[OpenSIPS-Users] Problem using radius_send_auth
bogdan at opensips.org
Thu Mar 27 19:31:54 CET 2014
Just take care, as changing the data type may lead to mis-processing
that Radius AVP....But depends on the entities filling in and reading
OpenSIPS Founder and Developer
On 27.03.2014 20:24, John Quick wrote:
> I agree. It seems to be a limitation in libradiusclient.
> I found another dictionary, not from FreeRadius, where attribute 80
> (Message-Authenticator) is defined as a string attribute. When I use this
> new dictionary, the warning message " rc_avpair_gen: received unknown
> attribute 80 of length 18" has gone. So I am making some progress, but not
> everything is quite working yet.
> -----Original Message-----
> From: Bogdan-Andrei Iancu [mailto:bogdan at opensips.org]
> Sent: 27 March 2014 16:32
> To: john.quick at smartvox.co.uk; 'OpenSIPS users mailling list'
> Subject: Re: [OpenSIPS-Users] Problem using radius_send_auth
> Hi John,
> Based on the error, it is clear - the libradiusclient simply does not
> support the "octets" data type - so it is not a matter of dictionary, but of
> libradiusclient capabilities.
> Bogdan-Andrei Iancu
> OpenSIPS Founder and Developer
> On 27.03.2014 11:54, John Quick wrote:
>> Hi Bogdan,
>> Yes, I assume it is an error from libradiusclient-ng because the path
>> to the main dictionary is defined in radiusclient.conf and then the
>> additional dictionaries are added as $INCLUDE statements at the end of
>> the main dictionary file. I have INCLUDES for dictionary.cisco,
>> dictionary.sip, dictionary.opensips and dictionary.rfc2865.
>> The file dictionary.rfc2865 was copied from the collection installed
>> with FreeRadius Server, but I had to comment out every line that
>> defined an attribute of type "octets" because when not commented out I
>> could not even start OpenSIPS. It gives the following error messages:
>> 2014-03-27 09:46:24 INFO:auth_aaa:mod_init: initializing...
>> 2014-03-27 09:46:24 rc_read_dictionary: invalid type on line 11 of
>> dictionary /usr/local/etc/radiusclient-ng/dictionary.rfc2865
>> 2014-03-27 09:46:24 ERROR:aaa_radius:rad_init_prot: failed to read
>> radius dictionary
>> 2014-03-27 09:46:24 ERROR:auth_aaa:mod_init: aaa init protocol
>> 2014-03-27 09:46:24 ERROR:core:init_mod: failed to initialize module
>> 2014-03-27 09:46:24 ERROR:core:main: error while initializing modules
>> With the "octets" attributes all commented out, I am able to start
>> OpenSIPS, but every time radius_send_auth is called, the following
>> warning is reported in the opensips log file:
>> rc_avpair_gen: received unknown attribute 80 of length 18: <0x.....>
>> Where <0x....> is a long and apparently random Hex value.
>> -----Original Message-----
>> From: Bogdan-Andrei Iancu [mailto:bogdan at opensips.org]
>> Sent: 27 March 2014 08:53
>> To: john.quick at smartvox.co.uk; OpenSIPS users mailling list
>> Subject: Re: [OpenSIPS-Users] Problem using radius_send_auth
>> Hi John,
>> The error on "octets" data type comes from the libradiusclient, not
>> from opensips itself, right ?
>> Bogdan-Andrei Iancu
>> OpenSIPS Founder and Developer
>> On 24.03.2014 13:37, John Quick wrote:
>>> I'm using OpenSIPS version 1.8.2 with radiusclient-ng.
>>> I need to be able to make custom radius authentication requests using
>>> radius_send_auth (a function in the aaa_radius module).
>>> The first time I tried, it failed and reported an error that
>>> Message-Authenticator was an unknown attribute.
>>> I found the missing attribute in dictionary.rfc2869, but when I
>>> include this dictionary, OpenSIPS fails to start and reports an error
>>> that seems to point to the "octets" attribute type being unrecognised.
>>> Any help with this would be greatly appreciated.
>>> John Quick
>>> Smartvox Limited
>>> Web: www.smartvox.co.uk
>>> Users mailing list
>>> Users at lists.opensips.org
More information about the Users