[Freeswitch-users] Failed to load radius handle for digest invite authentication
Борисов, Дмитрий / Dmitriy Borisov
bordmi at rarus.ru
Tue Apr 7 00:02:36 MSD 2015
Brian, on some systems it works fine with current config. I think, Gustavo
had some proprietarybilling with not standart dictionaries, because
Didgest-Username attribute was standartised by RFC 5090:
https://tools.ietf.org/html/rfc5090#section-3.13
2015-04-06 22:22 GMT+03:00 Brian West <brian at freeswitch.org>:
> Once you have this working you should file a bug in the docs and do a pull
> request for the config file fixes.
>
> On Mon, Apr 6, 2015 at 12:23 PM, Gustavo Silva <silvagustavo at yandex.ru>
> wrote:
>
>>
>> Hi Dmitriy!
>>
>> I fix that with the sip dictionary. This module, xml_radius, uses the
>> digest method and when I sniffed the packets between the freeswitch server
>> and freeradius server, I noticed that the digest parameters were not being
>> sent. Checking the radiusclient dictionary, I saw that the sip dictionary
>> was not included.
>>
>> There was another problem that I also had to fix. In the
>> xml_radius.conf.xml file, the Digest username was like "Digest-username"
>> and in the sip dictionary, it was like "Digest-User-Name". Somehow, the
>> radius server was not understanding the parameter Digest-username. I had
>> to change to Digest-User-Name.
>>
>> By the way, thanks for the clues that you have sent Dmitriy!
>>
>> Regards,
>> Gustavo
>>
>> Sent from my BlackBerry 10 smartphone.
>> *From: *Борисов, Дмитрий / Dmitriy Borisov
>> *Sent: *понедельник, 6 апреля 2015 г., 15:43
>> *To: *FreeSWITCH Users Help
>> *Reply To: *FreeSWITCH Users Help
>> *Subject: *Re: [Freeswitch-users] Failed to load radius handle for
>> digest invite authentication
>>
>> Hi, Gustavo!
>>
>> Your problems not in FreeSWITCH configuration or sources but in
>> freeradius-client configuration. Check system logs for radius errors. Radius
>> handle is allocating by freeradius-client library function called by
>> freeswitch mod_xml_radius module (look at mod_xml_radius.c line 633 and
>> 946).
>>
>> 2015-04-06 11:07 GMT+03:00 Густаво Силва <gfs at etherway.ru>:
>>
>>>
>>> Hi everyone!
>>>
>>> How to solve this problem occurring on Freeswitch with the xml_radius
>>> module?
>>> 2015-04-06 11:48:25.284825 [ERR] mod_xml_radius.c:633 Failed to
>>> load radius handle for digest invite authentication
>>> 2015-04-06 11:48:25.284825 [ERR] mod_xml_radius.c:946 Failed to
>>> create new accounting_start handle for call:
>>> 0fcb1214-4941-477b-b329-2d034623c1e9
>>>
>>>
>>> My freeradius server is getting this parameters(sniffed by wireshark:
>>> 192.168.56.1 - softphone, 192.168.56.105 - Freeswitch/radiusclient,
>>> 192.168.56.103 - Freeradius server):
>>>
>>>
>>> Radius Protocol
>>> Code: Accounting-Request (4)
>>> Packet identifier: 0xf9 (249)
>>> Length: 240
>>> Authenticator: 19a3f95c13b4811e35b43d5390b29f8a
>>>
>>> Attribute Value Pairs
>>> AVP: l=6 t=Acct-Status-Type(40): Start(1)
>>> Acct-Status-Type: Start (1)
>>> AVP: l=38 t=Acct-Session-Id(44):
>>> 0fcb1214-4941-477b-b329-2d034623c1e9
>>> Acct-Session-Id: 0fcb1214-4941-477b-b329-2d034623c1e9
>>> AVP: l=6 t=User-Name(1): 1002
>>> User-Name: 1002
>>> AVP: l=12 t=Vendor-Specific(26) v=FreeSWITCH(27880)
>>> VSA: l=6 t=Freeswitch-Src(4): 1002
>>> Freeswitch-Src: 1002
>>> AVP: l=12 t=Vendor-Specific(26) v=FreeSWITCH(27880)
>>> VSA: l=6 t=Freeswitch-CLID(2): 1002
>>> Freeswitch-CLID: 1002
>>> AVP: l=12 t=Vendor-Specific(26) v=FreeSWITCH(27880)
>>> VSA: l=6 t=Freeswitch-Dst(5): 1001
>>> Freeswitch-Dst: 1001
>>> AVP: l=11 t=Vendor-Specific(26) v=FreeSWITCH(27880)
>>> VSA: l=5 t=Freeswitch-Dialplan(3): XML
>>> Freeswitch-Dialplan: XML
>>> AVP: l=6 t=Framed-IP-Address(8): 192.168.56.1
>>> Framed-IP-Address: 192.168.56.1 (192.168.56.1)
>>> AVP: l=8 t=Vendor-Specific(26) v=FreeSWITCH(27880)
>>> VSA: l=2 t=Freeswitch-RDNIS(17):
>>> Freeswitch-RDNIS:
>>> AVP: l=15 t=Vendor-Specific(26) v=FreeSWITCH(27880)
>>> VSA: l=9 t=Freeswitch-Context(18): default
>>> Freeswitch-Context: default
>>> AVP: l=12 t=Vendor-Specific(26) v=FreeSWITCH(27880)
>>> VSA: l=6 t=Freeswitch-Ani(8): 1002
>>> Freeswitch-Ani: 1002
>>> AVP: l=8 t=Vendor-Specific(26) v=FreeSWITCH(27880)
>>> VSA: l=2 t=Freeswitch-Aniii(9):
>>> Freeswitch-Aniii:
>>> AVP: l=17 t=Vendor-Specific(26) v=FreeSWITCH(27880)
>>> VSA: l=11 t=Freeswitch-Source(19): mod_sofia
>>> Freeswitch-Source: mod_sofia
>>> AVP: l=39 t=Vendor-Specific(26) v=FreeSWITCH(27880)
>>> VSA: l=33 t=Freeswitch-Callstartdate(20):
>>> 2015-04-06T11:48:25.284825+0400
>>> Freeswitch-Callstartdate:
>>> 2015-04-06T11:48:25.284825+0400
>>> AVP: l=6 t=NAS-Port(5): 0
>>> NAS-Port: 0
>>> AVP: l=6 t=Acct-Delay-Time(41): 0
>>> Acct-Delay-Time: 0
>>> AVP: l=6 t=NAS-IP-Address(4): 192.168.56.105
>>> NAS-IP-Address: 192.168.56.105 (192.168.56.105)
>>>
>>>
>>> Regards,
>>> Gustavo Silva
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>>
>>
>> --
>> with best regards,
>> Dmitriy Borisov
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
>
> --
>
> *Brian West*
> brian at freeswitch.org
>
>
> *Twitter: @FreeSWITCH , @briankwest*
> http://www.freeswitchbook.com
> http://www.freeswitchcookbook.com
>
> ClueCon 2015 Call for Speakers
> <https://www.cluecon.com/call-for-speakers/> | Register
> <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch
> <https://www.reddit.com/r/freeswitch>
>
> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378)
> *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
--
with best regards,
Dmitriy Borisov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150406/24c5cc7d/attachment.html
Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users
mailing list