[OpenSIPS-Users] Problem using radius_send_auth

[John Quick]

Bogdan,

I agree. It seems to be a limitation in libradiusclient.

I found another dictionary, not from FreeRadius, where attribute 80
(Message-Authenticator) is defined as a string attribute. When I use this
new dictionary, the warning message " rc_avpair_gen: received unknown
attribute 80 of length 18" has gone. So I am making some progress, but not
everything is quite working yet.

John


-----Original Message-----
From: Bogdan-Andrei Iancu [mailto:bogdan at opensips.org] 
Sent: 27 March 2014 16:32
To: john.quick at smartvox.co.uk; 'OpenSIPS users mailling list'
Subject: Re: [OpenSIPS-Users] Problem using radius_send_auth

Hi John,

Based on the error, it is clear - the libradiusclient simply does not
support the "octets" data type - so it is not a matter of dictionary, but of
libradiusclient capabilities.

Regards,

Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
http://www.opensips-solutions.com

On 27.03.2014 11:54, John Quick wrote:
> Hi Bogdan,
>
> Yes, I assume it is an error from libradiusclient-ng because the path 
> to the main dictionary is defined in radiusclient.conf and then the 
> additional dictionaries are added as $INCLUDE statements at the end of 
> the main dictionary file. I have INCLUDES for dictionary.cisco, 
> dictionary.sip, dictionary.opensips and dictionary.rfc2865.
>
> The file dictionary.rfc2865 was copied from the collection installed 
> with FreeRadius Server, but I had to comment out every line that 
> defined an attribute of type "octets" because when not commented out I 
> could not even start OpenSIPS. It gives the following error messages:
> 2014-03-27 09:46:24  INFO:auth_aaa:mod_init: initializing...
> 2014-03-27 09:46:24  rc_read_dictionary: invalid type on line 11 of 
> dictionary /usr/local/etc/radiusclient-ng/dictionary.rfc2865
> 2014-03-27 09:46:24  ERROR:aaa_radius:rad_init_prot: failed to read 
> radius dictionary
> 2014-03-27 09:46:24  ERROR:auth_aaa:mod_init: aaa init protocol 
> failure
> 2014-03-27 09:46:24  ERROR:core:init_mod: failed to initialize module 
> auth_aaa
> 2014-03-27 09:46:24  ERROR:core:main: error while initializing modules
>
> With the "octets" attributes all commented out, I am able to start 
> OpenSIPS, but every time radius_send_auth is called, the following 
> warning is reported in the opensips log file:
> rc_avpair_gen: received unknown attribute 80 of length 18: <0x.....>
>
> Where <0x....> is a long and apparently random Hex value.
>
> John
>
>
> -----Original Message-----
> From: Bogdan-Andrei Iancu [mailto:bogdan at opensips.org]
> Sent: 27 March 2014 08:53
> To: john.quick at smartvox.co.uk; OpenSIPS users mailling list
> Subject: Re: [OpenSIPS-Users] Problem using radius_send_auth
>
> Hi John,
>
> The error on "octets" data type comes from the libradiusclient, not 
> from opensips itself, right ?
>
> Regards,
>
> Bogdan-Andrei Iancu
> OpenSIPS Founder and Developer
> http://www.opensips-solutions.com
>
> On 24.03.2014 13:37, John Quick wrote:
>> I'm using OpenSIPS version 1.8.2 with radiusclient-ng.
>> I need to be able to make custom radius authentication requests using 
>> radius_send_auth (a function in the aaa_radius module).
>>
>> The first time I tried, it failed and reported an error that 
>> Message-Authenticator was an unknown attribute.
>> I found the missing attribute in dictionary.rfc2869, but when I 
>> include this dictionary, OpenSIPS fails to start and reports an error 
>> that seems to point to the "octets" attribute type being unrecognised.
>>
>> Any help with this would be greatly appreciated.
>>
>> John Quick
>> Smartvox Limited
>> Web: www.smartvox.co.uk
>>
>>
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>
>