<div dir="ltr"><div><div>Hi John,<br><br></div>I am successfully using these functions (radius_send_auth)/dictionaries with FreeRadius as radius server, I dont know about your particular radius setup. As far as i know you dont need to load any other dictionary for your radius related modules/functions to work. If your Opensip's dictionary is properly loaded that should cater all your radius related functionality in opensips. <br>
<br></div><div>Having said that you should make sure that the dictionary is loaded on both Radius Server as well as on Client end that is the only requirement as far as dictionaries are concerned.<br></div><div><br></div>
<div>Regards,<br>Qasim<br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Mar 24, 2014 at 10:23 PM, John Quick <span dir="ltr"><<a href="mailto:john.quick@smartvox.co.uk" target="_blank">john.quick@smartvox.co.uk</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Quasim,<br>
<br>
I appreciate your help. However, I am not using FreeRadius as the Radius<br>
server and have already got all the basic dictionaries loaded (like<br>
dictionary.opensips, dictionary.sip)<br>
aaa_www_authorize and writing of Radius CDR's is working ok. That is not the<br>
problem.<br>
<br>
It is only when I try to use the radius_send_auth(set1, set2) function that<br>
I had problems.<br>
Please can you confirm if you have used this function?<br>
<br>
I just tried a change to the dictionaries I use. No longer using<br>
dictionary.rfc2869. Instead using dictionary.rfc2865.<br>
In set1, the attribs that are sent to the server, I now specify 'User-Name'<br>
and 'User-Password'. This seems to have fixed the problem whereby OpenSIPS<br>
required the Message-Authenticator attribute. However, to get<br>
dictionary.rfc2865 to work, I had to comment out all the attributes of type<br>
"octets".<br>
<br>
I still have the second problem: OpenSIPS and radiusclient-ng does not<br>
recognise the attribute type "octets".<br>
<br>
John Quick<br>
Smartvox Limited<br>
<br>
<br>
From: <a href="mailto:qasimakhan@gmail.com">qasimakhan@gmail.com</a> [mailto:<a href="mailto:qasimakhan@gmail.com">qasimakhan@gmail.com</a>]<br>
Sent: 24 March 2014 16:27<br>
To: <a href="mailto:john.quick@smartvox.co.uk">john.quick@smartvox.co.uk</a><br>
Cc: OpenSIPS users mailling list<br>
<div class="HOEnZb"><div class="h5">Subject: Re: [OpenSIPS-Users] Problem using radius_send_auth<br>
<br>
hmm... here are the settings that i am using that works perfectly for me:<br>
These files are required on opensips radiusclient-ng side:<br>
/etc/radiusclient-ng/dictionary<br>
...<br>
$INCLUDE /etc/radiusclient-ng/dictionary.sip<br>
...<br>
ATTRIBUTE User-Name 1 string<br>
ATTRIBUTE Password 2 string<br>
ATTRIBUTE CHAP-Password 3 string<br>
...<br>
/etc/radiusclient-ng/dictionary.sip (This is the opensips dictionary)<br>
## $Id: dictionary.opensips 7139 2010-08-17 14:06:00Z razvancrainea $<br>
...<br>
ATTRIBUTE Sip-Uri-User 208 string # Proprietary, auth_radius<br>
ATTRIBUTE Sip-Group 211 string # Proprietary, group_radius<br>
ATTRIBUTE Sip-Rpid 213 string # Proprietary, auth_radius<br>
ATTRIBUTE SIP-AVP 225 string # Proprietary, avp_radius<br>
ATTRIBUTE Sip-Call-Duration 227 integer<br>
ATTRIBUTE Sip-Call-Setuptime 228 integer<br>
...<br>
<br>
On freeradius end:<br>
/usr/local/etc/raddb<br>
<br>
$INCLUDE /usr/local/share/freeradius/dictionary<br>
<br>
<br>
/usr/local/share/freeradius/dictionary<br>
...<br>
$INCLUDE dictionary.sip<br>
...<br>
<br>
/usr/local/share/freeradius/dictionary.sip (This is the opensips dictionary)<br>
<br>
## $Id: dictionary.opensips 7139 2010-08-17 14:06:00Z razvancrainea $<br>
...<br>
P.S. If you need these dictionary files just PM me and i will send them to<br>
you i think these are not required on the forum it will just clutter things<br>
if anything.<br>
<br>
Regards,<br>
Qasim<br>
<br>
On Mon, Mar 24, 2014 at 6:05 PM, John Quick <<a href="mailto:john.quick@smartvox.co.uk">john.quick@smartvox.co.uk</a>><br>
wrote:<br>
I am already using the opensips dictionary.<br>
It does not contain the Message-Authenticator attribute.<br>
<br>
When I do not use dictionary.rfc2869, I get this error every time the<br>
radius_send_auth function is called:<br>
rc_avpair_gen: received unknown attribute 80 of length 18: 0x..<br>
<br>
When I include dictionary.rfc2869, I get this error on startup:<br>
rc_read_dictionary: invalid type on line 13 of dictionary<br>
/usr/local/etc/radiusclient-ng/dictionary.rfc2869<br>
<br>
John<br>
<br>
<br>
From: <a href="mailto:qasimakhan@gmail.com">qasimakhan@gmail.com</a> [mailto:<a href="mailto:qasimakhan@gmail.com">qasimakhan@gmail.com</a>]<br>
Sent: 24 March 2014 11:57<br>
To: <a href="mailto:john.quick@smartvox.co.uk">john.quick@smartvox.co.uk</a>; OpenSIPS users mailling list<br>
Subject: Re: [OpenSIPS-Users] Problem using radius_send_auth<br>
<br>
Try using opensips dictionary.<br>
Regards,<br>
Qasim<br>
<br>
<br>
On Mon, Mar 24, 2014 at 4:37 PM, John Quick <<a href="mailto:john.quick@smartvox.co.uk">john.quick@smartvox.co.uk</a>><br>
wrote:<br>
I'm using OpenSIPS version 1.8.2 with radiusclient-ng.<br>
I need to be able to make custom radius authentication requests using<br>
radius_send_auth (a function in the aaa_radius module).<br>
<br>
The first time I tried, it failed and reported an error that<br>
Message-Authenticator was an unknown attribute.<br>
I found the missing attribute in dictionary.rfc2869, but when I include this<br>
dictionary, OpenSIPS fails to start and reports an error that seems to point<br>
to the "octets" attribute type being unrecognised.<br>
<br>
Any help with this would be greatly appreciated.<br>
<br>
John Quick<br>
Smartvox Limited<br>
Web: <a href="http://www.smartvox.co.uk" target="_blank">www.smartvox.co.uk</a><br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
<br>
<br>
<br>
<br>
<br>
</div></div></blockquote></div><br></div>