<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:10pt"><div><span><br></span></div><div>Post your Radius configuration.</div><div><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">//Binan<br></div> <div style="font-family: times new roman, new york, times, serif; font-size: 10pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight:bold;">Från:</span></b> Hanie Maghsoudy <h.maghsoudy@gmail.com><br> <b><span style="font-weight: bold;">Till:</span></b> Binan AL Halabi <binanalhalabi@yahoo.com>; OpenSIPS users mailling list <users@lists.opensips.org> <br> <b><span style="font-weight: bold;">Skickat:</span></b> onsdag, 3 oktober
2012 14:10<br> <b><span style="font-weight: bold;">Ämne:</span></b> Re: [OpenSIPS-Users] Registration via RADIUS<br> </font> </div> <br>
<div id="yiv437826059">Thanks Binan for the reply.<br>I tested both and none of them works.<br><br><div class="yiv437826059gmail_quote">On Wed, Oct 3, 2012 at 2:48 PM, Binan AL Halabi <span dir="ltr"><<a rel="nofollow" ymailto="mailto:binanalhalabi@yahoo.com" target="_blank" href="mailto:binanalhalabi@yahoo.com">binanalhalabi@yahoo.com</a>></span> wrote:<br>
<blockquote class="yiv437826059gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div><div style="font-size:10pt;font-family:times new roman, new york, times, serif;">look for the type of password you want to use whether plaintext or HA<br>
<pre>modparam("auth", "calculate_ha1", 1) # plaintext password<br>modparam("auth", "calculate_ha1", 0) # pre-calculated HA1<br><br></pre>//Binan<br><div><span><br></span></div><div>
<br></div> <div style="font-family:times new roman, new york, times, serif;font-size:10pt;"> <div style="font-family:times new roman, new york, times, serif;font-size:12pt;"> <div dir="ltr"> <font face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Hanie Maghsoudy <<a rel="nofollow" ymailto="mailto:h.maghsoudy@gmail.com" target="_blank" href="mailto:h.maghsoudy@gmail.com">h.maghsoudy@gmail.com</a>><br>
<b><span style="font-weight:bold;">To:</span></b> <a rel="nofollow" ymailto="mailto:users@lists.opensips.org" target="_blank" href="mailto:users@lists.opensips.org">users@lists.opensips.org</a> <br> <b><span style="font-weight:bold;">Sent:</span></b> Wednesday, October 3, 2012 12:59 PM<br>
<b><span style="font-weight:bold;">Subject:</span></b> Re: [OpenSIPS-Users] Registration via RADIUS<br> </font> </div><div><div class="yiv437826059h5"> <br>
<div>Hi all,<br><br>Does anyone have a clue on this?<br>I'm pretty sure I'm doing something wrong, but I can not find it. I believe that either OpenSIPs configuration or radiusclient-ng's could be incorrect.<br>
<br>
Thanks<br><br><div>On Mon, Oct 1, 2012 at 3:09 PM, Hanie Maghsoudy <span dir="ltr"><<a rel="nofollow" ymailto="mailto:h.maghsoudy@gmail.com" target="_blank" href="mailto:h.maghsoudy@gmail.com">h.maghsoudy@gmail.com</a>></span> wrote:<br><blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Dear all,<br><br>I want to register some users in OpenSIPs. When I use db mode it's totally OK. Users register and could make calls. But when I set radius configuration (using <a rel="nofollow" target="_blank" href="http://www.opensips.org/Resources/DocsTutRadius">this</a> document), the user doesn't register and FreeRadius keeps printing these messages:<br>
<br><br><span style="color:rgb(102,102,102);">Info: [digest] Checking for correctly formatted Digest-Attributes<br>Info: [digest] Digest-Attributes look OK. Converting them to something more usful.<br> Digest-User-Name = "101"<br>
Digest-Realm = "192.168.X.X"<br> Digest-Nonce = "5069765300000000af31f979191ab899f5f9fc41ed941449"<br> Digest-URI = "sip:192.168.X.X"<br> Digest-Method = "REGISTER"<br>
Digest-QOP = "auth"<br> Digest-Nonce-Count = "00000001"<br> Digest-CNonce = "8277adcf0b"<br>Info: [digest] Adding Auth-Type = DIGEST<br>Info: ++[digest] returns ok<br>Info: [suffix] Looking up realm "192.168.X.X" for User-Name = "101@192.168.X.X"<br>
Info: [suffix] Found realm "192.168.X.X"<br>Info: [suffix] Adding Realm = "192.168.X.X"<br>Info: [suffix] Authentication realm is LOCAL.<br>Info: ++[suffix] returns ok<br>Info: [eap] No EAP-Message, not doing EAP<br>
Info: ++[eap] returns noop<br>Info: [files] users: Matched entry 101@192.168.X.X at line 22<br>Info: ++[files] returns ok<br>Info: ++[expiration] returns noop<br>Info: ++[logintime] returns noop<br>Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.<br>
Info: ++[pap] returns noop<br>Info: Found Auth-Type = DIGEST<br>Info: # Executing group from file /etc/freeradius/sites-enabled/default<br>Info: +- entering group DIGEST {...}<br><b><span style="color:rgb(0,0,0);">Auth: [digest] Cleartext-Password or Digest-HA1 is required for authentication.</span></b><br>
Info: ++[digest] returns invalid<br>Info: Failed to authenticate the user.<br>Auth: Login incorrect: [101@192.168.X.X/<via Auth-Type = Digest>] (from client OpenSIPS port 0)<br>Info: Using Post-Auth-Type Reject<br>
Info: # Executing group from file /etc/freeradius/sites-enabled/default<br>
Info: +- entering group REJECT {...}<br>Info: [attr_filter.access_reject] expand: %{User-Name} -> 101@192.168.X.X<br><br><br><span style="color:rgb(0,0,0);">And here</span></span> is my opensips.cfg:<br><br>.....<br>
loadmodule "acc.so"<br>modparam("acc", "early_media", 0)<br>modparam("acc", "report_cancels", 0)<br>modparam("acc", "detect_direction", 0)<br>modparam("acc", "failed_transaction_flag", 3)<br>
modparam("acc", "log_flag", 1)<br>modparam("acc", "log_missed_flag", 2)<br>loadmodule "auth.so"<br>loadmodule "aaa_radius.so"<br>loadmodule "auth_aaa.so"<br>
modparam("auth", "calculate_ha1", 1)<br>modparam("auth_aaa", "aaa_url", "radius:/etc/radiusclient-ng/radiusclient.conf")<br>route{<br> if ( !(is_method("REGISTER") ) ) {<br>
if (from_uri==myself)<br> {<br> if (!aaa_proxy_authorize("")) {<br> proxy_challenge("", "1");<br> exit;<br>
}<br> consume_credentials();<br> } else {<br> if (!uri==myself) {<br> send_reply("403","Rely forbidden");<br>
exit;<br> }<br> }<br> }<br>....<br> if (is_method("REGISTER"))<br> {<br> if (!aaa_www_authorize(""))<br>
{<br> www_challenge("", "1");<br> exit;<br> }<br> if ( 0 ) setflag(7);<br> if (!save("location"))<br>
sl_reply_error();<br> exit;<br> }<br>....<br><br><br>And in freeradius/users I have:<br><br>.....<br><br>101@192.168.X.X Auth-Type := Digest, Cleartext-Password == "101"<br>
Reply-Message = "Authenticated"<br><br>Would you please help me to solve the problem?<br><br>Thanks,<br>Hanie<br><br><br>
</blockquote></div><br>
</div><br></div></div>_______________________________________________<br>Users mailing list<br><a rel="nofollow" ymailto="mailto:Users@lists.opensips.org" target="_blank" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a><br><a rel="nofollow" target="_blank" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
<br><br> </div> </div> </div></div><br>_______________________________________________<br>
Users mailing list<br>
<a rel="nofollow" ymailto="mailto:Users@lists.opensips.org" target="_blank" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a><br>
<a rel="nofollow" target="_blank" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
<br></blockquote></div><br>
</div><br><br> </div> </div> </div></body></html>