how to config b2bua and freeradius together?
Dear all, I intend to make use of b2bua-1.5.0 to do prepaid together with freeradius-1.0.4 and ser-0.8.14. I use this scenario to set up a call: ----- |UA2| ----- ^ | |6 | ----- 5 ------- 4 --------------- ----- 1 | |<-----------| |<--------| | |UA1|---->|SER| 2 |B2BUA| 3 |radius server| ----- | |----------->| |-------->| | ----- ------- --------------- Now I found that b2bua can talk to radius server directly, without using radius client. However, I received "access reject message" from radius server when I tried to initiate a call. Here is the debug message on radius server: rad_recv: Access-Request packet from host 218.97.252.38:1024, id=2, length=71 User-Name = "41001" User-Password = "." NAS-IP-Address = 218.97.252.38 NAS-Port = 1000 Called-Station-Id = "41004" Calling-Station-Id = "41001" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 modcall[authorize]: module "digest" returns noop for request 0 rlm_realm: No '@' in User-Name = "41001", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 0 radius_xlat: '41001' rlm_sql (sql): sql_set_user escaped user --> '41001' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Usernam e = '41001' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): User 41001 not found in radcheck radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Att ribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '41001' AND usergroup.GroupName = radgroupcheck.GroupName O RDER BY radgroupcheck.id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Att ribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '41001' AND usergroup.GroupName = radgroupreply.GroupName O RDER BY radgroupreply.id' rlm_sql (sql): User 41001 not found in radgroupcheck rlm_sql (sql): User not found rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns notfound for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 modcall[authenticate]: module "unix" returns notfound for request 0 modcall: group authenticate returns notfound for request 0 auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 And this is part of my radcheck table on radius server: +----+-----------------------------+---------------+----+-------+ | id | UserName | Attribute | op | Value | +----+-----------------------------+---------------+----+-------+ | 1 | 41001@localhost.localdomain | User-Password | := | 1001 | | 2 | 41004@localhost.localdomain | User-Password | := | 1004 | +----+-----------------------------+---------------+----+-------+ Could anyone tell me how to config b2bua and radius to make them work fine? Thanks in advance. Shuai http://www.goldentek.biz
"zhangshuai" <zhangshuai@goldentek.biz> wrote:
Now I found that b2bua can talk to radius server directly, without using radius client.
Uh, no. The only way to talk to a RADIUS server is via RADIUS.
rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 modcall[authenticate]: module "unix" returns notfound for request 0
So... the user isn't in /etc/passwd.
And this is part of my radcheck table on radius server:
+----+-----------------------------+---------------+----+-------+ | id | UserName | Attribute | op | Value | +----+-----------------------------+---------------+----+-------+ | 1 | 41001@localhost.localdomain | User-Password | := | 1001 | | 2 | 41004@localhost.localdomain | User-Password | := | 1004 | +----+-----------------------------+---------------+----+-------+
Could anyone tell me how to config b2bua and radius to make them work fine?
Don't set Auth-Type. Alan DeKok.
participants (2)
-
Alan DeKok -
zhangshuai