[OpenSIPS-Users] Problem using radius_send_auth

Bogdan-Andrei Iancu bogdan at opensips.org
Thu Mar 27 19:31:54 CET 2014


John,

Just take care, as changing the data type may lead to mis-processing 
that Radius AVP....But depends on the entities filling in and reading 
that AVP.

Regards,

Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
http://www.opensips-solutions.com

On 27.03.2014 20:24, John Quick wrote:
> Bogdan,
>
> I agree. It seems to be a limitation in libradiusclient.
>
> I found another dictionary, not from FreeRadius, where attribute 80
> (Message-Authenticator) is defined as a string attribute. When I use this
> new dictionary, the warning message " rc_avpair_gen: received unknown
> attribute 80 of length 18" has gone. So I am making some progress, but not
> everything is quite working yet.
>
> John
>
>
> -----Original Message-----
> From: Bogdan-Andrei Iancu [mailto:bogdan at opensips.org]
> Sent: 27 March 2014 16:32
> To: john.quick at smartvox.co.uk; 'OpenSIPS users mailling list'
> Subject: Re: [OpenSIPS-Users] Problem using radius_send_auth
>
> Hi John,
>
> Based on the error, it is clear - the libradiusclient simply does not
> support the "octets" data type - so it is not a matter of dictionary, but of
> libradiusclient capabilities.
>
> Regards,
>
> Bogdan-Andrei Iancu
> OpenSIPS Founder and Developer
> http://www.opensips-solutions.com
>
> On 27.03.2014 11:54, John Quick wrote:
>> Hi Bogdan,
>>
>> Yes, I assume it is an error from libradiusclient-ng because the path
>> to the main dictionary is defined in radiusclient.conf and then the
>> additional dictionaries are added as $INCLUDE statements at the end of
>> the main dictionary file. I have INCLUDES for dictionary.cisco,
>> dictionary.sip, dictionary.opensips and dictionary.rfc2865.
>>
>> The file dictionary.rfc2865 was copied from the collection installed
>> with FreeRadius Server, but I had to comment out every line that
>> defined an attribute of type "octets" because when not commented out I
>> could not even start OpenSIPS. It gives the following error messages:
>> 2014-03-27 09:46:24  INFO:auth_aaa:mod_init: initializing...
>> 2014-03-27 09:46:24  rc_read_dictionary: invalid type on line 11 of
>> dictionary /usr/local/etc/radiusclient-ng/dictionary.rfc2865
>> 2014-03-27 09:46:24  ERROR:aaa_radius:rad_init_prot: failed to read
>> radius dictionary
>> 2014-03-27 09:46:24  ERROR:auth_aaa:mod_init: aaa init protocol
>> failure
>> 2014-03-27 09:46:24  ERROR:core:init_mod: failed to initialize module
>> auth_aaa
>> 2014-03-27 09:46:24  ERROR:core:main: error while initializing modules
>>
>> With the "octets" attributes all commented out, I am able to start
>> OpenSIPS, but every time radius_send_auth is called, the following
>> warning is reported in the opensips log file:
>> rc_avpair_gen: received unknown attribute 80 of length 18: <0x.....>
>>
>> Where <0x....> is a long and apparently random Hex value.
>>
>> John
>>
>>
>> -----Original Message-----
>> From: Bogdan-Andrei Iancu [mailto:bogdan at opensips.org]
>> Sent: 27 March 2014 08:53
>> To: john.quick at smartvox.co.uk; OpenSIPS users mailling list
>> Subject: Re: [OpenSIPS-Users] Problem using radius_send_auth
>>
>> Hi John,
>>
>> The error on "octets" data type comes from the libradiusclient, not
>> from opensips itself, right ?
>>
>> Regards,
>>
>> Bogdan-Andrei Iancu
>> OpenSIPS Founder and Developer
>> http://www.opensips-solutions.com
>>
>> On 24.03.2014 13:37, John Quick wrote:
>>> I'm using OpenSIPS version 1.8.2 with radiusclient-ng.
>>> I need to be able to make custom radius authentication requests using
>>> radius_send_auth (a function in the aaa_radius module).
>>>
>>> The first time I tried, it failed and reported an error that
>>> Message-Authenticator was an unknown attribute.
>>> I found the missing attribute in dictionary.rfc2869, but when I
>>> include this dictionary, OpenSIPS fails to start and reports an error
>>> that seems to point to the "octets" attribute type being unrecognised.
>>>
>>> Any help with this would be greatly appreciated.
>>>
>>> John Quick
>>> Smartvox Limited
>>> Web: www.smartvox.co.uk
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users at lists.opensips.org
>>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>
>>
>
>




More information about the Users mailing list