Dear all,<br><br>I want to register some users in OpenSIPs. When I use db mode it's totally OK. Users register and could make calls. But when I set radius configuration (using <a href="http://www.opensips.org/Resources/DocsTutRadius" target="_blank">this</a> document), the user doesn't register and FreeRadius keeps printing these messages:<br>
<br><br><span style="color:rgb(102,102,102)">Info: [digest] Checking for correctly formatted Digest-Attributes<br>Info: [digest] Digest-Attributes look OK. Converting them to something more usful.<br> Digest-User-Name = "101"<br>
Digest-Realm = "192.168.X.X"<br> Digest-Nonce = "5069765300000000af31f979191ab899f5f9fc41ed941449"<br> Digest-URI = "sip:192.168.X.X"<br> Digest-Method = "REGISTER"<br>
Digest-QOP = "auth"<br> Digest-Nonce-Count = "00000001"<br> Digest-CNonce = "8277adcf0b"<br>Info: [digest] Adding Auth-Type = DIGEST<br>Info: ++[digest] returns ok<br>Info: [suffix] Looking up realm "192.168.X.X" for User-Name = "101@192.168.X.X"<br>
Info: [suffix] Found realm "192.168.X.X"<br>Info: [suffix] Adding Realm = "192.168.X.X"<br>Info: [suffix] Authentication realm is LOCAL.<br>Info: ++[suffix] returns ok<br>Info: [eap] No EAP-Message, not doing EAP<br>
Info: ++[eap] returns noop<br>Info: [files] users: Matched entry 101@192.168.X.X at line 22<br>Info: ++[files] returns ok<br>Info: ++[expiration] returns noop<br>Info: ++[logintime] returns noop<br>Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.<br>
Info: ++[pap] returns noop<br>Info: Found Auth-Type = DIGEST<br>Info: # Executing group from file /etc/freeradius/sites-enabled/default<br>Info: +- entering group DIGEST {...}<br><b><span style="color:rgb(0,0,0)">Auth: [digest] Cleartext-Password or Digest-HA1 is required for authentication.</span></b><br>
Info: ++[digest] returns invalid<br>Info: Failed to authenticate the user.<br>Auth: Login incorrect: [101@192.168.X.X/<via Auth-Type = Digest>] (from client OpenSIPS port 0)<br>Info: Using Post-Auth-Type Reject<br>Info: # Executing group from file /etc/freeradius/sites-enabled/default<br>
Info: +- entering group REJECT {...}<br>Info: [attr_filter.access_reject] expand: %{User-Name} -> 101@192.168.X.X<br><br><br><span style="color:rgb(0,0,0)">And here</span></span> is my opensips.cfg:<br><br>.....<br>
loadmodule "acc.so"<br>modparam("acc", "early_media", 0)<br>modparam("acc", "report_cancels", 0)<br>modparam("acc", "detect_direction", 0)<br>modparam("acc", "failed_transaction_flag", 3)<br>
modparam("acc", "log_flag", 1)<br>modparam("acc", "log_missed_flag", 2)<br>loadmodule "auth.so"<br>loadmodule "aaa_radius.so"<br>loadmodule "auth_aaa.so"<br>
modparam("auth", "calculate_ha1", 1)<br>modparam("auth_aaa", "aaa_url", "radius:/etc/radiusclient-ng/radiusclient.conf")<br>route{<br> if ( !(is_method("REGISTER") ) ) {<br>
if (from_uri==myself)<br> {<br> if (!aaa_proxy_authorize("")) {<br> proxy_challenge("", "1");<br> exit;<br>
}<br> consume_credentials();<br> } else {<br> if (!uri==myself) {<br> send_reply("403","Rely forbidden");<br>
exit;<br> }<br> }<br> }<br>....<br> if (is_method("REGISTER"))<br> {<br> if (!aaa_www_authorize(""))<br>
{<br> www_challenge("", "1");<br> exit;<br> }<br> if ( 0 ) setflag(7);<br> if (!save("location"))<br>
sl_reply_error();<br> exit;<br> }<br>....<br><br><br>And in freeradius/users I have:<br><br>.....<br><br>101@192.168.X.X Auth-Type := Digest, Cleartext-Password == "101"<br>
Reply-Message = "Authenticated"<br><br>Would you please help me to solve the problem?<br><br>Thanks,<br>Hanie<br><br><br>