hi Alan after apply ur patch on freeradius 1.1.6 , seems still response Access-reject rad_recv: Access-Request packet from host 10.0.248.250:1071, id=0, length=65 Digest-Method = "INVITE" Digest-URI = "sip:99177@10.0.248.250:5060" User-Name = "345111" rad_recv: Access-Request packet from host 10.0.248.250:1071, id=0, length=65 Sending Access-Reject of id 0 to 10.0.248.250 port 1071 patch : http://bugs.freeradius.org/showattachment.cgi?attach_id=222

kevinf wrote:

...

now I am using freeradius for SIP-inbound authentication. my SIP proxy support RFC4590 authenticaiton . does Freeradius support RFC4590 ? any config example ?

It doesn't support RFC 4590 right now. There is a patch on bugs.freeradius.org to add that support, but it breaks the *old* digest method.

The ideal is to have a patch where *both* digest methods work.

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html

seems a config issue ? rad_recv: Access-Request packet from host 10.0.248.250:1071, id=0, length=65 Digest-Method = "INVITE" Digest-URI = "sip:99177@10.0.248.250:5060" User-Name = "345111" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 modcall[authorize]: module "digest" returns noop for request 0 rlm_realm: No '@' in User-Name = "345111", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry 345111 at line 52 modcall[authorize]: module "files" returns ok for request 0 rlm_pap: No clear-text password in the request. Not performing PAP. modcall[authorize]: module "pap" returns noop for request 0 modcall: leaving group authorize (returns ok) for request 0 auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... rad_recv: Access-Request packet from host 10.0.248.250:1071, id=0, length=65 Sending Access-Reject of id 0 to 10.0.248.250 port 1071 Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 4 seconds... rad_recv: Access-Request packet from host 10.0.248.250:1071, id=0, length=65 Sending duplicate reply to client sbc:1071 - ID: 0 Re-sending Access-Reject of id 0 to 10.0.248.250 port 1071 --- Walking the entire request list --- Waking up in 3 seconds... rad_recv: Access-Request packet from host 10.0.248.250:1071, id=0, length=65 Sending duplicate reply to client sbc:1071 - ID: 0 Re-sending Access-Reject of id 0 to 10.0.248.250 port 1071> kevinf wrote:

...

hi Alan after apply ur patch on freeradius 1.1.6 , seems still response Access-reject

rad_recv: Access-Request packet from host 10.0248.250:1071, id=0, length=65 Digest-Method = "INVITE" Digest-URI = "sip:99177@10.0.248.250:5060" User-Name = "345111" rad_recv: Access-Request packet from host 10.0.248.250:1071, id=0, length=65 Sending Access-Reject of id 0 to 10.0.248.250 port 1071

How about supplying the *full* debugging as suggested in the FAQ, README, INSTALL, "man" page, and daily on this list?

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html