>You are (again) sending a request without Digest-Attributes. Try sending<br>
>one with them.<br>
<br>
>Ivan Kalik<br>>Kalik Informatika ISP<br><br>hi,<br> I check all the clients attributes and start sending the Digest attributes.. now the problem is I can't get those attributes in my perl code by accessing using RAD_REQUEST or RAD_CHECK, so that I can calculate my ha1, ha2 for md5 encryption.<br>
<br>Please help.<br><br>Output log file when run in debug mode by using radiusd -X<br><br>rad_recv: Access-Request packet from host <a href="http://192.168.1.227">192.168.1.227</a> port 32817, id=222, length=262<br> User-Name = "<a href="mailto:john@192.168.1.227">john@192.168.1.227</a>"<br>
Digest-Attributes = "\n\006john"<br> Digest-Attributes = "\001\017192.168.1.227"<br> Digest-Attributes = "\002*48281f56caacb6aa62fc3bb31ec98146efeaae15"<br> Digest-Attributes = "\004\023sip:<a href="http://192.168.1.227">192.168.1.227</a>"<br>
Digest-Attributes = "\003\nREGISTER"<br> Digest-Response = "9ae01536efc46358e61f2fe362552af4"<br> Service-Type = SIP<br> Sip-URI-User = "john"<br> Cisco-AVPair = "call-id=<a href="mailto:8717e9ec07014e138298c43a5dcdd370@192.168.1.193">8717e9ec07014e138298c43a5dcdd370@192.168.1.193</a>"<br>
NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br> NAS-Port = 5060<br>+- entering group authorize<br>++[preprocess] returns ok<br>perl_pool: item 0x8d08568 asigned new request. Handled so far: 1<br>
found interpetator at address 0x8d08568<br>rlm_perl: ###############################################################<br>rlm_perl: RAD_REQUEST: Digest-Response = 9ae01536efc46358e61f2fe362552af4<br>rlm_perl: RAD_REQUEST: Service-Type = SIP<br>
rlm_perl: RAD_REQUEST: Cisco-AVPair = call-id=<a href="mailto:8717e9ec07014e138298c43a5dcdd370@192.168.1.193">8717e9ec07014e138298c43a5dcdd370@192.168.1.193</a><br>rlm_perl: RAD_REQUEST: User-Name = <a href="mailto:john@192.168.1.227">john@192.168.1.227</a><br>
rlm_perl: RAD_REQUEST: Sip-URI-User = john<br>rlm_perl: RAD_REQUEST: NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br>rlm_perl: RAD_REQUEST: NAS-Port = 5060<br>rlm_perl: RAD_REQUEST: Digest-Attributes = ARRAY(0x8df353c)<br>
rlm_perl: ###############################################################<br>rlm_perl: Added pair Digest-Response = 9ae01536efc46358e61f2fe362552af4<br>rlm_perl: Added pair Service-Type = SIP<br>rlm_perl: Added pair Cisco-AVPair = call-id=<a href="mailto:8717e9ec07014e138298c43a5dcdd370@192.168.1.193">8717e9ec07014e138298c43a5dcdd370@192.168.1.193</a><br>
rlm_perl: Added pair User-Name = <a href="mailto:john@192.168.1.227">john@192.168.1.227</a><br>rlm_perl: Added pair Sip-URI-User = john<br>rlm_perl: Added pair NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br>
rlm_perl: Added pair NAS-Port = 5060<br>rlm_perl: Added pair Digest-Attributes = \n\006john<br>rlm_perl: Added pair Digest-Attributes = \001\017192.168.1.227<br>rlm_perl: Added pair Digest-Attributes = \002*48281f56caacb6aa62fc3bb31ec98146efeaae15<br>
rlm_perl: Added pair Digest-Attributes = \004\023sip:<a href="http://192.168.1.227">192.168.1.227</a><br>rlm_perl: Added pair Digest-Attributes = \003\nREGISTER<br>rlm_perl: Added pair Reply-Message = Incorrect Password<br>
perl_pool total/active/spare [32/0/32]<br>Unreserve perl at address 0x8d08568<br>++[perl] returns ok<br>rlm_digest: Adding Auth-Type = DIGEST<br>++[digest] returns ok<br> rlm_realm: Looking up realm "<a href="http://192.168.1.227">192.168.1.227</a>" for User-Name = "<a href="mailto:john@192.168.1.227">john@192.168.1.227</a>"<br>
rlm_realm: No such realm "<a href="http://192.168.1.227">192.168.1.227</a>"<br>++[suffix] returns noop<br> rlm_eap: No EAP-Message, not doing EAP<br>++[eap] returns noop<br>++[files] returns noop<br>++[expiration] returns noop<br>
++[logintime] returns noop<br> rad_check_password: Found Auth-Type DIGEST<br>auth: type "digest"<br>+- entering group authenticate<br>rlm_digest: Cleartext-Password or Digest-HA1 is required for authentication.<br>
++[digest] returns invalid<br>auth: Failed to validate the user.<br>Login incorrect: [<a href="http://john@192.168.1.227/">john@192.168.1.227/</a><via Auth-Type = DIGEST>] (from client <a href="http://192.168.1.227">192.168.1.227</a> port 5060)<br>
Found Post-Auth-Type Reject<br>+- entering group REJECT<br> expand: %{User-Name} -> <a href="mailto:john@192.168.1.227">john@192.168.1.227</a><br> attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>
Delaying reject of request 0 for 1 seconds<br>Going to the next request<br>Waking up in 0.9 seconds.<br>rad_recv: Access-Request packet from host <a href="http://192.168.1.227">192.168.1.227</a> port 32818, id=223, length=262<br>
User-Name = "<a href="mailto:john@192.168.1.227">john@192.168.1.227</a>"<br> Digest-Attributes = "\n\006john"<br> Digest-Attributes = "\001\017192.168.1.227"<br> Digest-Attributes = "\002*48281f56caacb6aa62fc3bb31ec98146efeaae15"<br>
Digest-Attributes = "\004\023sip:<a href="http://192.168.1.227">192.168.1.227</a>"<br> Digest-Attributes = "\003\nREGISTER"<br> Digest-Response = "9ae01536efc46358e61f2fe362552af4"<br>
Service-Type = SIP<br> Sip-URI-User = "john"<br> Cisco-AVPair = "call-id=<a href="mailto:8717e9ec07014e138298c43a5dcdd370@192.168.1.193">8717e9ec07014e138298c43a5dcdd370@192.168.1.193</a>"<br>
NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br> NAS-Port = 5060<br>+- entering group authorize<br>++[preprocess] returns ok<br>perl_pool: item 0x8e67348 asigned new request. Handled so far: 1<br>
found interpetator at address 0x8e67348<br>rlm_perl: ###############################################################<br>rlm_perl: RAD_REQUEST: Digest-Response = 9ae01536efc46358e61f2fe362552af4<br>rlm_perl: RAD_REQUEST: Service-Type = SIP<br>
rlm_perl: RAD_REQUEST: Cisco-AVPair = call-id=<a href="mailto:8717e9ec07014e138298c43a5dcdd370@192.168.1.193">8717e9ec07014e138298c43a5dcdd370@192.168.1.193</a><br>rlm_perl: RAD_REQUEST: User-Name = <a href="mailto:john@192.168.1.227">john@192.168.1.227</a><br>
rlm_perl: RAD_REQUEST: Sip-URI-User = john<br>rlm_perl: RAD_REQUEST: NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br>rlm_perl: RAD_REQUEST: NAS-Port = 5060<br>rlm_perl: RAD_REQUEST: Digest-Attributes = ARRAY(0x8efce0c)<br>
rlm_perl: ###############################################################<br>rlm_perl: Added pair Digest-Response = 9ae01536efc46358e61f2fe362552af4<br>rlm_perl: Added pair Service-Type = SIP<br>rlm_perl: Added pair Cisco-AVPair = call-id=<a href="mailto:8717e9ec07014e138298c43a5dcdd370@192.168.1.193">8717e9ec07014e138298c43a5dcdd370@192.168.1.193</a><br>
rlm_perl: Added pair User-Name = <a href="mailto:john@192.168.1.227">john@192.168.1.227</a><br>rlm_perl: Added pair Sip-URI-User = john<br>rlm_perl: Added pair NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br>
rlm_perl: Added pair NAS-Port = 5060<br>rlm_perl: Added pair Digest-Attributes = \n\006john<br>rlm_perl: Added pair Digest-Attributes = \001\017192.168.1.227<br>rlm_perl: Added pair Digest-Attributes = \002*48281f56caacb6aa62fc3bb31ec98146efeaae15<br>
rlm_perl: Added pair Digest-Attributes = \004\023sip:<a href="http://192.168.1.227">192.168.1.227</a><br>rlm_perl: Added pair Digest-Attributes = \003\nREGISTER<br>rlm_perl: Added pair Reply-Message = Incorrect Password<br>
perl_pool total/active/spare [32/0/32]<br>Unreserve perl at address 0x8e67348<br>++[perl] returns ok<br>rlm_digest: Adding Auth-Type = DIGEST<br>++[digest] returns ok<br> rlm_realm: Looking up realm "<a href="http://192.168.1.227">192.168.1.227</a>" for User-Name = "<a href="mailto:john@192.168.1.227">john@192.168.1.227</a>"<br>
rlm_realm: No such realm "<a href="http://192.168.1.227">192.168.1.227</a>"<br>++[suffix] returns noop<br> rlm_eap: No EAP-Message, not doing EAP<br>++[eap] returns noop<br>++[files] returns noop<br>++[expiration] returns noop<br>
++[logintime] returns noop<br> rad_check_password: Found Auth-Type DIGEST<br>auth: type "digest"<br>+- entering group authenticate<br>rlm_digest: Cleartext-Password or Digest-HA1 is required for authentication.<br>
++[digest] returns invalid<br>auth: Failed to validate the user.<br>Login incorrect: [<a href="http://john@192.168.1.227/">john@192.168.1.227/</a><via Auth-Type = DIGEST>] (from client <a href="http://192.168.1.227">192.168.1.227</a> port 5060)<br>
Found Post-Auth-Type Reject<br>+- entering group REJECT<br> expand: %{User-Name} -> <a href="mailto:john@192.168.1.227">john@192.168.1.227</a><br> attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>
Delaying reject of request 1 for 1 seconds<br>Going to the next request<br>Waking up in 0.4 seconds.<br>Sending delayed reject for request 0<br>Sending Access-Reject of id 222 to <a href="http://192.168.1.227">192.168.1.227</a> port 32817<br>
Reply-Message = "Incorrect Password"<br>Waking up in 0.4 seconds.<br>Sending delayed reject for request 1<br>Sending Access-Reject of id 223 to <a href="http://192.168.1.227">192.168.1.227</a> port 32818<br>
Reply-Message = "Incorrect Password"<br>Waking up in 4.5 seconds.<br>Cleaning up request 0 ID 222 with timestamp +3<br>Waking up in 0.4 seconds.<br>Cleaning up request 1 ID 223 with timestamp +3<br>Ready to process requests.<br>
<br>Thanks and Regards,<br>Elangbam Johnson<br><br>