[OpenSIPS-Users] [NEW] AAA API and Radius enhancement

[Alex Massover]

The module is really cool! We had been waiting for it for a long time.

--
Best Regards,
Alex Massover
VoIP R&D TL
Jajah Inc.
From: users-bounces at lists.opensips.org [mailto:users-bounces at lists.opensips.org] On Behalf Of Irina Stanescu
Sent: Thursday, September 03, 2009 12:48 PM
To: OpenSIPS users mailling list; devel at lists.opensips.org; news at lists.opensips.org
Subject: Re: [OpenSIPS-Users] [NEW] AAA API and Radius enhancement

Hi,

A new tutorial is available to explain how to install and configure RADIUS server and client and how to use the ported modules and the new AAA_RADIUS module.

The tutorial can be found here<http://www.opensips.org/Resources/DocsTutRadius> . I hope you will find it useful.

Regards,
Irina Stanescu

Irina Stanescu wrote:
The following new features have been added to OpenSIPS:

1. Generic AAA API

The AAA API represents a set of generic callbacks and structures needed
for AAA operations.

The purpose of the API is to move all the AAA specific (Radius) implementations
in a single module. The AAA API will hide the implementations details from the
modules that want to use AAA support, making it easier to use.

Currently, only one module implements the AAA API - aaa_radius, offering Radius
support.

Because both standardized AAA protocols, Radius and Diameter, use lists of
attribute-value pairs, the API is designed based on attribute-value pairs, as well.

One of the advantages of using the API is that any module that wishes to do
AAA operations does not depend on a certain protocol implementation, therefore
it is not linked with a certain AAA library.

Hence, any module that was previously using Radius, for example, is not
linked with the radiusclient library any more, which is obviously an advantage,
especially when the module uses more than one API (DB, AAA, etc).

The AAA protocol to be used by a module is specified from the script using a
so called "aaa_url" that encodes the protocol used and other useful information
depending on the protocol.

The way the generic AAA API is used makes it very similar to the generic
database API.

2. The ability to make custom Radius requests directly from the script

This feature is very useful because of its flexibility. Basically, any type
of Radius queries can be yielded directly from the script, and also, Radius
replies can be inspected for certain attributes.

3. Radius implementation for the generic AAA API

The handling of Radius AVP "SIP-AVP" (used for fetching variables from the
Radius server) was integrated in this module. All SIP-AVPs are automatically
and transparently handled by the module, so that this functionality is by default
available for all the modules that use Radius.


Due to the fact that the modules that were previously using Radius were ported
to the generic AAA API, the following changes have been made:
- auth_radius became auth_aaa
- group_radius was merged with group
- uri_radius was merged with uri


This mail was received via Mail-SeCure System.

This mail was sent via Mail-SeCure System.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.opensips.org/pipermail/users/attachments/20090903/db687166/attachment.htm