[OpenSIPS-Users] OpenSIPS with FreeRadius

Wed Nov 25 14:45:28 CET 2009

Thank you. Now aaa_radius module is there and I've added it in configuration
file. But now I have a new error.  It says:
Nov 25 17:41:06 [30313] ERROR:aaa_radius:mod_init: radius configuration file
not set
Nov 25 17:41:06 [30313] ERROR:core:init_mod: failed to initialize module
aaa_radius
Nov 25 17:41:06 [30313] ERROR:core:main: error while initializing modules

So I added:
modparam("aaa_radius", "radius_config",
"/etc/radiusclient-ng/radiusclient.conf")
(ref: http://www.opensips.org/Resources/DocsTutRadius)

and it removed the error.

But another problem now:
I added
if (!aaa_www_authorize("opensips.org")) {
www_challenge("opensips.org", "1");
};
in my configuration files.  Then I ran freeradius and opensips and used
xlite sip phone to connect to my test server.
I can see my freeradius that it authenticated my request but my opensips
just closed with this messages in end:

Nov 25 18:36:43 [6494] DBG:core:get_hdr_field: to body ["testdig"<
> sip:testdig at 192.168.2.18 <sip%3Atestdig at 192.168.2.18>>
> ]
> Nov 25 18:36:43 [6494] DBG:uri:has_totag: no totag
> Nov 25 18:36:43 [6494] DBG:core:parse_headers: flags=4000
> Nov 25 18:36:43 [6494] DBG:core:get_hdr_field: cseq <CSeq>: <1> <REGISTER>
> Nov 25 18:36:43 [6494] DBG:core:get_hdr_field: content_length=0
> Nov 25 18:36:43 [6494] DBG:core:get_hdr_field: found end of header
> Nov 25 18:36:43 [6494] DBG:auth:pre_auth: credentials with given realm not
> found
> Nov 25 18:36:43 [6494] DBG:auth:reserve_nonce_index: second= 22, sec_monit=
> -1, index= 6
> Nov 25 18:36:43 [6494] DBG:auth:build_auth_hf: nonce index= 6
> Nov 25 18:36:43 [6494] DBG:auth:build_auth_hf: 'WWW-Authenticate: Digest
> realm="opensips.org",
> nonce="4b0d330900000006867ba8b2cfc8135a697ac20566d6e7e6", qop="auth"
> '
> Nov 25 18:36:43 [6494] DBG:core:parse_headers: flags=ffffffffffffffff
> Nov 25 18:36:43 [6494] DBG:core:check_ip_address: params 192.168.2.12,
> 192.168.2.12, 0
> Nov 25 18:36:43 [6494] DBG:core:destroy_avp_list: destroying list (nil)
> Nov 25 18:36:43 [6494] DBG:core:receive_msg: cleaning up
> Nov 25 18:36:43 [6494] DBG:core:parse_msg: SIP Request:
> Nov 25 18:36:43 [6494] DBG:core:parse_msg: method: <REGISTER>
> Nov 25 18:36:43 [6494] DBG:core:parse_msg: uri: <sip:192.168.2.18>
> Nov 25 18:36:43 [6494] DBG:core:parse_msg: version: <SIP/2.0>
> Nov 25 18:36:43 [6494] DBG:core:parse_headers: flags=2
> Nov 25 18:36:43 [6494] DBG:core:parse_via_param: found param type 232,
> <branch> = <z9hG4bK-d8754z-08647909f42cfa04-1---d8754z->; state=6
> Nov 25 18:36:43 [6494] DBG:core:parse_via_param: found param type 235,
> <rport> = <n/a>; state=17
> Nov 25 18:36:43 [6494] DBG:core:parse_via: end of header reached, state=5
> Nov 25 18:36:43 [6494] DBG:core:parse_headers: via found, flags=2
> Nov 25 18:36:43 [6494] DBG:core:parse_headers: this is the first via
> Nov 25 18:36:43 [6494] DBG:core:receive_msg: After parse_msg...
> Nov 25 18:36:43 [6494] DBG:core:receive_msg: preparing to run routing
> scripts...
> Nov 25 18:36:43 [6494] DBG:core:parse_headers: flags=100
> Nov 25 18:36:43 [6494] DBG:maxfwd:is_maxfwd_present: value = 70
> Nov 25 18:36:43 [6494] DBG:core:parse_headers: flags=8
> Nov 25 18:36:43 [6494] DBG:core:parse_to: end of header reached, state=10
> Nov 25 18:36:43 [6494] DBG:core:parse_to: display={"testdig"}, ruri={
> sip:testdig at 192.168.2.18 <sip%3Atestdig at 192.168.2.18>}
> Nov 25 18:36:43 [6494] DBG:core:get_hdr_field: <To> [37]; uri=[
> sip:testdig at 192.168.2.18 <sip%3Atestdig at 192.168.2.18>]
> Nov 25 18:36:43 [6494] DBG:core:get_hdr_field: to body ["testdig"<
> sip:testdig at 192.168.2.18 <sip%3Atestdig at 192.168.2.18>>
> ]
> Nov 25 18:36:43 [6494] DBG:uri:has_totag: no totag
> Nov 25 18:36:43 [6494] DBG:core:parse_headers: flags=4000
> Nov 25 18:36:43 [6494] DBG:core:get_hdr_field: cseq <CSeq>: <2> <REGISTER>
> Nov 25 18:36:43 [6494] DBG:auth:check_nonce: comparing
> [4b0d330900000006867ba8b2cfc8135a697ac20566d6e7e6] and
> [4b0d330900000006867ba8b2cfc8135a697ac20566d6e7e6]
> Segmentation fault (core dumped)
>
>
1 thing i didn't include in my freeradius users file is:

> SIP-AVP = "sems:ann-account_locked",

and i didn't include following lines in opensips config file too.

> if (!aaa_proxy_authorize("")) { # Realm and URI user will be auto-generated
> proxy_challenge("", "1");
> };
>
if (!aaa_proxy_authorize("$pd", "$pU")) { # Realm and URI user are taken
> proxy_challenge("$pd", "1"); # from P-Preferred-Identity
> };

because it generated some error. (I can't exactly remember it now).

Please someone tell me what i did wrong.

Regards,

Saeed Akhtar

On Wed, Nov 25, 2009 at 5:24 PM, Irina Stanescu <ironmissy at gmail.com> wrote:

> You have to load the aaa_radius module because it provides an
> implementation for the aaa api used by several other modules.
> You did not find the aaa_radius.so because the aaa_radius module is not
> compiled by default.
> You have to compile it yourself ( using make modules
> modules=modules/aaa_radius ).
>
>
> Regards,
>
> Irina Stanescu
>
>
> On Wed, Nov 25, 2009 at 2:19 PM, Saeed Akhtar <saeedakhtar.484 at gmail.com>wrote:
>
>>
>> Hi,
>>
>> Thanks for your reply. First time I tried to load aaa_radius module. I
>> used following command:
>> loadmodule "aaa_radius.so"
>> and it gave me error:
>> ERROR:core:yyparse: module 'aaa_radius.so' not found in
>> '/usr/local/lib/opensips/modules/'
>>
>> So i thought that may be aaa_radius module is not exactly a module to
>> load seperatly in opensips. because i couldn't find aaa_radius.so file in my
>> modules folder.
>> Now i think i've done some terribly wrong in installing OpenSIPS with
>> radius access. Can you please help me out to correct it.
>>
>> Regards,
>>
>> Saeed Akhtar
>>
>>
>>
>>
>> On Wed, Nov 25, 2009 at 5:11 PM, Irina Stanescu <ironmissy at gmail.com>wrote:
>>
>>> Hi Saeed,
>>>
>>> Did you load the aaa_radius module?
>>>
>>> Regards,
>>> Irina Stanescu
>>>
>>> On Wed, Nov 25, 2009 at 1:37 PM, Saeed Akhtar <saeedakhtar.484 at gmail.com
>>> > wrote:
>>>
>>>>
>>>> hi all,
>>>>
>>>> i'm trying to connect OpenSIPS with FreeRadius on Ubuntu Server 9.04.
>>>> I've installed radius client and free radius server and then opensips. and
>>>> I've following error lines when i run opensips.
>>>>
>>>> DBG:core:find_*mod_*export: <aaa_*bind_*api> in module aaa_radius not
>>>> found
>>>>
>>>> ERROR:core:aaa_prot: <aaa_radius> has no bind api function
>>>>
>>>> ERROR:acc:init*acc*aaa: AAA protocol bind failure
>>>>
>>>> ERROR:acc:mod_init:failed to init radius
>>>>
>>>> ERROR:core:init_mod: failed to initialize module acc
>>>>
>>>> ERROR:core:main: error while initializeing modules
>>>> Can someone please help me to resolve this issue
>>>>
>>>>
>>>> Regards,
>>>>
>>>> Saeed Akhtar
>>>>
>>>>
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users at lists.opensips.org
>>>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>>
>>>>
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users at lists.opensips.org
>>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>
>>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.opensips.org/pipermail/users/attachments/20091125/52e3f442/attachment.htm 