[Users] Re: [Serdev] Please help problem with AUTH with radius....using openser-1.0.9

Tue Nov 22 12:49:36 CET 2005

There is a dictionary file included with openser. It should be in the 
same directory as openser.cfg. Use this one.

When I use radius I do:
1. copy the default radiusclient.conf file (e.g. 
/etc/radiusclient-ng/radiusclient.conf) into the openser config directory:

cp /etc/radiusclient-ng/radiusclient.conf /etc/openser/

2. copy the default server file to openser config directory

cp /etc/radiusclient-ng/servers /etc/openser/radius-servers

3. add you radius server and the secret to /etc/openser/radius-servers

4. edit /etc/openser/radiusclient.conf to:
   - use the dictionary /etc/openser/dictionary
   - use the servers in /etc/openser/radius-servers

5. configure /etc/openser/openser.cfg to use proper radiusclient.conf file:

# -- radius configuration --
modparam("auth_radius", "radius_config", "/etc/openser/radiusclient.conf")

It is a good practice to do not use the configuration files in the 
radiusclient_ng directory. Thus way you can have several servers using 
the radiusclient-ng with different settings.

regards
klaus

Lokesh Kumar wrote:
> Hello Klaus,
> Thanks for your reply
> I am using radiusclient-ng 0.5.2 from berlios.But there is no line in
> "/usr/local/radiusclient-ng-0.5.2/etc/dictionay" file containing SIP-AVP,
> please tell me where should i move furthur.I am following "SER and Radius
> How to" document by iptel.org. But I hope that is not applicable to openser.
> Regards
> Lokesh
> 
> ----- Original Message -----
> From: "Klaus Darilion" <klaus.mailinglists at pernau.at>
> To: "Lokesh Kumar" <lokesh at interacesso.pt>
> Cc: <users at openser.org>
> Sent: Monday, November 21, 2005 8:34 PM
> Subject: Re: [Serdev] Please help problem with AUTH with radius....using
> openser-1.0.9
> 
> 
> 
>>Hi Lokesh!
>>
>>A small debugging workshop:
>>1. Watch the lines with "error" in it:
>>
>>==> 0(0) ERROR: auth_radius: can't get code for the SIP-AVP attribute
>>
>>2. Seems like the SIP-AVP attribute is unknown to the radius client. Are
>>you using the proper radius dictionary? There must be line with
>>"SIP-AVP" in it.
>>
>>regards
>>klaus
>>
>>
>>Lokesh Kumar wrote:
>>
>>>Hello Friends,
>>>
>>>I had installed openser-1.0.9, and enabled radius accounting in my
>>>openser.cfg file. But I am getting  errors mentioned below. and my
>>>openser crashed without running. I am unable to find out whats the
>>>reason. No posts available relating to this matter also. Please help
>>>me.........
>>>
>>>
>>>
>>>0(6348) shm_mem_init: success
>>>
>>>0(0) core dump limits set to 4294967295
>>>
>>>0(0) DEBUG: init_mod: sl_module
>>>
>>>stateless - initializing
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (sl_stats) registered
>>>
>>>0(0) unixsock_register_cmd: New command (sl_stats) registered
>>>
>>>0(0) DEBUG: MD5 calculated: 329cfeaa6ded039da25ff8cbb8668bd2
>>>
>>>0(0) DEBUG: init_mod: tm
>>>
>>>0(0) TM - (size of cell=2832, sip_msg=768) initializing...
>>>
>>>0(0) Call-ID initialization: '3f69f754'
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (t_uac_dlg) registered
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (t_uac_cancel) registered
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (t_hash) registered
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (t_reply) registered
>>>
>>>0(0) unixsock_register_cmd: New command (t_uac_dlg) registered
>>>
>>>0(0) unixsock_register_cmd: New command (t_uac_cancel) registered
>>>
>>>0(0) unixsock_register_cmd: New command (t_hash) registered
>>>
>>>0(0) unixsock_register_cmd: New command (t_reply) registered
>>>
>>>0(0) DEBUG: lock_initialize: lock initialization started
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (t_stats) registered
>>>
>>>0(0) unixsock_register_cmd: New command (t_stats) registered
>>>
>>>0(0) DEBUG: MD5 calculated: 533cb9e91f4b999cf76861cbb9ed54ed
>>>
>>>0(0) DEBUG: MD5 calculated: fa997f81440371de71ab448ebdb9af56
>>>
>>>0(0) DEBUG: init_mod: rr
>>>
>>>0(0) rr - initializing
>>>
>>>0(0) DEBUG: init_mod: maxfwd
>>>
>>>0(0) Maxfwd module- initializing
>>>
>>>0(0) DEBUG: init_mod: usrloc
>>>
>>>0(0) usrloc - initializing
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (ul_stats) registered
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (ul_rm) registered
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (ul_rm_contact) registered
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (ul_dump) registered
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (ul_flush) registered
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (ul_add) registered
>>>
>>>0(0) DEBUG: register_fifo_cmd: new command (ul_show_contact) registered
>>>
>>>0(0) unixsock_register_cmd: New command (ul_stats) registered
>>>
>>>0(0) unixsock_register_cmd: New command (ul_rm) registered
>>>
>>>0(0) unixsock_register_cmd: New command (ul_rm_contact) registered
>>>
>>>0(0) unixsock_register_cmd: New command (ul_dump) registered
>>>
>>>0(0) unixsock_register_cmd: New command (ul_flush) registered
>>>
>>>0(0) unixsock_register_cmd: New command (ul_add) registered
>>>
>>>0(0) unixsock_register_cmd: New command (ul_show_contact) registered
>>>
>>>0(0) DEBUG: init_mod: registrar
>>>
>>>0(0) registrar - initializing
>>>
>>>0(0) find_export: found <sl_send_reply> in module sl_module
>>>[/usr/local/lib/openser/modules/sl.so]
>>>
>>>0(0) find_export: found <ul_bind_usrloc> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_register_udomain> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_get_all_ucontacts> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_insert_urecord> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_delete_urecord> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_get_urecord> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_lock_udomain> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_unlock_udomain> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_release_urecord> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_insert_ucontact> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_delete_ucontact> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_get_ucontact> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_update_ucontact> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_register_watcher> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_unregister_watcher> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) find_export: found <ul_register_ulcb> in module usrloc
>>>[/usr/local/lib/openser/modules/usrloc.so]
>>>
>>>0(0) DEBUG: init_mod: textops
>>>
>>>textops - initializing
>>>
>>>0(0) DEBUG: init_mod: auth
>>>
>>>0(0) AUTH module - initializing
>>>
>>>0(0) find_export: found <sl_send_reply> in module sl_module
>>>[/usr/local/lib/openser/modules/sl.so]
>>>
>>>0(0) DEBUG: init_mod: auth_radius
>>>
>>>0(0) auth_radius - Initializing
>>>
>>>0(0) auth_radius: No `Cisco' vendor in Radius dictionary
>>>
>>>0(0) find_export: found <bind_auth> in module auth
>>>[/usr/local/lib/openser/modules/auth.so]
>>>
>>>0(0) ERROR: auth_radius: can't get code for the SIP-AVP attribute
>>>
>>>0(0) init_mod(): Error while initializing module auth_radius
>>>
>>>ERROR: error while initializing modules
>>>
>>>0(0) DEBUG: tm_shutdown : start
>>>
>>>0(0) DEBUG: unlink_timer_lists : emptying DELETE list
>>>
>>>0(0) DEBUG: tm_shutdown : emptying hash table
>>>
>>>0(0) DEBUG: tm_shutdown : releasing timers
>>>
>>>0(0) DEBUG: tm_shutdown : removing semaphores
>>>
>>>0(0) DEBUG: tm_shutdown : destroying tmcb lists
>>>
>>>0(0) DEBUG: tm_shutdown : done
>>>
>>>0(6348) shm_mem_destroy
>>>
>>>0(6348) destroying the shared memory lock
>>>
>>>[root at ser init.d]#
>>>
>>>
>>>
>>>
>>>
>>>Thanks you very much
>>>
>>>Lokesh
>>>
>>>
>>>
>>>
>>>------------------------------------------------------------------------
>>>
>>>_______________________________________________
>>>Serdev mailing list
>>>Serdev at iptel.org
>>>http://mail.iptel.org/mailman/listinfo/serdev
>>
> 
> 