[Serusers] Radius accounting
Klaus Darilion
klaus.mailinglists at pernau.at
Wed Nov 23 09:32:32 CET 2005
Have you configured your Radius servers correctly? (in radiusclient.cconf)
klaus
Rosa De Santis wrote:
> Hi Jan.
>
> I put the acc_rad_request("text") and the setflag(1) in the route
> section and now I receive a warn message in syslog:
> rc_send_server: no reply from RADIUS server unknown: 1646. I still don't
> have any package out of port 1813, but i find packages trying to go out
> port 1646.
>
> Do you know why is this happening?
> Please help...
>
> Rosa.
>
>
>
>>
>>> From: Jan Janak <jan at iptel.org>
>>> To: Rosa De Santis <rosadesantis at hotmail.com>
>>> CC: Subject: Re: [Serusers] Radius accounting
>>> Date: Sat, 19 Nov 2005 00:16:08 +0100
>>>
>>> Only if a transaction has been created. REGISTERs, for example, do not
>>> create transactions.
>>>
>>> Try to add acc_rad_request("text");
>>> right after setflag(1). This should log any request.
>>>
>>> Jan.
>>>
>>> On 18-11-2005 22:27, Rosa De Santis wrote:
>>> > Hi again Jan.
>>> >
>>> > The way I have the setflag command does not register all messages for
>>> > accounting? I mean: register, invite, bye, etc ?
>>> >
>>> > Thanks
>>> > Rosa.
>>> >
>>> >
>>> > >From: Jan Janak <jan at iptel.org>
>>> > >To: Rosa De Santis <rosadesantis at hotmail.com>
>>> > >CC: > >Subject: Re: [Serusers] Radius accounting
>>> > >Date: Fri, 18 Nov 2005 23:08:16 +0100
>>> > >
>>> > >Yes, this is what I meant. Could you also post dumps of SIP
>>> traffic that
>>> > >should have been accounted ?
>>> > >
>>> > > Jan.
>>> > >
>>> > >On 18-11-2005 21:50, Rosa De Santis wrote:
>>> > >> Hello. Thanks for your help.
>>> > >>
>>> > >> This is my ser.cfg.
>>> > >> I set log_flag, log_level and radius_flag to 1, and I don't get
>>> anything
>>> > >in
>>> > >> syslog.
>>> > >> This is what you mean?
>>> > >>
>>> > >> Thanks again.
>>> > >> Rosa.
>>> > >>
>>> > >> ------------------------
>>> > >> debug = 9
>>> > >> fork=no
>>> > >> log_stderror=yes
>>> > >>
>>> > >> check_via=no # (cmd. line: -v)
>>> > >> dns=no # (cmd. line: -r)
>>> > >> rev_dns=no # (cmd. line: -R)
>>> > >> #port=5060
>>> > >> #children=4
>>> > >> fifo="/tmp/ser_fifo"
>>> > >>
>>> > >> loadmodule "/usr/local/lib/ser/modules/mysql.so"
>>> > >> loadmodule "/usr/local/lib/ser/modules/sl.so"
>>> > >> loadmodule "/usr/local/lib/ser/modules/tm.so"
>>> > >> loadmodule "/usr/local/lib/ser/modules/rr.so"
>>> > >> loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
>>> > >> loadmodule "/usr/local/lib/ser/modules/usrloc.so"
>>> > >> loadmodule "/usr/local/lib/ser/modules/registrar.so"
>>> > >> loadmodule "/usr/local/lib/ser/modules/textops.so"
>>> > >> loadmodule "/usr/local/lib/ser/modules/acc.so"
>>> > >> loadmodule "/usr/local/lib/ser/modules/auth.so"
>>> > >> loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
>>> > >>
>>> > >> modparam("usrloc", "db_mode", 2)
>>> > >> modparam("acc", "log_level", 1)
>>> > >> modparam("acc", "log_flag", 1)
>>> > >> modparam("acc", "radius_config",
>>> > >> "/usr/local/etc/radiusclient-ng/radiusclient.conf")
>>> > >> modparam("acc", "radius_missed_flag", 2)
>>> > >> modparam("acc", "radius_flag", 1)
>>> > >> modparam("acc", "service_type", 15)
>>> > >> modparam("auth_radius", "radius_config",
>>> > >> "/usr/local/etc/radiusclient-ng/radiusclient.conf")
>>> > >>
>>> > >> route{
>>> > >>
>>> > >> if (!mf_process_maxfwd_header("10")) {
>>> > >> sl_send_reply("483","Too Many Hops");
>>> > >> break;
>>> > >> };
>>> > >> if (msg:len >= 2048 ) {
>>> > >> sl_send_reply("513", "Message too big");
>>> > >> break;
>>> > >> };
>>> > >>
>>> > >> setflag(1);
>>> > >> if (!method=="REGISTER") record_route();
>>> > >>
>>> > >> if (loose_route()) {
>>> > >> # mark routing logic in request
>>> > >> append_hf("P-hint: rr-enforced\r\n");
>>> > >> route(1);
>>> > >> break;
>>> > >> };
>>> > >>
>>> > >> if (!uri==myself) {
>>> > >> # mark routing logic in request
>>> > >> append_hf("P-hint: outbound\r\n");
>>> > >> route(1);
>>> > >> break;
>>> > >> };
>>> > >>
>>> > >> if (uri==myself) {
>>> > >>
>>> > >> if (method=="REGISTER") {
>>> > >>
>>> > >> if (!radius_www_authorize("")) {
>>> > >> www_challenge("", "0");
>>> > >> break;
>>> > >> };
>>> > >> save("location");
>>> > >> break;
>>> > >> };
>>> > >>
>>> > >> lookup("aliases");
>>> > >> if (!uri==myself) {
>>> > >> append_hf("P-hint: outbound alias\r\n");
>>> > >> route(1);
>>> > >> break;
>>> > >> };
>>> > >>
>>> > >> # native SIP destinations are handled using our USRLOC DB
>>> > >> if (!lookup("location")) {
>>> > >> sl_send_reply("404", "Not Found");
>>> > >> break;
>>> > >> };
>>> > >> };
>>> > >>
>>> > >> append_hf("P-hint: usrloc applied\r\n");
>>> > >> route(1);
>>> > >> }
>>> > >>
>>> > >> route[1]
>>> > >> {
>>> > >> if (!t_relay()) {
>>> > >> sl_reply_error();
>>> > >> };
>>> > >> }
>>> > >>
>>> > >> ------------------------
>>> > >>
>>> > >>
>>> > >> >From: Jan Janak <jan at iptel.org>
>>> > >> >To: Rosa De Santis <rosadesantis at hotmail.com>
>>> > >> >CC: serusers at lists.iptel.org
>>> > >> >Subject: Re: [Serusers] Radius accounting
>>> > >> >Date: Fri, 18 Nov 2005 21:16:22 +0100
>>> > >> >
>>> > >> >Did you mark the transaction with correct flag ? Try to
>>> configure both
>>> > >> >syslog and radius accounting with the same flag and see if you
>>> get any
>>> > >> >accounting records in syslog.
>>> > >> >
>>> > >> > Jan.
>>> > >> >
>>> > >> >On 18-11-2005 20:04, Rosa De Santis wrote:
>>> > >> >> Yes, I set the server IP in authserver and acctserver in the
>>> > >> >> radiusclient.conf file in the radiusclient-ng folder.
>>> > >> >> I also added the server and secret in the servers file in the
>>> same
>>> > >> >folder.
>>> > >> >> The strange thing is that i'm making authorization to the
>>> same Radius
>>> > >> >> server, why accounting is not working?
>>> > >> >>
>>> > >> >> Thanks
>>> > >> >> Rosa.
>>> > >> >>
>>> > >> >>
>>> > >> >> >From: Jan Janak <jan at iptel.org>
>>> > >> >> >To: Rosa De Santis <rosadesantis at hotmail.com>
>>> > >> >> >CC: serusers at lists.iptel.org
>>> > >> >> >Subject: Re: [Serusers] Radius accounting
>>> > >> >> >Date: Fri, 18 Nov 2005 21:04:26 +0100
>>> > >> >> >
>>> > >> >> >Did you configure the accounting server in the configuration
>>> file of
>>> > >> >> >radiusclient-ng ?
>>> > >> >> >
>>> > >> >> >Do you have correct secret for the server ?
>>> > >> >> >
>>> > >> >> > Jan.
>>> > >> >> >
>>> > >> >> >On 18-11-2005 18:25, Rosa De Santis wrote:
>>> > >> >> >> Hello all.
>>> > >> >> >>
>>> > >> >> >> Please, I am trying to make Radius authorization and
>>> accounting
>>> > >using
>>> > >> >> >SER
>>> > >> >> >> 0.9.3 and radiusclient-ng. I already set all the
>>> configuration as
>>> > >the
>>> > >> >> >> ser_radius HowTo.
>>> > >> >> >> Now, I'm making Radius authorization successfully, but not
>>> > >> >accounting, I
>>> > >> >> >> don't get anything going out through port 1813.
>>> > >> >> >>
>>> > >> >> >> The Radius Server is in another machine, i'm configuring
>>> only the
>>> > >> >radius
>>> > >> >> >> client.
>>> > >> >> >> Is there other things to do besides the ser_radius howto?
>>> Please
>>> > >> >help...
>>> > >> >> >>
>>> > >> >> >> Thanks a lot
>>> > >> >> >> Rosa.
>>> > >> >> >>
>>> > >> >> >>
>>> > >> >> >> _______________________________________________
>>> > >> >> >> Serusers mailing list
>>> > >> >> >> serusers at lists.iptel.org
>>> > >> >> >> http://lists.iptel.org/mailman/listinfo/serusers
>>> > >> >>
>>> > >> >>
>>> > >> >> _______________________________________________
>>> > >> >> Serusers mailing list
>>> > >> >> serusers at lists.iptel.org
>>> > >> >> http://lists.iptel.org/mailman/listinfo/serusers
>>> > >>
>>> > >>
>>> > >> _______________________________________________
>>> > >> Serusers mailing list
>>> > >> serusers at lists.iptel.org
>>> > >> http://lists.iptel.org/mailman/listinfo/serusers
>>> >
>>> >
>>> > _______________________________________________
>>> > Serusers mailing list
>>> > serusers at lists.iptel.org
>>> > http://lists.iptel.org/mailman/listinfo/serusers
>>
>>
>>
>> _______________________________________________
>> Serusers mailing list
>> serusers at lists.iptel.org
>> http://lists.iptel.org/mailman/listinfo/serusers
>
>
>
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
>
>
More information about the sr-users
mailing list