[Serusers] Radius accounting
Rosa De Santis
rosadesantis at hotmail.com
Wed Nov 23 14:19:44 CET 2005
Hi, Klaus.
Yes, I configured the radius server IP in authserver and acctserver in
radiusclient.conf file in the radiusclient-ng folder. I also added the
server and secret in the servers file in the same folder.
Maybe I have a port problem, but I checked the radius ports in /etc/services
and they're ok.
Is there another place to check the ports?
Thanks for your help.
Rosa.
>From: Klaus Darilion <klaus.mailinglists at pernau.at>
>To: Rosa De Santis <rosadesantis at hotmail.com>
>CC: serusers at lists.iptel.org
>Subject: Re: [Serusers] Radius accounting
>Date: Wed, 23 Nov 2005 09:32:32 +0100
>
>Have you configured your Radius servers correctly? (in radiusclient.cconf)
>
>klaus
>
>Rosa De Santis wrote:
>>Hi Jan.
>>
>>I put the acc_rad_request("text") and the setflag(1) in the route section
>>and now I receive a warn message in syslog:
>>rc_send_server: no reply from RADIUS server unknown: 1646. I still don't
>>have any package out of port 1813, but i find packages trying to go out
>>port 1646.
>>
>>Do you know why is this happening?
>>Please help...
>>
>>Rosa.
>>
>>
>>
>>>
>>>>From: Jan Janak <jan at iptel.org>
>>>>To: Rosa De Santis <rosadesantis at hotmail.com>
>>>>CC: Subject: Re: [Serusers] Radius accounting
>>>>Date: Sat, 19 Nov 2005 00:16:08 +0100
>>>>
>>>>Only if a transaction has been created. REGISTERs, for example, do not
>>>>create transactions.
>>>>
>>>>Try to add acc_rad_request("text");
>>>>right after setflag(1). This should log any request.
>>>>
>>>> Jan.
>>>>
>>>>On 18-11-2005 22:27, Rosa De Santis wrote:
>>>> > Hi again Jan.
>>>> >
>>>> > The way I have the setflag command does not register all messages for
>>>> > accounting? I mean: register, invite, bye, etc ?
>>>> >
>>>> > Thanks
>>>> > Rosa.
>>>> >
>>>> >
>>>> > >From: Jan Janak <jan at iptel.org>
>>>> > >To: Rosa De Santis <rosadesantis at hotmail.com>
>>>> > >CC: > >Subject: Re: [Serusers] Radius accounting
>>>> > >Date: Fri, 18 Nov 2005 23:08:16 +0100
>>>> > >
>>>> > >Yes, this is what I meant. Could you also post dumps of SIP traffic
>>>>that
>>>> > >should have been accounted ?
>>>> > >
>>>> > > Jan.
>>>> > >
>>>> > >On 18-11-2005 21:50, Rosa De Santis wrote:
>>>> > >> Hello. Thanks for your help.
>>>> > >>
>>>> > >> This is my ser.cfg.
>>>> > >> I set log_flag, log_level and radius_flag to 1, and I don't get
>>>>anything
>>>> > >in
>>>> > >> syslog.
>>>> > >> This is what you mean?
>>>> > >>
>>>> > >> Thanks again.
>>>> > >> Rosa.
>>>> > >>
>>>> > >> ------------------------
>>>> > >> debug = 9
>>>> > >> fork=no
>>>> > >> log_stderror=yes
>>>> > >>
>>>> > >> check_via=no # (cmd. line: -v)
>>>> > >> dns=no # (cmd. line: -r)
>>>> > >> rev_dns=no # (cmd. line: -R)
>>>> > >> #port=5060
>>>> > >> #children=4
>>>> > >> fifo="/tmp/ser_fifo"
>>>> > >>
>>>> > >> loadmodule "/usr/local/lib/ser/modules/mysql.so"
>>>> > >> loadmodule "/usr/local/lib/ser/modules/sl.so"
>>>> > >> loadmodule "/usr/local/lib/ser/modules/tm.so"
>>>> > >> loadmodule "/usr/local/lib/ser/modules/rr.so"
>>>> > >> loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
>>>> > >> loadmodule "/usr/local/lib/ser/modules/usrloc.so"
>>>> > >> loadmodule "/usr/local/lib/ser/modules/registrar.so"
>>>> > >> loadmodule "/usr/local/lib/ser/modules/textops.so"
>>>> > >> loadmodule "/usr/local/lib/ser/modules/acc.so"
>>>> > >> loadmodule "/usr/local/lib/ser/modules/auth.so"
>>>> > >> loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
>>>> > >>
>>>> > >> modparam("usrloc", "db_mode", 2)
>>>> > >> modparam("acc", "log_level", 1)
>>>> > >> modparam("acc", "log_flag", 1)
>>>> > >> modparam("acc", "radius_config",
>>>> > >> "/usr/local/etc/radiusclient-ng/radiusclient.conf")
>>>> > >> modparam("acc", "radius_missed_flag", 2)
>>>> > >> modparam("acc", "radius_flag", 1)
>>>> > >> modparam("acc", "service_type", 15)
>>>> > >> modparam("auth_radius", "radius_config",
>>>> > >> "/usr/local/etc/radiusclient-ng/radiusclient.conf")
>>>> > >>
>>>> > >> route{
>>>> > >>
>>>> > >> if (!mf_process_maxfwd_header("10")) {
>>>> > >> sl_send_reply("483","Too Many Hops");
>>>> > >> break;
>>>> > >> };
>>>> > >> if (msg:len >= 2048 ) {
>>>> > >> sl_send_reply("513", "Message too big");
>>>> > >> break;
>>>> > >> };
>>>> > >>
>>>> > >> setflag(1);
>>>> > >> if (!method=="REGISTER") record_route();
>>>> > >>
>>>> > >> if (loose_route()) {
>>>> > >> # mark routing logic in request
>>>> > >> append_hf("P-hint: rr-enforced\r\n");
>>>> > >> route(1);
>>>> > >> break;
>>>> > >> };
>>>> > >>
>>>> > >> if (!uri==myself) {
>>>> > >> # mark routing logic in request
>>>> > >> append_hf("P-hint: outbound\r\n");
>>>> > >> route(1);
>>>> > >> break;
>>>> > >> };
>>>> > >>
>>>> > >> if (uri==myself) {
>>>> > >>
>>>> > >> if (method=="REGISTER") {
>>>> > >>
>>>> > >> if (!radius_www_authorize("")) {
>>>> > >> www_challenge("", "0");
>>>> > >> break;
>>>> > >> };
>>>> > >> save("location");
>>>> > >> break;
>>>> > >> };
>>>> > >>
>>>> > >> lookup("aliases");
>>>> > >> if (!uri==myself) {
>>>> > >> append_hf("P-hint: outbound alias\r\n");
>>>> > >> route(1);
>>>> > >> break;
>>>> > >> };
>>>> > >>
>>>> > >> # native SIP destinations are handled using our USRLOC DB
>>>> > >> if (!lookup("location")) {
>>>> > >> sl_send_reply("404", "Not Found");
>>>> > >> break;
>>>> > >> };
>>>> > >> };
>>>> > >>
>>>> > >> append_hf("P-hint: usrloc applied\r\n");
>>>> > >> route(1);
>>>> > >> }
>>>> > >>
>>>> > >> route[1]
>>>> > >> {
>>>> > >> if (!t_relay()) {
>>>> > >> sl_reply_error();
>>>> > >> };
>>>> > >> }
>>>> > >>
>>>> > >> ------------------------
>>>> > >>
>>>> > >>
>>>> > >> >From: Jan Janak <jan at iptel.org>
>>>> > >> >To: Rosa De Santis <rosadesantis at hotmail.com>
>>>> > >> >CC: serusers at lists.iptel.org
>>>> > >> >Subject: Re: [Serusers] Radius accounting
>>>> > >> >Date: Fri, 18 Nov 2005 21:16:22 +0100
>>>> > >> >
>>>> > >> >Did you mark the transaction with correct flag ? Try to configure
>>>>both
>>>> > >> >syslog and radius accounting with the same flag and see if you
>>>>get any
>>>> > >> >accounting records in syslog.
>>>> > >> >
>>>> > >> > Jan.
>>>> > >> >
>>>> > >> >On 18-11-2005 20:04, Rosa De Santis wrote:
>>>> > >> >> Yes, I set the server IP in authserver and acctserver in the
>>>> > >> >> radiusclient.conf file in the radiusclient-ng folder.
>>>> > >> >> I also added the server and secret in the servers file in the
>>>>same
>>>> > >> >folder.
>>>> > >> >> The strange thing is that i'm making authorization to the same
>>>>Radius
>>>> > >> >> server, why accounting is not working?
>>>> > >> >>
>>>> > >> >> Thanks
>>>> > >> >> Rosa.
>>>> > >> >>
>>>> > >> >>
>>>> > >> >> >From: Jan Janak <jan at iptel.org>
>>>> > >> >> >To: Rosa De Santis <rosadesantis at hotmail.com>
>>>> > >> >> >CC: serusers at lists.iptel.org
>>>> > >> >> >Subject: Re: [Serusers] Radius accounting
>>>> > >> >> >Date: Fri, 18 Nov 2005 21:04:26 +0100
>>>> > >> >> >
>>>> > >> >> >Did you configure the accounting server in the configuration
>>>>file of
>>>> > >> >> >radiusclient-ng ?
>>>> > >> >> >
>>>> > >> >> >Do you have correct secret for the server ?
>>>> > >> >> >
>>>> > >> >> > Jan.
>>>> > >> >> >
>>>> > >> >> >On 18-11-2005 18:25, Rosa De Santis wrote:
>>>> > >> >> >> Hello all.
>>>> > >> >> >>
>>>> > >> >> >> Please, I am trying to make Radius authorization and
>>>>accounting
>>>> > >using
>>>> > >> >> >SER
>>>> > >> >> >> 0.9.3 and radiusclient-ng. I already set all the
>>>>configuration as
>>>> > >the
>>>> > >> >> >> ser_radius HowTo.
>>>> > >> >> >> Now, I'm making Radius authorization successfully, but not
>>>> > >> >accounting, I
>>>> > >> >> >> don't get anything going out through port 1813.
>>>> > >> >> >>
>>>> > >> >> >> The Radius Server is in another machine, i'm configuring
>>>>only the
>>>> > >> >radius
>>>> > >> >> >> client.
>>>> > >> >> >> Is there other things to do besides the ser_radius howto?
>>>>Please
>>>> > >> >help...
>>>> > >> >> >>
>>>> > >> >> >> Thanks a lot
>>>> > >> >> >> Rosa.
>>>> > >> >> >>
>>>> > >> >> >>
>>>> > >> >> >> _______________________________________________
>>>> > >> >> >> Serusers mailing list
>>>> > >> >> >> serusers at lists.iptel.org
>>>> > >> >> >> http://lists.iptel.org/mailman/listinfo/serusers
>>>> > >> >>
>>>> > >> >>
>>>> > >> >> _______________________________________________
>>>> > >> >> Serusers mailing list
>>>> > >> >> serusers at lists.iptel.org
>>>> > >> >> http://lists.iptel.org/mailman/listinfo/serusers
>>>> > >>
>>>> > >>
>>>> > >> _______________________________________________
>>>> > >> Serusers mailing list
>>>> > >> serusers at lists.iptel.org
>>>> > >> http://lists.iptel.org/mailman/listinfo/serusers
>>>> >
>>>> >
>>>> > _______________________________________________
>>>> > Serusers mailing list
>>>> > serusers at lists.iptel.org
>>>> > http://lists.iptel.org/mailman/listinfo/serusers
>>>
>>>
>>>
>>>_______________________________________________
>>>Serusers mailing list
>>>serusers at lists.iptel.org
>>>http://lists.iptel.org/mailman/listinfo/serusers
>>
>>
>>
>>_______________________________________________
>>Serusers mailing list
>>serusers at lists.iptel.org
>>http://lists.iptel.org/mailman/listinfo/serusers
>>
>>
>
More information about the sr-users
mailing list