[Serusers] Radius accounting
Rosa De Santis
rosadesantis at hotmail.com
Tue Nov 22 21:35:05 CET 2005
Hi Jan.
I put the acc_rad_request("text") and the setflag(1) in the route section
and now I receive a warn message in syslog:
rc_send_server: no reply from RADIUS server unknown: 1646. I still don't
have any package out of port 1813, but i find packages trying to go out port
1646.
Do you know why is this happening?
Please help...
Rosa.
>
>>From: Jan Janak <jan at iptel.org>
>>To: Rosa De Santis <rosadesantis at hotmail.com>
>>CC: Subject: Re: [Serusers] Radius accounting
>>Date: Sat, 19 Nov 2005 00:16:08 +0100
>>
>>Only if a transaction has been created. REGISTERs, for example, do not
>>create transactions.
>>
>>Try to add acc_rad_request("text");
>>right after setflag(1). This should log any request.
>>
>> Jan.
>>
>>On 18-11-2005 22:27, Rosa De Santis wrote:
>> > Hi again Jan.
>> >
>> > The way I have the setflag command does not register all messages for
>> > accounting? I mean: register, invite, bye, etc ?
>> >
>> > Thanks
>> > Rosa.
>> >
>> >
>> > >From: Jan Janak <jan at iptel.org>
>> > >To: Rosa De Santis <rosadesantis at hotmail.com>
>> > >CC: > >Subject: Re: [Serusers] Radius accounting
>> > >Date: Fri, 18 Nov 2005 23:08:16 +0100
>> > >
>> > >Yes, this is what I meant. Could you also post dumps of SIP traffic
>>that
>> > >should have been accounted ?
>> > >
>> > > Jan.
>> > >
>> > >On 18-11-2005 21:50, Rosa De Santis wrote:
>> > >> Hello. Thanks for your help.
>> > >>
>> > >> This is my ser.cfg.
>> > >> I set log_flag, log_level and radius_flag to 1, and I don't get
>>anything
>> > >in
>> > >> syslog.
>> > >> This is what you mean?
>> > >>
>> > >> Thanks again.
>> > >> Rosa.
>> > >>
>> > >> ------------------------
>> > >> debug = 9
>> > >> fork=no
>> > >> log_stderror=yes
>> > >>
>> > >> check_via=no # (cmd. line: -v)
>> > >> dns=no # (cmd. line: -r)
>> > >> rev_dns=no # (cmd. line: -R)
>> > >> #port=5060
>> > >> #children=4
>> > >> fifo="/tmp/ser_fifo"
>> > >>
>> > >> loadmodule "/usr/local/lib/ser/modules/mysql.so"
>> > >> loadmodule "/usr/local/lib/ser/modules/sl.so"
>> > >> loadmodule "/usr/local/lib/ser/modules/tm.so"
>> > >> loadmodule "/usr/local/lib/ser/modules/rr.so"
>> > >> loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
>> > >> loadmodule "/usr/local/lib/ser/modules/usrloc.so"
>> > >> loadmodule "/usr/local/lib/ser/modules/registrar.so"
>> > >> loadmodule "/usr/local/lib/ser/modules/textops.so"
>> > >> loadmodule "/usr/local/lib/ser/modules/acc.so"
>> > >> loadmodule "/usr/local/lib/ser/modules/auth.so"
>> > >> loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
>> > >>
>> > >> modparam("usrloc", "db_mode", 2)
>> > >> modparam("acc", "log_level", 1)
>> > >> modparam("acc", "log_flag", 1)
>> > >> modparam("acc", "radius_config",
>> > >> "/usr/local/etc/radiusclient-ng/radiusclient.conf")
>> > >> modparam("acc", "radius_missed_flag", 2)
>> > >> modparam("acc", "radius_flag", 1)
>> > >> modparam("acc", "service_type", 15)
>> > >> modparam("auth_radius", "radius_config",
>> > >> "/usr/local/etc/radiusclient-ng/radiusclient.conf")
>> > >>
>> > >> route{
>> > >>
>> > >> if (!mf_process_maxfwd_header("10")) {
>> > >> sl_send_reply("483","Too Many Hops");
>> > >> break;
>> > >> };
>> > >> if (msg:len >= 2048 ) {
>> > >> sl_send_reply("513", "Message too big");
>> > >> break;
>> > >> };
>> > >>
>> > >> setflag(1);
>> > >> if (!method=="REGISTER") record_route();
>> > >>
>> > >> if (loose_route()) {
>> > >> # mark routing logic in request
>> > >> append_hf("P-hint: rr-enforced\r\n");
>> > >> route(1);
>> > >> break;
>> > >> };
>> > >>
>> > >> if (!uri==myself) {
>> > >> # mark routing logic in request
>> > >> append_hf("P-hint: outbound\r\n");
>> > >> route(1);
>> > >> break;
>> > >> };
>> > >>
>> > >> if (uri==myself) {
>> > >>
>> > >> if (method=="REGISTER") {
>> > >>
>> > >> if (!radius_www_authorize("")) {
>> > >> www_challenge("", "0");
>> > >> break;
>> > >> };
>> > >> save("location");
>> > >> break;
>> > >> };
>> > >>
>> > >> lookup("aliases");
>> > >> if (!uri==myself) {
>> > >> append_hf("P-hint: outbound alias\r\n");
>> > >> route(1);
>> > >> break;
>> > >> };
>> > >>
>> > >> # native SIP destinations are handled using our USRLOC DB
>> > >> if (!lookup("location")) {
>> > >> sl_send_reply("404", "Not Found");
>> > >> break;
>> > >> };
>> > >> };
>> > >>
>> > >> append_hf("P-hint: usrloc applied\r\n");
>> > >> route(1);
>> > >> }
>> > >>
>> > >> route[1]
>> > >> {
>> > >> if (!t_relay()) {
>> > >> sl_reply_error();
>> > >> };
>> > >> }
>> > >>
>> > >> ------------------------
>> > >>
>> > >>
>> > >> >From: Jan Janak <jan at iptel.org>
>> > >> >To: Rosa De Santis <rosadesantis at hotmail.com>
>> > >> >CC: serusers at lists.iptel.org
>> > >> >Subject: Re: [Serusers] Radius accounting
>> > >> >Date: Fri, 18 Nov 2005 21:16:22 +0100
>> > >> >
>> > >> >Did you mark the transaction with correct flag ? Try to configure
>>both
>> > >> >syslog and radius accounting with the same flag and see if you get
>>any
>> > >> >accounting records in syslog.
>> > >> >
>> > >> > Jan.
>> > >> >
>> > >> >On 18-11-2005 20:04, Rosa De Santis wrote:
>> > >> >> Yes, I set the server IP in authserver and acctserver in the
>> > >> >> radiusclient.conf file in the radiusclient-ng folder.
>> > >> >> I also added the server and secret in the servers file in the
>>same
>> > >> >folder.
>> > >> >> The strange thing is that i'm making authorization to the same
>>Radius
>> > >> >> server, why accounting is not working?
>> > >> >>
>> > >> >> Thanks
>> > >> >> Rosa.
>> > >> >>
>> > >> >>
>> > >> >> >From: Jan Janak <jan at iptel.org>
>> > >> >> >To: Rosa De Santis <rosadesantis at hotmail.com>
>> > >> >> >CC: serusers at lists.iptel.org
>> > >> >> >Subject: Re: [Serusers] Radius accounting
>> > >> >> >Date: Fri, 18 Nov 2005 21:04:26 +0100
>> > >> >> >
>> > >> >> >Did you configure the accounting server in the configuration
>>file of
>> > >> >> >radiusclient-ng ?
>> > >> >> >
>> > >> >> >Do you have correct secret for the server ?
>> > >> >> >
>> > >> >> > Jan.
>> > >> >> >
>> > >> >> >On 18-11-2005 18:25, Rosa De Santis wrote:
>> > >> >> >> Hello all.
>> > >> >> >>
>> > >> >> >> Please, I am trying to make Radius authorization and
>>accounting
>> > >using
>> > >> >> >SER
>> > >> >> >> 0.9.3 and radiusclient-ng. I already set all the configuration
>>as
>> > >the
>> > >> >> >> ser_radius HowTo.
>> > >> >> >> Now, I'm making Radius authorization successfully, but not
>> > >> >accounting, I
>> > >> >> >> don't get anything going out through port 1813.
>> > >> >> >>
>> > >> >> >> The Radius Server is in another machine, i'm configuring only
>>the
>> > >> >radius
>> > >> >> >> client.
>> > >> >> >> Is there other things to do besides the ser_radius howto?
>>Please
>> > >> >help...
>> > >> >> >>
>> > >> >> >> Thanks a lot
>> > >> >> >> Rosa.
>> > >> >> >>
>> > >> >> >>
>> > >> >> >> _______________________________________________
>> > >> >> >> Serusers mailing list
>> > >> >> >> serusers at lists.iptel.org
>> > >> >> >> http://lists.iptel.org/mailman/listinfo/serusers
>> > >> >>
>> > >> >>
>> > >> >> _______________________________________________
>> > >> >> Serusers mailing list
>> > >> >> serusers at lists.iptel.org
>> > >> >> http://lists.iptel.org/mailman/listinfo/serusers
>> > >>
>> > >>
>> > >> _______________________________________________
>> > >> Serusers mailing list
>> > >> serusers at lists.iptel.org
>> > >> http://lists.iptel.org/mailman/listinfo/serusers
>> >
>> >
>> > _______________________________________________
>> > Serusers mailing list
>> > serusers at lists.iptel.org
>> > http://lists.iptel.org/mailman/listinfo/serusers
>
>
>_______________________________________________
>Serusers mailing list
>serusers at lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
More information about the sr-users
mailing list