069     string
ATTRIBUTE Digest-Cnonce	              1070     string
ATTRIBUTE Digest-Nonce-Count	      1071     string
ATTRIBUTE Digest-User-Name	      1072     string

### group_radius ###
VALUE Service-Type Group-Check          12

ATTRIBUTE Sip-Group                    211     string

### uri_radius ###
# Call-Check service type is already define in auth_radius