[Serusers] Ser and Radius (again....)

Lambros Lambrinos L.Lambrinos at cs.ucl.ac.uk
Mon Apr 19 15:09:22 CEST 2004


Jan,
Thanks for the reply.
Can't at the moment get anything from the CVS as berlios
seems to be down. On trying the file without the comments
after ATTRIBUTE it gives the following:

acc - initializing
 0(0) ERROR: acc: can't get code for the Sip-Translated-Request-URI attribute
 0(0) init_mod(): Error while initializing module acc
ERROR: error while initializing modules

Does this attribute relate to:

ATTRIBUTE Sip-Translated-Req-ID        107  string

Regards,
Lambros

> There was a bug in the dictionary parser of the new libradiusclient
> library -- it does not like dictionaries having comments at the end of
> ATTRIBUTE lines, try the attached dictionary.ser or use the latest
> libradiusclient released by Maxim (it should have this bug fixed).
> 
>   Jan.
> 
> On 15-04 18:31, Lambros Lambrinos wrote:
> > Hi,
> > Just for other people's reference, to get
> > ser to compile with radiusclient 0.4.x you need
> > to get the latest source from CVS.
> > 
> > Now as per the 'radius_howto' testing between
> > freeradius and the client worked fine.
> > 
> > However, after modifying ser.cfg, the following
> > comes up and i would appreciate any help.
> > 
> > 0(0) ERROR: acc: error reading radius dictionary
> > 0(0) init_mod(): Error while initializing module acc
> > ERROR: error while initializing modules
> > 
> > If i do not load module 'acc' then a similar error message
> > appears with 'auth_radius' not initialising.
> > 
> > I have appended dictionary.ser to dictionary and included
> > it from raddb. The permissions for dictionary are set to
> > rw/r/r and the relevant parts in ser.cfg are:
> > 
> > # Uncomment this if you want digest authentication
> > # mysql.so must be loaded !
> > loadmodule "/usr/local/lib/ser/modules/auth.so"
> > loadmodule "/usr/local/lib/ser/modules/auth_db.so"
> > loadmodule "/usr/local/lib/ser/modules/acc.so"
> > loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
> > 
> > # -- usrloc params --
> > 
> > #modparam("usrloc", "db_mode",   0)
> > 
> > # Uncomment this if you want to use SQL database 
> > # for persistent storage and comment the previous line
> > modparam("usrloc", "db_mode", 2)
> > 
> > # -- auth params --
> > # Uncomment if you are using auth module
> > #
> > modparam("auth_db", "calculate_ha1", yes)
> > #
> > # If you set "calculate_ha1" parameter to yes (which true in this config), 
> > # uncomment also the following parameter)
> > #
> > #modparam("auth_db", "password_column", "password")
> > modparam("acc", "radius_config", "/usr/local/etc/radiusclient/radiusclient.conf
> > ")
> > modparam("auth_radius", "radius_config", "/usr/local/etc/radiusclient/radiuscli
> > ent.conf")
> > modparam("auth_radius", "service_type", 15)
> > # -- rr params --
> > # add value to ;lr param to make some broken UAs happy
> > modparam("rr", "enable_full_lr", 1)
> > 
> > #modparam ("acc", "log_level", 1)
> > #modparam ("acc", "radius_flag", 1)
> > 
> > 
> > _______________________________________________
> > Serusers mailing list
> > serusers at lists.iptel.org
> > http://lists.iptel.org/mailman/listinfo/serusers
> 
> #
> # $Id: dictionary.ser,v 1.2 2003/09/11 22:05:08 janakj Exp $
> #
> # SIP RADIUS attributes
> #
> # Schulzrinne indicates attributes according to
> # draft-schulzrinne-sipping-radius-accounting-00
> #
> # Sterman indicates attributes according to
> # draft-sterman-aaa-sip-00
> #
> # Standard indicates a standard RADIUS attribute
> # which is missing in radiusclient dictionary
> #
> # Digest indicates attributes according to
> #
> # Proprietary indicates an attribute that hasn't
> # been standardized
> #
> 
> ### acc ###
> ATTRIBUTE Sip-Method                   101  integer
> ATTRIBUTE Sip-Response-Code            102  integer
> ATTRIBUTE Sip-Cseq                     103  string
> ATTRIBUTE Sip-To-Tag                   104  string
> ATTRIBUTE Sip-From-Tag                 105  string
> ATTRIBUTE Sip-Branch-Id                106  string
> ATTRIBUTE Sip-Translated-Req-ID        107  string
> ATTRIBUTE Sip-Source-Ip-Address        108  ipaddr
> ATTRIBUTE Sip-Source-Port              109  integer
> VALUE Service-Type Sip-Session         15 
> 
> ### auth_radius ###
> # Sip-Session service type is already defined in acc section
> VALUE Service-Type Call-Check           10
> VALUE Service-Type Emergency-Call       13
> 
> ATTRIBUTE Digest-Response	       206     string
> ATTRIBUTE Digest-Attributes	       207     string
> 
> ATTRIBUTE Sip-Uri-User                 208     string
> ATTRIBUTE Sip-Rpid                     213     string
> 
> ATTRIBUTE Digest-Realm		      1063     string
> ATTRIBUTE Digest-Nonce		      1064     string
> ATTRIBUTE Digest-Method	              1065     string
> ATTRIBUTE Digest-Uri		      1066     string
> ATTRIBUTE Digest-Qop		      1067     string
> ATTRIBUTE Digest-Algorithm	      1068     string
> ATTRIBUTE Digest-Body-Digest	      1069     string
> ATTRIBUTE Digest-Cnonce	              1070     string
> ATTRIBUTE Digest-Nonce-Count	      1071     string
> ATTRIBUTE Digest-User-Name	      1072     string
> 
> ### group_radius ###
> VALUE Service-Type Group-Check          12
> 
> ATTRIBUTE Sip-Group                    211     string
> 
> ### uri_radius ###
> # Call-Check service type is already define in auth_radius
> 
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
> 





More information about the sr-users mailing list