[OpenSER-Users] OpenSER + FreeRadius + CDRTool

Marc LEURENT lftsy at free.fr
Tue Jul 24 11:15:54 CEST 2007


I have this in my radchech table

	Edit 
<http://sip.wifirst.fr/phpmyadmin/tbl_change.php?db=radius&table=radcheck&token=e6aa5a03fd1e8e7625213e99620f1080&pos=0&session_max_rows=30&disp_direction=horizontal&repeat_cells=100&dontlimitchars=0&primary_key=+%60radcheck%60.%60id%60+%3D+4&sql_query=SELECT+%2A+FROM+%60radcheck%60&goto=sql.php> 
	Delete 
<http://sip.wifirst.fr/phpmyadmin/sql.php?db=radius&table=radcheck&token=e6aa5a03fd1e8e7625213e99620f1080&pos=0&session_max_rows=30&disp_direction=horizontal&repeat_cells=100&dontlimitchars=0&sql_query=DELETE+FROM+%60radcheck%60+WHERE+%60radcheck%60.%60id%60+%3D+4+LIMIT+1&zero_rows=The+row+has+been+deleted&goto=sql.php%3Fdb%3Dradius%26table%3Dradcheck%26token%3De6aa5a03fd1e8e7625213e99620f1080%26pos%3D0%26session_max_rows%3D30%26disp_direction%3Dhorizontal%26repeat_cells%3D100%26dontlimitchars%3D0%26sql_query%3DSELECT%2B%252A%2BFROM%2B%2560radcheck%2560%26zero_rows%3DThe%2Brow%2Bhas%2Bbeen%2Bdeleted%26goto%3Dtbl_properties_structure.php> 
	4 	bob at 192.168.95.248 	User-Password 	== 	test
	Edit 
<http://sip.wifirst.fr/phpmyadmin/tbl_change.php?db=radius&table=radcheck&token=e6aa5a03fd1e8e7625213e99620f1080&pos=0&session_max_rows=30&disp_direction=horizontal&repeat_cells=100&dontlimitchars=0&primary_key=+%60radcheck%60.%60id%60+%3D+5&sql_query=SELECT+%2A+FROM+%60radcheck%60&goto=sql.php> 
	Delete 
<http://sip.wifirst.fr/phpmyadmin/sql.php?db=radius&table=radcheck&token=e6aa5a03fd1e8e7625213e99620f1080&pos=0&session_max_rows=30&disp_direction=horizontal&repeat_cells=100&dontlimitchars=0&sql_query=DELETE+FROM+%60radcheck%60+WHERE+%60radcheck%60.%60id%60+%3D+5+LIMIT+1&zero_rows=The+row+has+been+deleted&goto=sql.php%3Fdb%3Dradius%26table%3Dradcheck%26token%3De6aa5a03fd1e8e7625213e99620f1080%26pos%3D0%26session_max_rows%3D30%26disp_direction%3Dhorizontal%26repeat_cells%3D100%26dontlimitchars%3D0%26sql_query%3DSELECT%2B%252A%2BFROM%2B%2560radcheck%2560%26zero_rows%3DThe%2Brow%2Bhas%2Bbeen%2Bdeleted%26goto%3Dtbl_properties_structure.php> 
	5 	bob at 192.168.95.248 	Auth-Type 	:= 	Digest


and I have this with freeradius -X

/rlm_sql (sql): Released sql socket id: 1
  modcall[authorize]: module "sql" returns ok for request 13
modcall: leaving group authorize (returns ok) for request 13
  rad_check_password:  Found Auth-Type Digest
auth: type "digest"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 13
ERROR: You set 'Auth-Type = Digest' for a request that did not contain 
any digest attributes!
  modcall[authenticate]: module "digest" returns invalid for request 13
modcall: leaving group authenticate (returns invalid) for request 13
auth: Failed to validate the user.
Login incorrect: [bob at 192.168.95.248/<no User-Password attribute>] (from 
client wifirst port 0)
Delaying request 13 for 1 seconds/

Otherwise, I'm using the radius conf file from 
http://www.openser.org/docs/openser-radius-1.0.x.html and I have 
activated the sql module




Dan-Cristian Bogos a écrit :
> Hi Marc,
>
> can u post somewhere your freeradius configuration(radius.conf+sql.conf)?
> Do u have in your radcheck table username "bob at 192.168.95.248"? Also
> you should use the digest module to sanitize your message before
> sending it to rlm_sql.
>
> I will be out for the rest of the day, so earlier you should expect an
> aswer from me tomorrow morning.
>
> DanB
>
> On 7/24/07, Marc LEURENT <lftsy at free.fr> wrote:
>> Good Morning,
>> I've followed the tutorial, debugging it because of the upgrade de 
>> 1.2.1,
>> but now freeradius doesn't want to register me...
>> Any idea?
>>
>> Thanks
>>
>>
>> modcall[authorize]: module "mschap" returns noop for request 35
>>   modcall[authorize]: module "digest" returns noop for request 35
>>     rlm_realm: Looking up realm "192.168.95.248" for User-Name =
>> "bob at 192.168.95.248"
>>     rlm_realm: No such realm "192.168.95.248"
>>   modcall[authorize]: module "suffix" returns noop for request 35
>>   rlm_eap: No EAP-Message, not doing EAP
>>   modcall[authorize]: module "eap" returns noop for request 35
>> radius_xlat:  'bob at 192.168.95.248'
>> rlm_sql (sql): sql_set_user escaped user --> 'bob at 192.168.95.248'
>> radius_xlat:  'SELECT id, UserName, Attribute, Value, op           FROM
>> radcheck           WHERE Username = 'bob at 192.168.95.248'           ORDER
>> BY id'
>> rlm_sql (sql): Reserving sql socket id: 4
>> rlm_sql_mysql: query:  SELECT id, UserName, Attribute, Value,
>> op           FROM radcheck           WHERE Username =
>> 'bob at 192.168.95.248'           ORDER BY id
>> radius_xlat:  'SELECT
>> radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op 
>>
>> FROM radgroupcheck,usergroup WHERE usergroup.Username =
>> 'bob at 192.168.95.248' AND usergroup.GroupName = radgroupcheck.GroupName
>> ORDER BY radgroupcheck.id'
>> rlm_sql_mysql: query:  SELECT
>> radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op 
>>
>> FROM radgroupcheck,usergroup WHERE usergroup.Username =
>> 'bob at 192.168.95.248' AND usergroup.GroupName = radgroupcheck.GroupName
>> ORDER BY radgroupcheck.id
>> radius_xlat:  'SELECT id, UserName, Attribute, Value, op           FROM
>> radreply           WHERE Username = 'bob at 192.168.95.248'           ORDER
>> BY id'
>> rlm_sql_mysql: query:  SELECT id, UserName, Attribute, Value,
>> op           FROM radreply           WHERE Username =
>> 'bob at 192.168.95.248'           ORDER BY id
>> radius_xlat:  'SELECT
>> radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op 
>>
>> FROM radgroupreply,usergroup WHERE usergroup.Username =
>> 'bob at 192.168.95.248' AND usergroup.GroupName = radgroupreply.GroupName
>> ORDER BY radgroupreply.id'
>> rlm_sql_mysql: query:  SELECT
>> radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op 
>>
>> FROM radgroupreply,usergroup WHERE usergroup.Username =
>> 'bob at 192.168.95.248' AND usergroup.GroupName = radgroupreply.GroupName
>> ORDER BY radgroupreply.id
>> rlm_sql (sql): Released sql socket id: 4
>>   modcall[authorize]: module "sql" returns ok for request 35
>> modcall: leaving group authorize (returns ok) for request 35
>> auth: type Local
>> auth: No User-Password or CHAP-Password attribute in the request
>> auth: Failed to validate the user.
>> Login incorrect: [bob at 192.168.95.248/<no User-Password attribute>] (from
>> client wifirst port 0)
>> Delaying request 35 for 1 seconds
>> Finished request 35
>> Going to the next request
>> Waking up in 4 seconds.
>>
>> Dan-Cristian Bogos a écrit :
>> > Yeah,
>> >
>> > u must tell openser which request to account by setting the flag for
>> > accounting (eg: INVITE and BYE methods).
>> >
>> > I would suggest checking the following docs before going further:
>> >
>> > http://www.openser.org/docs/modules/1.2.x/acc.html#AEN295
>> > http://www.openser.org/docs/openser-radius-1.0.x.html
>> >
>> > DanB
>> >
>> > On 7/23/07, Marc LEURENT <lftsy at free.fr> wrote:
>> >> I've checked in the radiusclient-ng config file, the acctserver is
>> >> configured.
>> >> But when I use 'ngrep port 1813' I can't see anything coming
>> >> What do you mean by setflag for accounting?
>> >> Is there something to add in the openser config file?
>> >>
>> >> Thanks,
>> >> Best Regards
>> >>
>> >> Marc
>> >>
>> >> Dan-Cristian Bogos wrote:
>> >> > Can u see accounting packets coming in FreeRADIUS (in the case 
>> you are
>> >> > running this in debug mode it should be easier for you to
>> >> > troubleshoot)? Did u mark the packets to be accounted by openser
>> >> > (setflag for accounting). U must inform also radiusclient-ng 
>> where to
>> >> > send the accounting packets.
>> >> >
>> >> > Let me know what u got.
>> >> >
>> >> > DanB
>> >> >
>> >> > On 7/23/07, Marc LEURENT <lftsy at free.fr> wrote:
>> >> >> My first problem is that accounting doesn't work...
>> >> >> I have followed the
>> >> >> http://www.openser.org/docs/openser-radius-1.0.x.html tutorial,
>> >> >> compiling freeradius by hand, adding the radius acc
>> >> >> but openser doesn't seem to send accounting request to 
>> freeradius...
>> >> >> (but auth works very well)
>> >> >>
>> >> >> My openser.cfg looklikes:
>> >> >>
>> >> >> loadmodule "acc.so"                     # Accounting Module
>> >> >> modparam("acc", "radius_config",
>> >> >> "/etc/radiusclient-ng/radiusclient.conf")
>> >> >>
>> >> >> Is there something else to add??
>> >> >> Thanks
>> >> >>
>> >> >>
>> >> >>
>> >> >>
>> >> >> Dan-Cristian Bogos wrote:
>> >> >> > Hi Marc,
>> >> >> >
>> >> >> > I am using the scenario u have specified.
>> >> >> > What do u mean by "Freeradius doesn't work anymore". Can u 
>> post us
>> >> >> > some logs? A good point to start troubleshooting would be 
>> starting
>> >> >> > FreeRADIUS in debug mode (freeradius -X).
>> >> >> >
>> >> >> > Cheers,
>> >> >> > DanB
>> >> >> >
>> >> >> > On 7/23/07, Marc LEURENT <lftsy at free.fr> wrote:
>> >> >> >> Good Morning everybody,
>> >> >> >> I hope you had a pleasant week-end!
>> >> >> >> I'm trying to set up an infrastructure for prepaid calls for my
>> >> >> school
>> >> >> >> working with OpenSER + Freeradius + CDRTool
>> >> >> >> OpenSER is working well with FreeRadius, but I have followed 
>> the
>> >> >> CDRTool
>> >> >> >> installation tutorial and now Freeradius doesn't work 
>> anymore...
>> >> >> >> Both OpenSER and freeradius data is stored in an mysql
>> >> database, but
>> >> >> >> when I was installing CDRTool, I had to modify their database
>> >> >> following
>> >> >> >> http://cdrtool.ag-projects.com/doc/INSTALL.txt
>> >> >> >>
>> >> >> >> Is there someone who succeed in setting up this installation...
>> >> >> >>
>> >> >> >> Any Help or just any hope to succeed?
>> >> >> >> PS: I'm using OpenSER 1.2.1-1 compiled by hand, Freeradius 
>> 1.1.3-3
>> >> >> and
>> >> >> >> cdrtool_5.2.1_all.deb
>> >> >> >>
>> >> >> >> Marc
>> >> >> >>
>> >> >> >>
>> >> >> >> _______________________________________________
>> >> >> >> Users mailing list
>> >> >> >> Users at openser.org
>> >> >> >> http://openser.org/cgi-bin/mailman/listinfo/users
>> >> >> >>
>> >> >>
>> >>
>>




More information about the Users mailing list