January 2011 - Freeradius-Users - lists.freeradius.org

FreeRadius + Sql Server
by Maiquel Consalter 18 Jan '11

18 Jan '11

Hello I wonder if I have to implement freeradius + sql server. I tried to find on google but not found. Could someone help me.? Thanks. -- Att, Maiquel

2 4

modules directory
by Christ Schlacta 18 Jan '11

18 Jan '11

I've found something odd in regard to the modules directory. I ended up needing to use checkval module for ldap authentication to work properly for me. the documentation I found said to place the following in config files: checkval { item-name = Calling-Station-Id check-name = Calling-Station-Id data-type = string notfound-reject = no } at the location I wanted the check to occur, but instead I ended up needing to use just: checkval because the above code was located in modules/checkval . The question is at this point, how could I, for example, have two different checkval checks? suppose I want to check an additional attribute? I recon I need a new file, but I'm not sure if it matters what I call the new file, or, for that matter, I'm not sure what to put inside the new file, except that I'm sure it must look very similar to that above. if someone could explain the specifics of this, or tell me where to find them explained, I would much appreciate the help. one more question: can there be multiples of ANY module specified? for example, can I use two different ldap or sql modules if I were to need to (just as a bad example, I propose: 1 radius server, 2 wlans with different user bases that can't be merged into one directory for whatever reasons).

4 4

Sub-TLV's
by David Peterson 18 Jan '11

18 Jan '11

Is there support for Sub-TLV attributes currently and if so, can someone point me to documentation on how to format a reply for them? David

4 18

freeradius 2.1.10 with oracle instantclient11.2
by Waqas Toor 18 Jan '11

18 Jan '11

Dear Community, I am trying to compile freeradius2.1.10 with oracle instantclient11.2 and having problems where it is not detecting oracle libraries and header files. where the oracle home is /opt/instantclient_11_2 there are two steps that I am trying and both are failing. a: standard compile # ./configure --with-experimental-modules --with-oracle-include-dir=/opt/instantclient_11_2/sdk/include --with-oracle-lib-dir=/opt/instantclient_11_2 --with-oracle-home-dir=/opt/instantclient_11_2 and getting this error === configuring in ./drivers/rlm_sql_oracle (/opt/freeradius-server-2.1.10/src/modules/rlm_sql/./drivers/rlm_sql_oracle) configure: running /bin/sh ./configure '--prefix=/usr/local' '--with-experimental-modules' '--with-oracle-include-dir=/opt/instantclient_11_2/sdk/include' '--with-oracle-lib-dir=/opt/instantclient_11_2' '--with-oracle-home-dir=/opt/instantclient_11_2' '--enable-ltdl-install' --cache-file=/dev/null --srcdir=. checking for oci.h... checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed yes configure: WARNING: oracle libraries not found. Use --with-oracle-lib-dir=<path>. configure: WARNING: silently not building rlm_sql_oracle. configure: WARNING: FAILURE: rlm_sql_oracle requires: libclntsh libnnz10. configure: creating ./config.status config.status: creating Makefile b: in freeradius-server-2.1.10/src/modules/rlm_sql/drivers/rlm_sql_oracle changed the Makefile.in and setting RLM_SQL_CFLAGS = -I/opt/instantclient_11_2/sdk/include $(INCLTDL) RLM_SQL_LIBS = -L/opt/instantclient_11_2 and then make. but still getting the error. any pointers . Thanks Waqas

3 12

cleaning house on radius server?
by Christ Schlacta 18 Jan '11

18 Jan '11

I've got a radius server up and running, and I want to clean up my configuration as much as possible. is it a safe assumption that if I remove a file (actually move it out of the way) and attempt to authenticate a client that if the client can successfully authenticate that everything is working? is it also safe to assume that any file with no uncommented lines is also safe to remove? I'm most interrested in removing the SQL directories and all the unused modules in the modules directory.

6 6

acc:acc_aaa_request: failed to add Contact, 17
by happyeveryday1025 18 Jan '11

18 Jan '11

Hello: When I am do accounting with opensips1.6.4+freeradius2.1.10+radiusclient0.5.6,I meet the following error: acc:acc_aaa_request: failed to add Contact, 17 I kmow I need to define the attribute "Contact"in the dictionary file "dictionary.opensips",but I can not find the value and type of the attribute "contact",can anyone tell me the value and types of the attribute?Thanks a lot.

2 1

Authcustom/authpipe on courier
by Philley Kalisha Mandiza 18 Jan '11

18 Jan '11

Hi, Am new to courier, but i want to set up a courier mail server where i would like to use authpipe program for authentication. i have never done this before and i dont know how to go about this. i want to authenticate users from a diffrent file not /etc/passwd and not mysql. anyone with help, Philly

1 0

accounting with opensip and radius;error-cause=invite
by happyeveryday1025 17 Jan '11

17 Jan '11

Hello: I am using opensips1.6.4+freeradius2.1.10+radiusclient0.5.6 to do accounting when two X_Lite registered in opensips make a call,Now I define the attribute "Contact"as followed: ATTRIBUTE Contact 100 string When I make a call, the radius server has a response, rad_recv: Accounting-Request packet from host 192.168.118.39 port 50962, id=179, length=288 Acct-Status-Type = Start Service-Type = IAPP-Register EAP-Key-Name = "\000\000\000\310" Error-Cause = Invite Attr-55 = 0x4d343460 Sip-From-Tag = "1e356213" Sip-To-Tag = "c73cd9ce3e9841fbb233a3f65b14b5ee" Acct-Session-Id = "NDgzODg4NGRhYzMwYTQ0MjBmNTlmNTlmNmVkM2U0ZGE." User-Name = "3901(a)192.168.118.39" Calling-Station-Id = "sip:3901@192.168.118.39" Called-Station-Id = "sip:3902@192.168.118.39" Sip-Translated-Request-URI = "sip:192.168.118.41:11520" Framed-IPv6-Pool = "<sip:3901@192.168.118.41:44838>" NAS-Port = 5060 Acct-Delay-Time = 0 NAS-IP-Address = 192.168.118.39 # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 5060,Client-IP-Address = 192.168.118.39,NAS-IP-Address = 192.168.118.39,Acct-Session-Id = "NDgzODg4NGRhYzMwYTQ0MjBmNTlmNTlmNmVkM2U0ZGE.",User-Name = "3901(a)192.168.118.39"' [acct_unique] Acct-Unique-Session-ID = "d7155edddc677690". ++[acct_unique] returns ok [suffix] Looking up realm "192.168.118.39" for User-Name = "3901(a)192.168.118.39" [suffix] No such realm "192.168.118.39" ++[suffix] returns noop ++[files] returns noop # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default +- entering group accounting {...} [detail] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /usr/local/var/log/radius/radacct/192.168.118.39/detail-20110117 [detail] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.118.39/detail-20110117 [detail] expand: %t -> Mon Jan 17 20:21:52 2011 ++[detail] returns ok ++[unix] returns ok [radutmp] expand: /usr/local/var/log/radius/radutmp -> /usr/local/var/log/radius/radutmp [radutmp] expand: %{User-Name} ->3901(a)192.168.118.39 ++[radutmp] returns ok ++[exec] returns noop [attr_filter.accounting_response] expand: %{User-Name} ->3901(a)192.168.118.39 attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 179 to 192.168.118.39 port 50962 Finished request 0. Cleaning up request 0 ID 179 with timestamp +32 Going to the next request Ready to process requests. You can see that there is some error information ,such as error-cause=invite;and when the call is terminated,the opensips receives a bye message,but the radius server has no response,can anyone help to figure out the error please?Thank you very much.

1 0

来自happyeveryday1025@126.com的邮件
by happyeveryday1025 17 Jan '11

17 Jan '11

Hello: I am using opensips1.6.4+freeradius2.1.10+radiusclient0.5.6 to do accounting when two X_Lite registered in opensips make a call,Now I define the attribute "Contact"as followed: ATTRIBUTE Contact 100 string When I make a call, the radius server has a response, rad_recv: Accounting-Request packet from host 192.168.118.39 port 50962, id=179, length=288 Acct-Status-Type = Start Service-Type = IAPP-Register EAP-Key-Name = "\000\000\000\310" Error-Cause = Invite Attr-55 = 0x4d343460 Sip-From-Tag = "1e356213" Sip-To-Tag = "c73cd9ce3e9841fbb233a3f65b14b5ee" Acct-Session-Id = "NDgzODg4NGRhYzMwYTQ0MjBmNTlmNTlmNmVkM2U0ZGE." User-Name = "3901(a)192.168.118.39" Calling-Station-Id = "sip:3901@192.168.118.39" Called-Station-Id = "sip:3902@192.168.118.39" Sip-Translated-Request-URI = "sip:192.168.118.41:11520" Framed-IPv6-Pool = "<sip:3901@192.168.118.41:44838>" NAS-Port = 5060 Acct-Delay-Time = 0 NAS-IP-Address = 192.168.118.39 # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 5060,Client-IP-Address = 192.168.118.39,NAS-IP-Address = 192.168.118.39,Acct-Session-Id = "NDgzODg4NGRhYzMwYTQ0MjBmNTlmNTlmNmVkM2U0ZGE.",User-Name = "3901(a)192.168.118.39"' [acct_unique] Acct-Unique-Session-ID = "d7155edddc677690". ++[acct_unique] returns ok [suffix] Looking up realm "192.168.118.39" for User-Name = "3901(a)192.168.118.39" [suffix] No such realm "192.168.118.39" ++[suffix] returns noop ++[files] returns noop # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default +- entering group accounting {...} [detail] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /usr/local/var/log/radius/radacct/192.168.118.39/detail-20110117 [detail] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.118.39/detail-20110117 [detail] expand: %t -> Mon Jan 17 20:21:52 2011 ++[detail] returns ok ++[unix] returns ok [radutmp] expand: /usr/local/var/log/radius/radutmp -> /usr/local/var/log/radius/radutmp [radutmp] expand: %{User-Name} ->3901(a)192.168.118.39 ++[radutmp] returns ok ++[exec] returns noop [attr_filter.accounting_response] expand: %{User-Name} ->3901(a)192.168.118.39 attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 179 to 192.168.118.39 port 50962 Finished request 0. Cleaning up request 0 ID 179 with timestamp +32 Going to the next request Ready to process requests. You can see that there is some error information ,such as error-cause=invite;and when the call is terminated,the opensips receives a bye message,but the radius server has no response,can anyone help to figure out the error please?Thank you very much.

1 0

problem in opensips+radius accounting
by happyeveryday1025 17 Jan '11

17 Jan '11

Hello: I am doing accounting with opensips+freeradius+radiusclient-ng.Now when i make a call using X-Lite,the radius server has response,but the accounting message is not right,the attribute "service-type" and "eap-service-type"is present in the log,I dont know what is the matter,how to set service-type?Your timely help will be greatly appreciated. Here is the response of the freeradius: Acct-Status-Type = Start User-Service-Type = IAPP-Register EAP-Key-Name = "\000\000\000\310" Error-Cause = Invite Attr-55 = 0x4d33d5c7 Sip-From-Tag = "2c29a446" Sip-To-Tag = "1fb68f517efd4f6682a527d79cf5809b" Acct-Session-Id = "YzIxMDNjMTRlNTUxYTJiYmRkNzhkYmU4MThmZWM3OWQ." User-Name = "3901(a)192.168.118.39" Calling-Station-Id = "sip:3901@192.168.118.39" Called-Station-Id = "sip:3902@192.168.118.39" Sip-Translated-Request-URI = "sip:192.168.118.41:16591" Attr-223 = 0x3c7369703a33393031403139322e3136382e3131382e34313a33323435343e NAS-Port = 5060 Acct-Delay-Time = 0 NAS-IP-Address = 192.168.118.39 The config file of opensips related to radius is as fllowed: # ----- acc params ----- /* what sepcial events should be accounted ? */ modparam("acc", "early_media", 1) modparam("acc", "report_ack", 1) modparam("acc", "report_cancels", 1) /* by default ww do not adjust the direct of the sequential requests. if you enable this parameter, be sure the enable "append_fromtag" in "rr" module */ modparam("acc", "detect_direction", 0) /* account triggers (flags) */ modparam("acc", "failed_transaction_flag", 3) modparam("acc", "log_flag", 1) modparam("acc", "log_missed_flag", 2) /* uncomment the following lines to enable DB accounting also */ #modparam("acc", "db_flag", 1) #modparam("acc", "db_missed_flag", 2) modparam("acc","aaa_flag",2) modparam("acc","aaa_missed_flag",3) modparam("acc","service_type",15) #modparam("aaa_radius", "radius_config", "/usr/local/etc/radiusclient-ng/radiusclient.conf") modparam("acc","aaa_url","radius:/usr/local/etc/radiusclient-ng/radiusclient.conf") modparam("acc", "aaa_extra", "User-Name=$Au ;\ Calling-Station-Id=$from;\ Called-Station-Id=$to ;\ Sip-Translated-Request-URI=$ruri;\ Sip-RPid=$avp(s:rpid);\ Canonical-URI=$avp(s:can_uri);\ Billing-Party=$avp(s:billing_party);\ Divert-Reason=$avp(s:divert_reason);\ X-RTP-Stat=$hdr(X-RTP-Stat);\ Contact=$hdr(contact);\ Event=$hdr(event);\ SIP-Proxy-IP=$avp(s:sip_proxy_ip);\ ENUM-TLD=$avp(s:enum_tld)") The dictionary file of opensips is as followed: #### Attributes ### ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius ATTRIBUTE Sip-Group 211 string # Proprietary, group_radius ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius ATTRIBUTE SIP-AVP 225 string # Proprietary, avp_radius ATTRIBUTE Sip-Call-Duration 227 integer ATTRIBUTE Sip-Call-Setuptime 228 integer ###lines add### ATTRIBUTE Sip-Method 101 integer ATTRIBUTE Sip-Response-Code 102 integer # Schulzrinne, acc ATTRIBUTE Sip-To-Tag 104 string # Schulzrinne, acc ATTRIBUTE Sip-From-Tag 105 string # Schulzrinne, acc ATTRIBUTE Sip-Translated-Request-URI 107 string # Proprietary, acc ATTRIBUTE Source-IP 214 string ATTRIBUTE Source-Port 215 string ATTRIBUTE Sip-Src-IP 108 string # Proprietary, acc ATTRIBUTE Sip-Src-Port 109 string # Proprietary, acc ATTRIBUTE Digest-Response 206 string # Sterman, auth_radius ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius ATTRIBUTE Sip-Group 211 string # Proprietary, group_radius ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius ATTRIBUTE SIP-AVP 225 string # Proprietary, avp_radius ATTRIBUTE Digest-Realm 1063 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce 1064 string # Sterman, auth_radius ATTRIBUTE Digest-Method 1065 string # Sterman, auth_radius ATTRIBUTE Digest-URI 1066 string # Sterman, auth_radius ATTRIBUTE Digest-QOP 1067 string # Sterman, auth_radius ATTRIBUTE Digest-Algorithm 1068 string # Sterman, auth_radius ATTRIBUTE Digest-Body-Digest 1069 string # Sterman, auth_radius ATTRIBUTE Digest-CNonce 1070 string # Sterman, auth_radius ATTRIBUTE Digest-Nonce-Count 1071 string # Sterman, auth_radius ATTRIBUTE Digest-User-Name 1072 string # Sterman, auth_radius ATTRIBUTE User-Name 1 string ATTRIBUTE Called-Station-Id 30 string ATTRIBUTE Calling-Station-Id 31 string ATTRIBUTE Canonical-URI 216 string ATTRIBUTE Delay-Time 217 string ATTRIBUTE Divert-Reason 219 string ATTRIBUTE X-RTP-Stat 220 string ATTRIBUTE From-Header 221 string ATTRIBUTE User-Agent 222 string ATTRIBUTE Contact 223 string ATTRIBUTE Event 224 string ATTRIBUTE SIP-Proxy-IP 231 string ATTRIBUTE ENUM-TLD 232 string ATTRIBUTE Billing-Party 218 string ATTRIBUTE Acct-Status-Type 40 integer ATTRIBUTE Event-Timestamp 230 string ATTRIBUTE Acct-Session-Id 44 string ### Service-Type Values ### VALUE Service-Type Group-Check 12 # Proprietary, group_radius VALUE Service-Type SIP-Caller-AVPs 30 # Proprietary, avp_radius VALUE Service-Type SIP-Callee-AVPs 31 # Proprietary, avp_radius VALUE Service-Type Login-User 1 VALUE Service-Type Framed-User 2 VALUE Service-Type Callback-Login-User 3 VALUE Service-Type Callback-Framed-User 4 VALUE Service-Type Outbound-User 5 VALUE Service-Type Administrative-User 6 VALUE Service-Type NAS-Prompt-User 7 VALUE Service-Type Authenticate-Only 8 VALUE Service-Type Call-Check 10 VALUE Service-Type SIP-Session 15 ### Sip-Method Values ### #VALUE Sip-Method Undefined 0 VALUE Sip-Method Invite 1 VALUE Sip-Method Cancel 2 VALUE Sip-Method Ack 4 VALUE Sip-Method Bye 8 VALUE Sip-Method Info 16 VALUE Sip-Method Options 32 VALUE Sip-Method Update 64 VALUE Sip-Method Register 128 VALUE Sip-Method Message 256 VALUE Sip-Method Subscribe 512 VALUE Sip-Method Notify 1024 VALUE Sip-Method Prack 2048 VALUE Sip-Method Refer 4096 VALUE Sip-Method Other 8192 ####acct-status##### VALUE Acct-Status-Type Start 1 # RFC2866, acc VALUE Acct-Status-Type Stop 2 # RFC2866, acc VALUE Acct-Status-Type Failed 15 # RFC2866, acc

1 0