Hi, guys...
I'm starting to move my config from a MySQL based one to a Radius one.
The AVP are the challenge. Authentication works fine but 'callee' AVP
recovery don't.
I'm getting "rc_auth failure" and 'caller' AVPs instead of 'callee' AVPs.
Bellow are the detailed informations...
openser 1.3.0-dev21-tls (i386/linux) svnrevision: 2:2921M running in a
VMWare, guested on an OpenSUSE 10.2, on a P4 machine.
Why this behavior? Bug? Radius mis-configuration? Or what am I doing
something wrong on the scripts?
Edson.
===============================================================
INVITE message:
INVITE sip:[EMAIL PROTECTED] SIP/2.0.
Via: SIP/2.0/UDP 172.27.248.6;branch=z9hG4bKac1....00000018;rport.
From: "unknown" <sip:[EMAIL PROTECTED]>;tag=2bf01d7afd4.
To: <sip:[EMAIL PROTECTED]>.
Contact: <sip:[EMAIL PROTECTED]>.
This scripts lines:
...
avp_load_radius('callee');
avp_printf();
...
Gives this LOGs:
***on /var/log/messages:***
avpops:ops_print_avp: p=0xb59c78e0, flags=0x0003
avpops:ops_print_avp: name=<caller_cli>
avpops:ops_print_avp: val_str=<"[EMAIL PROTECTED]" / 19>
avpops:ops_print_avp: p=0xb59c74d0, flags=0x0003
avpops:ops_print_avp: name=<acc_state>
avpops:ops_print_avp: val_str=<call / 4>
avpops:ops_print_avp: p=0xb59c7870, flags=0x0003
avpops:ops_print_avp: name=<acc_caller_domain>
avpops:ops_print_avp: val_str=<domain.test / 10>
avpops:ops_print_avp: p=0xb59c7598, flags=0x0003
avpops:ops_print_avp: name=<acc_caller_user>
avpops:ops_print_avp: val_str=<8999 / 4>
***on Radius console ("radius -X"):***
rad_recv: Access-Request packet from host 127.0.0.1:1024, id=31,
length=55
User-Name = "[EMAIL PROTECTED]"
Service-Type = SIP-Callee-AVPs
NAS-Port = 0
NAS-IP-Address = 127.0.0.1
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 250
modcall[authorize]: module "preprocess" returns ok for request 250
radius_xlat: '/var/log/radius/radacct/127.0.0.1/auth-detail-20071017'
rlm_detail:
/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to
/var/log/radius/radacct/127.0.0.1/auth-detail-20071017
modcall[authorize]: module "auth_log" returns ok for request 250
rlm_realm: Looking up realm "domain.test" for User-Name =
"[EMAIL PROTECTED]"
rlm_realm: No such realm "domain.test"
modcall[authorize]: module "suffix" returns noop for request 250
modcall[authorize]: module "digest" returns noop for request 250
radius_xlat: '[EMAIL PROTECTED]'
rlm_sql (sql): sql_set_user escaped user --> '[EMAIL PROTECTED]'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE
Username = '[EMAIL PROTECTED]' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM
radcheck WHERE Username = '[EMAIL PROTECTED]' ORDER BY id
radius_xlat: 'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche
ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup
WHERE usergroup.Username = '[EMAIL PROTECTED]' AND
usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
rlm_sql_mysql: query: SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche
ck.Value,radgroupcheck.op FROM
radgroupcheck,usergroup WHERE usergroup.Username =
'[EMAIL PROTECTED]' AND usergroup.GroupName = radgroupcheck.GroupName ORDER
BY radgroupcheck.id
rlm_sql: Failed to create the pair: Unknown attribute
"Simultaneus-Access"
rlm_sql (sql): Error getting data from database
radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE
Username = '[EMAIL PROTECTED]' ORDER BY id'
rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM
radreply WHERE Username = '[EMAIL PROTECTED]' ORDER BY id
radius_xlat: 'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep
ly.Value,radgroupreply.op FROM radgroupreply,usergroup
WHERE usergroup.Username = '[EMAIL PROTECTED]' AND
usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql_mysql: query: SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep
ly.Value,radgroupreply.op FROM
radgroupreply,usergroup WHERE usergroup.Username =
'[EMAIL PROTECTED]' AND usergroup.GroupName = radgroupreply.GroupName ORDER
BY radgroupreply.id
rlm_sql (sql): Released sql socket id: 4
modcall[authorize]: module "sql" returns ok for request 250
modcall: leaving group authorize (returns ok) for request 250
auth: type Local
auth: No User-Password or CHAP-Password attribute in the request
auth: Failed to validate the user.
Login incorrect: [EMAIL PROTECTED] (from client localhost port 0)
Delaying request 250 for 1 seconds
_______________________________________________
Users mailing list
Users@openser.org
http://openser.org/cgi-bin/mailman/listinfo/users
