[Serusers] Radius HowTo!!!

Daniel-Constantin Mierla daniel at iptel.org
Fri May 28 11:36:13 CEST 2004


The prototype of radius_www_authorize() has changed. Take a look into 
README file of auth_radius. The function has only one parameter -- the 
realm.

Daniel

On 5/28/2004 12:50 AM, Rafael J. Risco G.V. wrote:

>hello serusers!
>I have followed these instructions carefully (http://iptel.org/ser/doc/ser_radius/ser_radius.html) but now I have this error:
>
>
>ser:~/SER/ser-0.8.12 # /sbin/ser           
> 0(31886) loading module //lib/ser/modules/sl.so
> 0(31886) loading module //lib/ser/modules/tm.so
> 0(31886) loading module //lib/ser/modules/rr.so
> 0(31886) loading module //lib/ser/modules/maxfwd.so
> 0(31886) loading module //lib/ser/modules/usrloc.so
> 0(31886) loading module //lib/ser/modules/registrar.so
> 0(31886) loading module //lib/ser/modules/group_radius.so
> 0(31886) loading module //lib/ser/modules/auth.so
> 0(31886) loading module //lib/ser/modules/auth_radius.so
> 0(31886) loading module //lib/ser/modules/acc.so
> 0(31886) set_mod_param_regex: rr matches module rr
> 0(31886) set_mod_param_regex: found <enable_full_lr> in module rr [//lib/ser/modules/rr.so]
> 0(31886) set_mod_param_regex: auth_radius matches module auth_radius
> 0(31886) set_mod_param_regex: found <radius_config> in module auth_radius [//lib/ser/modules/auth_radius.so]
> 0(31886) set_mod_param_regex: auth_radius matches module auth_radius
> 0(31886) set_mod_param_regex: found <service_type> in module auth_radius [//lib/ser/modules/auth_radius.so]
> 0(31886) set_mod_param_regex: acc matches module acc
> 0(31886) set_mod_param_regex: found <radius_config> in module acc [//lib/ser/modules/acc.so]
> 0(31886) set_mod_param_regex: acc matches module acc
> 0(31886) set_mod_param_regex: found <service_type> in module acc [//lib/ser/modules/acc.so]
> 0(31886) set_mod_param_regex: acc matches module acc
> 0(31886) set_mod_param_regex: found <radius_flag> in module acc [//lib/ser/modules/acc.so]
> 0(31886) set_mod_param_regex: acc matches module acc
> 0(31886) set_mod_param_regex: found <radius_missed_flag> in module acc [//lib/ser/modules/acc.so]
> 0(31886) find_export: found <mf_process_maxfwd_header> in module maxfwd_module [//lib/ser/modules/maxfwd.so]
> 0(31886) find_export: found <sl_send_reply> in module sl_module [//lib/ser/modules/sl.so]
> 0(31886) find_export: found <sl_send_reply> in module sl_module [//lib/ser/modules/sl.so]
> 0(31886) find_export: found <record_route> in module rr [//lib/ser/modules/rr.so]
> 0(31886) find_export: found <loose_route> in module rr [//lib/ser/modules/rr.so]
> 0(31886) find_export: found <t_relay> in module tm [//lib/ser/modules/tm.so]
> 0(31886) find_export: <radius_www_authorize> not found 
> 0(31886) find_export: <radius_www_authorize> not found 
> 0(31886) parse error (115,55-56): unknown command, missing loadmodule?
>
> 0(31886) find_export: found <www_challenge> in module auth [//lib/ser/modules/auth.so]
> 0(31886) find_export: found <save> in module registrar [//lib/ser/modules/registrar.so]
> 0(31886) find_export: found <lookup> in module registrar [//lib/ser/modules/registrar.so]
> 0(31886) find_export: found <sl_send_reply> in module sl_module [//lib/ser/modules/sl.so]
> 0(31886) find_export: found <t_relay> in module tm [//lib/ser/modules/tm.so]
> 0(31886) find_export: found <sl_reply_error> in module sl_module [//lib/ser/modules/sl.so]
>ERROR: bad config file (1 errors)
> 0(31886) DEBUG: tm_shutdown : start
> 0(31886) DEBUG: tm_shutdown : empting hash table
> 0(31886) DEBUG: tm_shutdown: releasing timers
> 0(31886) DEBUG: tm_shutdown : removing semaphores
> 0(31886) DEBUG: tm_shutdown : done
> 0(31886) shm_mem_destroy
> 0(31886) destroying the shared memory lock
>
>
>
>SOME ADVICE PLEASE!!!
>
>Thanks 
>Rafael
>
>
>------------SER.CFG--------------------------------->>>>>>>
>
>ser:~/SER/ser-0.8.12 # more /etc/ser/ser.cfg   
>#
># $Id: ser.cfg,v 1.21.4.1 2003/11/10 15:35:15 andrei Exp $
>#
># simple quick-start config script
>#
>
># ----------- global configuration parameters ------------------------
>
>#debug=3         # debug level (cmd line: -dddddddddd)
>#fork=yes
>#log_stderror=no        # (cmd line: -E)
>
>#/* Uncomment these lines to enter debugging mode 
>debug=7
>fork=no
>log_stderror=yes
>#*/
>
>check_via=no    # (cmd. line: -v)
>dns=no           # (cmd. line: -r)
>rev_dns=no      # (cmd. line: -R)
>#port=5060
>#children=4
>fifo="/tmp/ser_fifo"
>
># ------------------ module loading ----------------------------------
>
># Uncomment this if you want to use SQL database
>#loadmodule "//lib/ser/modules/mysql.so"
>
>loadmodule "//lib/ser/modules/sl.so"
>loadmodule "//lib/ser/modules/tm.so"
>loadmodule "//lib/ser/modules/rr.so"
>loadmodule "//lib/ser/modules/maxfwd.so"
>loadmodule "//lib/ser/modules/usrloc.so"
>loadmodule "//lib/ser/modules/registrar.so"
>loadmodule "//lib/ser/modules/group_radius.so"
>#loadmodule "//lib/ser/modules/group.so"
># Uncomment this if you want digest authentication
># mysql.so must be loaded !
>loadmodule "//lib/ser/modules/auth.so"
>#loadmodule "//lib/ser/modules/auth_db.so"
>loadmodule "//lib/ser/modules/auth_radius.so"
>loadmodule "//lib/ser/modules/acc.so"
># ----------------- setting module-specific parameters ---------------
>
># -- usrloc params --
>
>#modparam("usrloc", "db_mode",   0)
>
># Uncomment this if you want to use SQL database 
># for persistent storage and comment the previous line
>#modparam("usrloc", "db_mode", 2)
>
># -- auth params --
># Uncomment if you are using auth module
>#
>#modparam("auth_db", "calculate_ha1", yes)
>#
># If you set "calculate_ha1" parameter to yes (which true in this config), 
># uncomment also the following parameter)
>#
>#modparam("auth_db", "password_column", "password")
>
># -- rr params --
># add value to ;lr param to make some broken UAs happy
>modparam("rr", "enable_full_lr", 1)
>
>
>modparam("auth_radius","radius_config","/etc/radiusclient/radiusclient.conf")
>modparam("auth_radius","service_type",15)
>modparam("acc", "radius_config","/etc/radiusclient/radiusclient.conf")
>modparam("acc", "service_type", 15)
>modparam("acc", "radius_flag", 1)
>modparam("acc", "radius_missed_flag", 3)
>
>
>
># -------------------------  request routing logic -------------------
>
># main routing logic
>
>route{
>
>        # initial sanity checks -- messages with
>        # max_forwards==0, or excessively long requests
>        if (!mf_process_maxfwd_header("10")) {
>                sl_send_reply("483","Too Many Hops");
>                break;
>        };
>        if ( msg:len > max_len ) {
>                sl_send_reply("513", "Message too big");
>                break;
>        };
>
>        # we record-route all messages -- to make sure that
>        # subsequent messages will go through our proxy; that's
>        # particularly good if upstream and downstream entities
>        # use different transport protocol
>        record_route();
>        # loose-route processing
>        if (loose_route()) {
>                t_relay();
>                break;
>        };
>
>        # if the request is for other domain use UsrLoc
>        # (in case, it does not work, use the following command
>        # with proper names and addresses in it)
>        if (uri==myself) {
>
>                if (method=="REGISTER") {
>
># Uncomment this if you want to use digest authentication
>                        if (!radius_www_authorize("iptel.org", "subscriber")) {
>                                www_challenge("iptel.org", "0");
>                                break;
>                        };
>
>                        save("location");
>                        break;
>                };
>
>                # native SIP destinations are handled using our USRLOC DB
>                if (!lookup("location")) {
>                        sl_send_reply("404", "Not Found");
>                        break;
>                };
>        };
>        # forward to current uri now; use stateful forwarding; that
>        # works reliably even if we forward from TCP to UDP
>        if (!t_relay()) {
>                sl_reply_error();
>        };
>
>}
>
>_______________________________________________
>Serusers mailing list
>serusers at lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
>
>  
>




More information about the sr-users mailing list