[OpenSIPS-Devel] [OpenSIPS-Users] [NEW] AAA API and Radius enhancement

[Irina Stanescu]

Hi,

A new tutorial is available to explain how to install and configure RADIUS
server and client and how to use the ported modules and the new AAA_RADIUS
module.
The tutorial can be found
here<http://www.opensips.org/Resources/DocsTutRadius> .
I hope you will find it useful.

Regards,
Irina Stanescu

Irina Stanescu wrote:

> The following new features have been added to OpenSIPS:
>
>>
> 1. Generic AAA API
>
>>
> The AAA API represents a set of generic callbacks and structures needed
>
>> for AAA operations.
>
>>
> The purpose of the API is to move all the AAA specific (Radius)
> implementations
>
>> in a single module. The AAA API will hide the implementations details from
> the
>
>> modules that want to use AAA support, making it easier to use.
>
>>
> Currently, only one module implements the AAA API - aaa_radius, offering
> Radius
>
>> support.
>
>>
> Because both standardized AAA protocols, Radius and Diameter, use lists of
>
>> attribute-value pairs, the API is designed based on attribute-value pairs,
> as well.
>
>>
> One of the advantages of using the API is that any module that wishes to do
>
>> AAA operations does not depend on a certain protocol implementation,
> therefore
>
>> it is not linked with a certain AAA library.
>
>>
> Hence, any module that was previously using Radius, for example, is not
>
>> linked with the radiusclient library any more, which is obviously an
> advantage,
>
>> especially when the module uses more than one API (DB, AAA, etc).
>
>>
> The AAA protocol to be used by a module is specified from the script using
> a
>
>> so called "aaa_url" that encodes the protocol used and other useful
> information
>
>> depending on the protocol.
>
>>
> The way the generic AAA API is used makes it very similar to the generic
>
>> database API.
>
>>
> 2. The ability to make custom Radius requests directly from the script
>
>>
> This feature is very useful because of its flexibility. Basically, any type
>
>> of Radius queries can be yielded directly from the script, and also,
> Radius
>
>> replies can be inspected for certain attributes.
>
>>
> 3. Radius implementation for the generic AAA API
>
>>
> The handling of Radius AVP "SIP-AVP" (used for fetching variables from the
>
>> Radius server) was integrated in this module. All SIP-AVPs are
> automatically
>
>> and transparently handled by the module, so that this functionality is by
> default
>
>> available for all the modules that use Radius.
>
>>
>
> Due to the fact that the modules that were previously using Radius were
> ported
>
>> to the generic AAA API, the following changes have been made:
>
>> - auth_radius became auth_aaa
>
>> - group_radius was merged with group
>
>> - uri_radius was merged with uri
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.opensips.org/pipermail/devel/attachments/20090903/a0ea6d52/attachment-0001.htm