On Dec 11, 2015, at 10:16 PM, fred diziel <freddiziel@hotmail.co.id> wrote:
I have two user IDs, user A is used for the network, and user B is for the SIP ID. Let's say the user is Alice, first, Alice will be authenticated and authorized to use the network with user A ID.
OK.
After Alice is connected to the network, Alice then tries to connect to the SIP server with user A ID.
Why?
The sip server, in this case opensips who uses freeradius as its AAA server, will contact freeradius with the information of user A. Then, freeradius recognize that user A is assigned to user B as its SIP ID, and freeradius proceed to reply with user B info to be used by Alice.
RADIUS can't do that. It can accept or reject users. That's it. It can't tell users to try a different username.
After Alice got the info of user B ID, then she changes its ID to user B, and retry to connect to opensips again. Then freeradius authenticate and authorize as usual, finally Alice can use the SIP service.
is it possible to do this in freeradius?
No. RADIUS doesn't do it. OpenSIP doesn't do it. Get the users to log in with the correct credentials. Alan DeKok.