[Serusers] free radius and ser 0.10.99 error? + Jan 29 12:05:39 rd ser[2207]: rc_check_reply: received invalid reply digest from RADIUS server
tzieleniewski
tzieleniewski at o2.pl
Mon Jan 29 15:49:39 CET 2007
hi I am still fighting with this issue and there is one thing more
is it correct that ser sends the attributes values in such form:
NAS-Port = 0x000013c400000000
NAS-IP-Address = 0x7f00000100000000
when I use another tool radtest delivered with freeradius the parameters are printed as for instance:
NAS-IP-Address = 192.168.0.74
Please help me with this problem I cann't figure out what could be wrong
I use libradiusclient-ng2
best Tomasz
> Hi!
>
> I am setting SER to work with radius.
> When I try to authenticate user I get the following error:
> Jan 29 12:05:39 rd ser[2207]: rc_check_reply: received invalid reply digest from RADIUS server
>
> Ser sends the following Access request:
> Packet-Type = Access-Request
> User-Name = "hellboy at voip.touk.pl"
> Digest-Attributes = 0x0a0968656c6c626f79
> Digest-Attributes = 0x010e766f69702e746f756b2e706c
> Digest-Attributes = 0x022a34356264636134623937373137333632653937323139316435306238383239356338326261363934
> Digest-Attributes = 0x04127369703a766f69702e746f756b2e706c
> Digest-Attributes = 0x030a5245474953544552
> Digest-Attributes = 0x050661757468
> Digest-Attributes = 0x090a3030303030303031
> Digest-Attributes = 0x08223745414239354131344231423535314641344234333531353438364237363434
> Digest-Response = "9e88c767fb24351dee073aea725b4240"
> Service-Type = 0x0000000f00000000
> SER-Service-Type = 0x0000000300000000
> SER-Uri-User = "hellboy"
> NAS-Port = 0x000013c400000000
> NAS-IP-Address = 0x7f00000100000000
>
> Free radius answers:
> Mon Jan 29 11:42:37 2007
> Packet-Type = Access-Accept
> User-Name = "hellboy at voip.touk.pl"
> Reply-Message = "Authenticated"
> SER-UID = "hellboy at voip.touk.pl"
>
> Please tell what is missing that SER reports such problem?
>
> The radius debug may be helpful:
> modcall: entering group Digest for request 0
> rlm_digest: Converting Digest-Attributes to something sane...
> Digest-User-Name = "hellboy"
> Digest-Realm = "voip.touk.pl"
> Digest-Nonce = "45bdd62fbc015a37f74ea55bacff289355a4e711"
> Digest-URI = "sip:hellboy at voip.touk.pl"
> Digest-Method = "INVITE"
> Digest-QOP = "auth"
> Digest-Nonce-Count = "00000001"
> Digest-CNonce = "6A8675513A084320027EC9F1160D4EAC"
> A1 = hellboy:voip.touk.pl:hellboy
> A2 = INVITE:sip:hellboy at voip.touk.pl
> H(A1) = a383a13215180e1f7d2fc755c99af602
> H(A2) = b2bcd7301bd325296c0d4ad31546892f
> KD = a383a13215180e1f7d2fc755c99af602:45bdd62fbc015a37f74ea55bacff289355a4e711:00000001:6A8675513A084320027EC9F1160D4EAC:auth:b2bcd7301bd325296c0d4ad31546892f
> EXPECTED 3b561958428c5891959e8d3c6a466b62
> RECEIVED 3b561958428c5891959e8d3c6a466b62
> modcall[authenticate]: module "digest" returns ok for request 0
> modcall: group Digest returns ok for request 0
> Login OK: [hellboy at voip.touk.pl/<via Auth-Type = DIGEST>] (from client localhost.ip4 port 0)
> Sending Access-Accept of id 54 to 127.0.0.1 port 32870
> User-Name = "hellboy at voip.touk.pl"
> SER-UID = "hellboy at voip.touk.pl"
> Reply-Message = "Authenticated"
>
> best
> tomasz
> _______________________________________________
> Serusers mailing list
> Serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
More information about the sr-users
mailing list