[Freeswitch-users] Radius AAA

[Tihomir Culjaga]

On Sat, Nov 13, 2010 at 9:04 AM, Abid Saleem <abid_freeswitch at live.com>wrote:

>  Dear Tihomir,
>
> I think you did not understand what my problem is. Let me explain.
>
> I know that I can evaluate the response from auth_function and act
> accordingly (bridge or not bridge the call according to auth result). This
> part is ok and I can do it because I am getting OK or NOK in AUTH_RESULT.
> The issue is I need to disconnect the call after scheduled number of seconds
> returned by radius in h323-credit-time attribute whose value in this case
> is not being populated into credit_time parameter of FS.
>
> well, you could have pointed the finger on this before :P


2010-11-04 18:09:53.396212 [DEBUG] mod_rad_auth.c:491 sending radius packet
...
2010-11-04 18:09:54.571999 [DEBUG] mod_rad_auth.c:497 RADIUS Authentication
OK
2010-11-04 18:09:54.571999 [DEBUG] mod_rad_auth.c:519 Handle attribute:
BILING_MODEL
*2010-11-04 18:09:54.571999 [DEBUG] mod_rad_auth.c:529   No found out
attribute id: 109, pec:9, (BILING_MODEL)*
2010-11-04 18:09:54.571999 [DEBUG] mod_rad_auth.c:519 Handle attribute:
CREDIT_AMOUNT
2010-11-04 18:09:54.571999 [DEBUG] mod_rad_auth.c:529   No found out
attribute id: 101, pec:9, (CREDIT_AMOUNT)

the attribute with id:109 and pec:9 is not found in the returning radius
message. This can just mean 2 things:

1. really not present in the returning radius message
2. the module doesn't have an appropriate dictionary referencing pec 9 and
id 102.

well, here its the dictionary im positive of that... so find attached the
one im using. Put this on your server and its gonna work.




> If you still do not understand, lets put it this way that even if I use the
> mod_rad_auth.conf.xml and dialplan configuration you sent, still the FS is
> not able to obtain the value of credit_amount and credit_time although
> radius response parameters are received by the server.
>

as i said before ... check your dictionary.



>
> Also I have checked in mod_rad_auth.c file that all entries related to
> credit_amount, billing_model etc are commented and credit_time does not even
> exist in that file.
>
>

you are missing the point of this module ... the VSAs are configurable via
config file.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20101113/fa996884/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dictionary.all
Type: application/octet-stream
Size: 21151 bytes
Desc: not available
Url : http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20101113/fa996884/attachment-0001.obj