June 2007 - Freeradius-Users - lists.freeradius.org

Re: 2.0.0 documentation for radiusd.conf
by Hugh Messenger 28 Jun '07

28 Jun '07

Alan DeKok <aland(a)deployingradius.com> said: > Hugh Messenger wrote: > ... > > I like this new unlang. > > Thanks. It makes me much more confident in releasing a 2.0 that is > *much* better than 1.1. My only suggestion is adding some examples to the man page, and/or in the config file comments. I'm sure you already intend to do this, just wanted to get it back on your radar. As has been noted by others, unlang is likely to top the league table of FMF's (Frequently Misunderstood Features). BTW, reproducing my 1.1.6 setup on 2.0.0 has actually been remarkably painless. In fact, the only problematic parts have been unrelated to core radiusd. It's just been things like getting PAM/winbind working on the test server (repeat after me, "install pam-devel BEFORE ./configure"), and some teething trouble with the MySQL sqlippool stuff, which Peter has jumped on. Good work, guys. > Alan DeKok. -- hugh

2 1

Re: 2.0.0-pre sqlippool
by Hugh Messenger 28 Jun '07

28 Jun '07

I said: > 2) Where can I find the sqlippool schema in 2.0.0? I went ahead and used the same schema from 1.1.6, seems to be OK. But I'd still like to know where to find it documented, for next time I need it. Anyway, there seems to be a few issues in the mysql-ippool-dialup.conf file. 1) In the allocate-find query ... allocate-find = "SELECT FramedIPAddress FROM radippool \ WHERE pool_name = '%{reply:Pool-Name}' AND expiry_time < NOW() \ ORDER BY pool_name, (UserName <> '%{User-Name}'), (CallingStationId <> '%{Calling-Station-Id}'), expiry_time \ LIMIT 1 \ FOR UPDATE" It seems to want %{check:Pool-Name}. Which is weird in itself, because 'man unlang' doesn't mention a 'check' list type, it should be 'request'. But that doesn't work! The only thing that seems to work in 2.0.0 is %{check:Pool-Name}. Can't just be %{Pool-Name}, either. 2) In the allocate-update query ... allocate-update = "UPDATE radippool \ SET NASIPAddress = '%{NAS-IP-Address}', pool_key = '${pool-key}', \ CallingStationId = '%{Calling-Station-Id}', UserName = '%{User-Name}', \ expiry_time = NOW() + INTERVAL ${lease-duration} SECOND \ WHERE FramedIPAddress = '%{FramedIPAddress}'" ... I have to change the %{FramedIPAddress} to %I to get this query to work. 3) Looks like the file is line wrapped at 80 chars, all long lines had to be joined back together. I don't know if this was an artifact of the way I checked out / updated in cvs, or if the file is actually like that. > -- hugh -- hugh

4 7

Re: 2.0.0-pre sqlippool
by Hugh Messenger 28 Jun '07

28 Jun '07

Arran Cudbard-Bell <A.Cudbard-Bell(a)sussex.ac.uk> said: > Remember to change any value substitutions to the new scheme > > %{%{foo}:-%{bar}} You just answered my rather long winded question about the 'deprecated' warnings, before I asked it. I've fixed all occurrences, and all warnings have gone away. I'll send Alan / Peter the fixed files when I've tested them a little more. There's a couple of other little gotchas I'm working on in the MySQL queries. > :) Indeed. > Arran Cudbard-Bell (A.Cudbard-Bell(a)sussex.ac.uk) > Authentication, Authorisation and Accounting Officer -- hugh, Everything And The Kitchen Sink Officer

1 0

Re: Help: eap/peap + 8021x + freeradius + Win2k3/AD
by Hugh Messenger 28 Jun '07

28 Jun '07

Hangjun He <elmerhe(a)yahoo.com.cn> said: > But there are no enough memory on my linux system to install samba. > > What should I do? Install more memory. As Alan said, you have to have Samba to do what you want to do. > John -- hugh

1 0

Easy way to detect EAP
by Arran Cudbard-Bell 27 Jun '07

27 Jun '07

Is there a more reliable method of detecting EAP then checking for the presence of an EAP-Message, I heard mention of an EAP-Type attribute... guessing this is set by the EAP module in authorize ? Is this a control attribute ? -- Arran Cudbard-Bell (A.Cudbard-Bell(a)sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900

4 9

Version 1.1.6 - Mac Address Authentication/vlan tagging
by Brian Ertel 27 Jun '07

27 Jun '07

Hello all, I wasn't able to find an answer to this on the archives. Now, here is the set up: Freeradius Ver. 1.1.6 on centOS V.5. I am testing a Cisco 2000 Series Wireless LAN Controller and am trying to figure out a way to put unknown users (via their MAC Address) into a limited access vlan. So here is the kicker, I have to be able to tell radius that users that fail to authenticate get tagged with a certain vlan tag (ie vlan ID of our limited access vlan) Can freeradius do that? Regards, Brian _____________________ Brian Ertel Network Administrator Amherst College 413-542-8320 bsertel(a)amherst.edu _____________________

4 7

Re: 2.0.0-pre sqlippool
by Hugh Messenger 27 Jun '07

27 Jun '07

Alan DeKok <aland(a)deployingradius.com> said: > Or, Framed-IP-Address. But I don't see that typo in the CVS head. My apologies, that was a typo in the email, not the config file. I'll do some more testing and get back to you on this one. > The lines are wrapped at 80 characters, with '\' at the end. It > should work, and it makes it easier to read. Nope, it was line breaking, as not all >80 lines were \ continued. Which was causing the module load to barf. Not an issue though, as the version Peter just committed doesn't have the same problem. > Alan DeKok. -- hugh

2 1

iprs and pri and phone numbers ...
by Karen R McArthur 27 Jun '07

27 Jun '07

How do I restrict access to a phone number via radius? I currently have the following. Radiusd restarts with no errors, however I can login using both numbers even when I am not in the ldap-group "admin". I have verified that the correct called-station-id is being passed into "rad_recv". Output from "radiusd -X" is attached. huntgroups: admin NAS-IP-Address == 192.168.1.1 Called-Station-Id == "xxxyyyy" public NAS-IP-Address == 192.168.1.1 Called-Station-Id == "xxxzzzz", Idle-Timeout = 3600 users: DEFAULT Huntgroup-Name == public Fall-Through = no DEFAULT Huntgroup-Name == admin, Ldap-Group == admin Fall-Through = no DEFAULT Auth-Type := Reject -- Karen R. McArthur <kmcarthu(a)bates.edu> Systems Administrator Information and Library Services, Bates College Lewiston, Maine 04240 USA ph:(207)786-8236 fax:(207)786-6057 If you find that everybody else is right and you're wrong, it might just be that you're thinking outside the box. The world is yet to catch up. /usr/sbin/radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/proxy.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/snmp.conf Config: including file: /etc/raddb/eap.conf Config: including file: /etc/raddb/sql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/radius" main: libdir = "/usr/lib" main: radacctdir = "/var/log/radius/radacct" main: hostname_lookups = yes main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/radiusd/radiusd.pid" main: user = "radiusd" main: group = "radiusd" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "before" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded LDAP ldap: server = "ldap.example.com" ldap: port = 714 ldap: net_timeout = 1 ldap: timeout = 4 ldap: timelimit = 3 ldap: identity = "cn=bindproxy,dc=example,dc=com" ldap: tls_mode = no ldap: start_tls = no ldap: tls_cacertfile = "/usr/share/ssl/certs/cacert.pem" ldap: tls_cacertdir = "/usr/share/ssl/certs/" ldap: tls_certfile = "/usr/share/ssl/certs/cert.pem" ldap: tls_keyfile = "/usr/share/ssl/certs/key.pem" ldap: tls_randfile = "(null)" ldap: tls_require_cert = "allow" ldap: password = "********" ldap: basedn = "ou=People,dc=example,dc=com" ldap: filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" ldap: base_filter = "(objectclass=radiusprofile)" ldap: default_profile = "(null)" ldap: profile_attribute = "(null)" ldap: password_header = "(null)" ldap: password_attribute = "(null)" ldap: access_attr = "(null)" ldap: groupname_attribute = "cn" ldap: groupmembership_filter = "(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))" ldap: groupmembership_attribute = "radiusGroupName" ldap: dictionary_mapping = "/etc/raddb/ldap.attrmap" ldap: ldap_debug = 0 ldap: ldap_connections_number = 5 ldap: compare_check_items = no ldap: access_attr_used_for_allow = yes ldap: do_xlat = yes rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaAcctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port conns: 0x82462f8 Module: Instantiated ldap (ldap) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 416 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 416 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy *:1814 Ready to process requests. rad_recv: Access-Request packet from host 192.168.1.1:1645, id=91, length=128 Framed-Protocol = PPP User-Name = "testuser" User-Password = "********" Calling-Station-Id = "aaabbbcccc" Called-Station-Id = "xxxyyyy" NAS-Port = 325 NAS-Port-Id = "Async0/325" NAS-Port-Type = Async Connect-Info = "46667/26400 V90" Service-Type = Framed-User NAS-IP-Address = 192.168.1.1 rad_rmspace_pair: User-Name now 'testuser' Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "testuser", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched DEFAULT at 154 users: Matched DEFAULT at 173 modcall[authorize]: module "files" returns ok for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for testuser radius_xlat: '(uid=testuser)' radius_xlat: 'ou=People,dc=example,dc=com' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to ldap.example.com, authentication 0 rlm_ldap: setting TLS CACert File to /usr/share/ssl/certs/cacert.pem rlm_ldap: setting TLS CACert File to /usr/share/ssl/certs/ rlm_ldap: setting TLS Cert File to /usr/share/ssl/certs/cert.pem rlm_ldap: setting TLS Key File to /usr/share/ssl/certs/key.pem rlm_ldap: bind as cn=bindproxy,dc=example,dc=com/******** to ldap.example.com rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in ou=People,dc=example,dc=com, with filter (uid=testuser) rlm_ldap: looking for check items in directory... rlm_ldap: Adding sambaAcctFlags as SMB-Account-CTRL-TEXT, value [U & op=21 rlm_ldap: Adding radiusCalledStationId as Called-Station-Id, value noAuth & op=21 rlm_ldap: looking for reply items in directory... rlm_ldap: user testuser authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type LDAP auth: type "LDAP" Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 0 rlm_ldap: - authenticate rlm_ldap: login attempt by "testuser" with password "********" rlm_ldap: user DN: uid=testuser,ou=People,dc=example,dc=com rlm_ldap: (re)connect to ldap.example.com, authentication 1 rlm_ldap: setting TLS CACert File to /usr/share/ssl/certs/cacert.pem rlm_ldap: setting TLS CACert File to /usr/share/ssl/certs/ rlm_ldap: setting TLS Cert File to /usr/share/ssl/certs/cert.pem rlm_ldap: setting TLS Key File to /usr/share/ssl/certs/key.pem rlm_ldap: bind as uid=testuser,ou=People,dc=example,dc=com/******** to ldap.example.com rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: user testuser authenticated succesfully modcall[authenticate]: module "ldap" returns ok for request 0 modcall: group Auth-Type returns ok for request 0 Login OK: [testuser] (from client dialin port 325 cli aaabbbcccc) Sending Access-Accept of id 91 to 192.168.1.1:1645 Framed-IP-Address = 255.255.255.254 Framed-MTU = 576 Service-Type = Framed-User Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Accounting-Request packet from host 192.168.1.1:1646, id=135, length=138 Acct-Session-Id = "000000B1" Framed-Protocol = PPP User-Name = "testuser" Acct-Authentic = RADIUS Acct-Status-Type = Start Calling-Station-Id = "aaabbbcccc" Called-Station-Id = "xxxyyyy" NAS-Port = 325 NAS-Port-Id = "Async0/325" NAS-Port-Type = Async Connect-Info = "46667/26400 V90" Service-Type = Framed-User NAS-IP-Address = 192.168.1.1 Acct-Delay-Time = 0 rad_rmspace_pair: User-Name now 'testuser' Processing the preacct section of radiusd.conf modcall: entering group preacct for request 1 modcall[preacct]: module "preprocess" returns noop for request 1 rlm_acct_unique: Hashing 'NAS-Port = 325,Client-IP-Address = dialin.example.com,NAS-IP-Address = 192.168.1.1,Acct-Session-Id = "000000B1",User-Name = "testuser"' rlm_acct_unique: Acct-Unique-Session-ID = "3657f327f87b9bd7". modcall[preacct]: module "acct_unique" returns ok for request 1 rlm_realm: No '@' in User-Name = "testuser", looking up realm NULL rlm_realm: No such realm "NULL" modcall[preacct]: module "suffix" returns noop for request 1 modcall[preacct]: module "files" returns noop for request 1 modcall: group preacct returns ok for request 1 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 1 radius_xlat: '/var/log/radius/radacct/dialin.example.com/detail-20070627' rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radius/radacct/dialin.example.com/detail-20070627 modcall[accounting]: module "detail" returns ok for request 1 modcall[accounting]: module "unix" returns ok for request 1 radius_xlat: '/var/log/radius/radutmp' radius_xlat: 'testuser' modcall[accounting]: module "radutmp" returns ok for request 1 modcall: group accounting returns ok for request 1 Sending Accounting-Response of id 135 to 192.168.1.1:1646 Finished request 1 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 91 with timestamp 46826839 Cleaning up request 1 ID 135 with timestamp 46826839 Nothing to do. Sleeping until we see a request.

2 1

[Fwd: Re: High load after restart]
by Brian Walters 27 Jun '07

27 Jun '07

On Wed, 2007-06-27 at 08:09 +0200, Alan DeKok wrote: > Brian Walters wrote: > > Has anyone noticed high processor loads after restarting freeradius > > 1.1.3 or 1.1.6? I've noticed this on Debian as well as CentOS 4.5. > > After sending it a HUP? Yes. Don't send it a HUP. I'm not sending it a HUP, I've read where that's bad. I'm using the redhat start up script and I'm using the restart option which kills the process, then starts it. Looking through the script functions it first gives freeradius a kill -TERM then a kill -KILL -- Brian

2 1

Altering the RADIUS dictionary files...
by liran tal 27 Jun '07

27 Jun '07

Hey everyone, I attempted at first to post this issue in openser's mailing list but have failed to get a reply and thus I am trying in freeradius's as I hope there are people here with similar experience. OpenSER is a SIP Proxy tool and I integrated it to send accounting records to a freeradius deployed server. To do that I had to patch a source copy of freeradius and provide both the radius server and client the appropriate dictionary files. What I would like is the ability to extend the formal SIP ATTRIBUTES with my own set. And so, I tried adding myself some custom attributes to both dictionary files, the one on the freeradius server and the other on openser's radiusclient-ng server and tried for example this: ATTRIBUTE Sip-Src-IP 900 string ATTRIBUTE Sip-Src-Port 901 string ATTRIBUTE Sip-Hdr-Contact 902 string ATTRIBUTE Sip-Hdr-UA 903 string ATTRIBUTE Sip-Hdr-From 904 string ATTRIBUTE Sip-Hdr-Media 905 string But this fails to work, openser/radiusclient-ng is sending accounting records still but specifically without the above attributes even when they are defined in both server and client's dictionary.sip files. My question is why, and how is it possible to do that? And the second question, is there a more extensive dictionary.sip file? Thanks, Liri.

3 4