Authentication Digest
Hi, I would like to have my SIP clients authenticate with Active Directory (AD). I am using RADIUS in the middle to do the digest based authentication between by sip client and AD. SIP Client ---> RADIUS Client ---> RADIUS Server (IAS of windows server) ----> Activer Directory is my setup. I downloaded RADIUS Client version 1.1.6 (which is the latest i find in freeradius.org) to do the digest based Auth. Following is the AV pair i used to form my Request packet, as per RFC 4590/5090 PW_USER_NAME PW_SERVICE_TYPE PW_DIGEST_REALM PW_DIGEST_METHOD PW_DIGEST_ALGORITHM PW_DIGEST_URI RADIUS server (IAS of Windows) complains of malformed packets. If any of you have used digest based authentication, using Freeradius client, i would like you to help me with this. Also, i am not sure how to add message autehnticator to this request message, which i understand is mandatory. Not sure if this is THE issue. Thanks Varad Windows Live Messenger. Multitasking at its finest. _________________________________________________________________ Twice the fun—Share photos while you chat with Windows Live Messenger. http://www.microsoft.com/india/windows/windowslive/messenger.aspx
Varadharajan Seshadri wrote:
SIP Client ---> RADIUS Client ---> RADIUS Server (IAS of windows server)
Go ask Microsoft how to get this to work. We didn't write IAS, and we are not responsible for it. i.e. This list is NOT an appropriate place to ask questions about IAS. Alan DeKok.
Alan, Question was about FreeRadius client and not about IAS RADIUS Server. Using FreeRADIUS client, how do i include Message authenticator field in the request packet. Also, is the set of AV pairs that i have sent out the correct one for authentication. Thanks Varad
Date: Sat, 28 Mar 2009 08:24:40 -0700 From: aland@deployingradius.com To: freeradius-users@lists.freeradius.org Subject: Re: Authentication Digest
Varadharajan Seshadri wrote:
SIP Client ---> RADIUS Client ---> RADIUS Server (IAS of windows server)
Go ask Microsoft how to get this to work. We didn't write IAS, and we are not responsible for it.
i.e. This list is NOT an appropriate place to ask questions about IAS.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live Messenger. Multitasking at its finest. http://www.microsoft.com/india/windows/windowslive/messenger.aspx
Varadharajan Seshadri wrote:
Alan, Question was about FreeRadius client and not about IAS RADIUS Server.
And the IAS server complains when you send it Digest authentication. Q: what can you do to the client to make IAS understand digest authentication? A: Nothing. Upgrade to a real RADIUS server.
Using FreeRADIUS client, how do i include Message authenticator field in the request packet.
See the API for the client. Alan DeKok.
participants (2)
-
Alan DeKok -
Varadharajan Seshadri