[Freeswitch-users] Dialplan authentication

Борисов, Дмитрий / Dmitriy Borisov bordmi at rarus.ru
Thu Apr 16 15:24:01 MSD 2015 

what build of freeswitch are you using? or sources version?

2015-04-16 12:23 GMT+03:00 Густаво Силва <gfs at etherway.ru>:

>  INVITE method is not creating the right directory with the variables from
> radius:
>
> 2015-04-16 04:52:48.778058 [ERR] mod_xml_radius.c:592 mod_xml_radius:
> result(RC=0)
> 2015-04-16 04:52:48.778058 [ERR] mod_xml_radius.c:627 XML: <?xml
> version="1.0"?>
> <document type="freeswitch/xml">
>   <section name="directory">
>     <domain name="192.168.56.101">
>       <user id="1004">
>         <variables></variables>
>       </user>
>     </domain>
>   </section>
> </document>
>
>
> In radius users I have set:
> 1004 Cleartext-Password := "prosegur"
>      Freeswitch-AVPair = "alias=315",
>      Freeswitch-AVPair += "international=yes",
>      Freeswitch-AVPair += "natuser=no",
>      Freeswitch-AVPair += "vm_pass=1234",
>      Freeswitch-Context = "default"
>
> I am really lost, I dont know what else to test.
>
> On 16.04.2015 10:31, Sergey Safarov wrote:
>
>  Tue Apr 14 17:24:11 2015 : Auth: Login incorrect: [<no User-Name
> attribute>/<no User-Password attribute>] (from client localhost port 0
> cli 1008)
>  I thinkin FS is not sending username, realm and password provided by
> user.
>
>  I do not have example of xml_radius.conf.xml
> May be other guys can help you.
>
> On Thu, Apr 16, 2015 at 9:47 AM, Gustavo Silva <silvagustavo at yandex.ru>
> wrote:
>
>>  These errors have shown up in radius.log:
>>
>>
>>  Tue Apr 14 17:24:11 2015 : Auth: Login OK: [1008/<via Auth-Type =
>> DIGEST>] (from client localhost port 0 cli 1008)
>> Tue Apr 14 17:24:11 2015 : Info: rlm_radutmp: Login entry for NAS
>> localhost port 0 duplicate
>> Tue Apr 14 17:24:11 2015 : Auth: Login incorrect: [<no User-Name
>> attribute>/<no User-Password attribute>] (from client localhost port 0
>> cli 1008)
>> Tue Apr 14 17:24:14 2015 : Error: rlm_radutmp: Logout for NAS localhost
>> port 0, but no Login record
>>
>>
>>
>>  Sent from my BlackBerry 10 smartphone.
>>    *From: *Sergey Safarov
>> *Sent: *четверг, 16 апреля 2015 г., 9:43
>> *To: *FreeSWITCH Users Help
>> *Reply To: *FreeSWITCH Users Help
>> *Subject: *Re: [Freeswitch-users] Dialplan authentication
>>
>>  Are you see auth requests on RADIUS server side?
>> Are there errors in RADIUS server log?
>>
>> On Thu, Apr 16, 2015 at 7:52 AM, Gustavo Silva <silvagustavo at yandex.ru>
>> wrote:
>>
>>>  So we back to the beginning.
>>>
>>>  How can I use mod_xml_radius in dialplan?
>>>
>>>  I have set up something like this:
>>>
>>>
>>>>>>> <extension name="auth" continue="true">
>>>>>>>   <condition field="${radius_auth_result}" expression="^0$">
>>>>>>>   <action application="radius_auth" inline="true"/>
>>>>>>>   </condition>
>>>>>>> </extension>
>>>>>>>
>>>>>>>
>>>  But I got authentication failed.
>>>
>>>
>>>
>>>
>>>  Sent from my BlackBerry 10 smartphone.
>>>    *From: *Sergey Safarov
>>> *Sent: *четверг, 16 апреля 2015 г., 7:04
>>> *To: *FreeSWITCH Users Help
>>> *Reply To: *FreeSWITCH Users Help
>>> *Subject: *Re: [Freeswitch-users] Dialplan authentication
>>>
>>>  I recommend return all required data in response and not use
>>> mod_rad_auth module.
>>>
>>> On Wed, Apr 15, 2015, 18:12 Sergey Safarov <s.safarov at gmail.com> wrote:
>>>
>>>> If you see mod_xml_radius.c string 667, then you can find that FS
>>>> create variables from RADIUS server responce.
>>>> Try return from RADIUS server vendor spectific attribute (VSA) with
>>>> password value.
>>>> Then call "info" application from dialplan and locate password value in
>>>> variables.
>>>>
>>>>  Sergey
>>>>
>>>> On Wed, Apr 15, 2015 at 3:17 PM, Густаво Силва <gfs at etherway.ru> wrote:
>>>>
>>>>>  I would like to use this approach:
>>>>>     <action inline="false" application="set"
>>>>> data="PASSWD=${user_data(${caller_id_number}@${sip_from_host} param
>>>>> password)}"/>
>>>>>
>>>>> I dont know how I could access the password of the registered user who
>>>>> is making a call, to authenticate (or check billing) with the rad_auth
>>>>> module if I am using xml_radius module.
>>>>>
>>>>> First I had tested only the mod rad_auth as Sergey had mentioned. It
>>>>> had worked. Know I am working together with the xml_radius module.
>>>>>
>>>>> On 15.04.2015 14:55, Gustavo Silva wrote:
>>>>>
>>>>> So, in dialplan I could access this parameter by ${vm_pass}?
>>>>>
>>>>>  Sent from my BlackBerry 10 smartphone.
>>>>>    *From: *Борисов, Дмитрий / Dmitriy Borisov
>>>>> *Sent: *среда, 15 апреля 2015 г., 14:51
>>>>> *To: *FreeSWITCH Users Help
>>>>> *Reply To: *FreeSWITCH Users Help
>>>>> *Subject: *Re: [Freeswitch-users] Dialplan authentication
>>>>>
>>>>>  Hi!
>>>>>
>>>>>  If you use rad_auth dialplan command, then after using it you will
>>>>> have Freeswitch-AVPair channel variable with value vm_pass=1234
>>>>> If you use auth_invite or auth_reg, than mod_xml_radius will create
>>>>> user param with name Freeswitch-AVPair and value vm_pass=1234 in result
>>>>> directory
>>>>>
>>>>> 2015-04-15 13:56 GMT+03:00 Густаво Силва <gfs at etherway.ru>:
>>>>>
>>>>>>  It works.
>>>>>>
>>>>>> Man, just more one question, how can I get the value of this variable
>>>>>> in my diaplan? I am using mod_xml_radius.
>>>>>>
>>>>>>         Freeswitch-AVPair = "vm_pass=1234"
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> On 15.04.2015 12:08, Sergey Safarov wrote:
>>>>>>
>>>>>> Add strings to dialplan like
>>>>>> <action inline="true" application="set" data="GWID=${h323-gw-id}"/>
>>>>>>  <action inline="true" application="set"
>>>>>> data="TRANSACTIONID=h323-ivr-out=transactionID:1234"/>
>>>>>>  <action inline="true" application="set"
>>>>>> data="CALLEDNUMBER=${destination_number}"/>
>>>>>>  <action inline="true" application="set"
>>>>>> data="CALLINGNUMBER=${caller_id_number}"/>
>>>>>>
>>>>>>  You can try comment this attributs in rad_auth.conf.xml
>>>>>>
>>>>>>
>>>>>>
>>>>>> On Wed, Apr 15, 2015 at 11:26 AM, Густаво Силва <gfs at etherway.ru>
>>>>>> wrote:
>>>>>>
>>>>>>>  Sergey, do you know why I am getting these variables undefined?
>>>>>>>
>>>>>>> [ERR] mod_rad_auth.c:178 Undefined channel variable: GWID.
>>>>>>> [ERR] mod_rad_auth.c:178 Undefined channel variable: TRANSACTIONID.
>>>>>>> [ERR] mod_rad_auth.c:178 Undefined channel variable: CALLEDNUMBER.
>>>>>>> [ERR] mod_rad_auth.c:178 Undefined channel variable: CALLINGNUMBER.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> On 14.04.2015 22:34, Sergey Safarov wrote:
>>>>>>>
>>>>>>> In provided example password stored in directory.
>>>>>>> Directory can be in mod_xml_radius (
>>>>>>> https://freeswitch.org/confluence/display/FREESWITCH/mod_xml_radius)
>>>>>>> or other dynamically generated directory.
>>>>>>>
>>>>>>>
>>>>>>> On Tue, Apr 14, 2015 at 9:56 PM, Gustavo Silva <
>>>>>>> silvagustavo at yandex.ru> wrote:
>>>>>>>
>>>>>>>>  Hi Sergey,
>>>>>>>>
>>>>>>>>  Tks for the help but there is a catch in this solution. I will be
>>>>>>>> still having ‎the password and user name in freeswitch server.
>>>>>>>>
>>>>>>>>  I would like that the radius server handles it.
>>>>>>>>
>>>>>>>>  Is there a way with the rad_auth module where I wouldn't need to
>>>>>>>> set up password in diaplan file? All the authentication should be done with
>>>>>>>> the radius server.
>>>>>>>>
>>>>>>>>  I say that because, for example: I have 200 users, with
>>>>>>>> diferentes passwords configured in the radius server. So, by this solution
>>>>>>>> with rad_auth module, I should also have 200 different password in the
>>>>>>>> diaplan configuration, right?
>>>>>>>>
>>>>>>>>  Regards,
>>>>>>>> Gustavo
>>>>>>>>
>>>>>>>>  Sent from my BlackBerry 10 smartphone.
>>>>>>>>    *From: *Sergey Safarov
>>>>>>>> *Sent: *вторник, 14 апреля 2015 г., 21:16
>>>>>>>>  *To: *FreeSWITCH Users Help
>>>>>>>> *Reply To: *FreeSWITCH Users Help
>>>>>>>> *Subject: *Re: [Freeswitch-users] Dialplan authentication
>>>>>>>>
>>>>>>>>  This can help you
>>>>>>>>
>>>>>>>>  [root at fs1 autoload_configs]# cat rad_auth.conf.xml
>>>>>>>> <configuration name="rad_auth.conf" description="radius
>>>>>>>> authentification module">
>>>>>>>>  <settings>
>>>>>>>>     <!-- backward compatibility to allow radiusclient config file
>>>>>>>> instead of an embedded config -->
>>>>>>>>     <!--  <param name="radius_config"
>>>>>>>> value="/usr/local/etc/radiusclient/radiusclient.conf"/>   -->
>>>>>>>>  </settings>
>>>>>>>>
>>>>>>>>   <client>
>>>>>>>>    <param name="authserver" value="10.40.0.5:1814:x7h6t4g"/>
>>>>>>>>    <param name="dictionary"
>>>>>>>> value="/etc/radiusclient/dictionary.all"/>
>>>>>>>>    <param name="seqfile" value="/var/run/radius.seq"/>
>>>>>>>>    <param name="mapfile" value="/etc/radiusclient/port-id-map"/>
>>>>>>>>    <param name="default_realm" value=""/>
>>>>>>>>    <param name="radius_timeout" value="1"/>
>>>>>>>>    <param name="radius_retries" value="0"/>
>>>>>>>>    <param name="radius_deadtime" value="0"/>
>>>>>>>>    <param name="bindaddr" value="*"/>
>>>>>>>>  </client>
>>>>>>>>
>>>>>>>>   <vsas>
>>>>>>>>    <!--
>>>>>>>>         name:       just a description
>>>>>>>>         value:      direct input or variable
>>>>>>>>         pec:        vendor ID (0 for default, 9 for cisco...)
>>>>>>>>         expr:       0 - direct input (string), 1 - channel variable
>>>>>>>>         direction:  in for radius-request, out for radius-response
>>>>>>>>    -->
>>>>>>>>
>>>>>>>>     <!-- mappings for radius request message; input attributes -->
>>>>>>>>    <param name="h323-conf-id" id="24" value="CALLID" pec="9"
>>>>>>>> expr="1" direction="in"/>
>>>>>>>>    <param name="h323-gw-id" id="33" value="GWID" pec="9" expr="1"
>>>>>>>> direction="in"/>
>>>>>>>>    <param name="Cisco-AVPair" id="1" value="TRANSACTIONID" pec="9"
>>>>>>>> expr="1" direction="in"/>
>>>>>>>>     <param name="Called-Station-Id" id="30" value="CALLEDNUMBER"
>>>>>>>> pec="0" expr="1" direction="in"/>
>>>>>>>>    <param name="Calling-Station-Id" id="31" value="CALLINGNUMBER"
>>>>>>>> pec="0" expr="1" direction="in"/>-->
>>>>>>>>    <param name="NAS-Port-Type" id="61" value="0" pec="0" expr="0"
>>>>>>>> direction="in"/>
>>>>>>>>    <param name="Login-User" id="1" value="1" pec="0" expr="0"
>>>>>>>> direction="in"/> -->
>>>>>>>>
>>>>>>>>     <!-- mappings for radius-response message; output values from
>>>>>>>> returning outributes -->
>>>>>>>>    <param name="CREDIT_AMOUNT" id="101" value="credit_amount"
>>>>>>>> pec="9" expr="0" direction="out"/>
>>>>>>>>    <param name="CURRENCY" id="110" value="currency" pec="9"
>>>>>>>> expr="0" direction="out"/>
>>>>>>>>    <param name="CREDIT_TIME" id="102" value="h323-credit_time"
>>>>>>>> pec="9" expr="0" direction="out"/>
>>>>>>>>    <param name="PER_MINUTE_PRICE" id="251"
>>>>>>>> value="Cisco-Servicce-Info" pec="9" expr="0" direction="out"/>
>>>>>>>>    <param name="PREFFERED_LANG" id="107" value="preffered_lang"
>>>>>>>> pec="9" expr="0" direction="out"/>
>>>>>>>>     <param name="H323-IVR-IN:DIRATION" id="1"
>>>>>>>> value="h323_ivr_duration" pec="9" expr="0" direction="out"/> -->
>>>>>>>>    <param name="RADIUS_RETURN_CODE" id="103" value="return_code"
>>>>>>>> pec="9" expr="0" direction="out"/>
>>>>>>>>    <!-- expr param is to be ignored here-->
>>>>>>>>  </vsas>
>>>>>>>> </configuration>
>>>>>>>> [root at fs1 autoload_configs]#
>>>>>>>>
>>>>>>>>  Dialplan fragment
>>>>>>>>        <extension name="operator-rad-auth" continue="true">
>>>>>>>>          <condition regex="any">
>>>>>>>>             <regex field="${accountcode}" expression="^8$"/>
>>>>>>>>          </condition>
>>>>>>>>          <condition field="${destination_number}"
>>>>>>>> expression="^\+(\d+)$">
>>>>>>>>             <action application="export"
>>>>>>>> data="h323-gw-id=${accountcode_bleg}"/>
>>>>>>>>             <action application="unset"
>>>>>>>> data="disable_radius_start"/>
>>>>>>>>             <action application="unset" data="disable_radius_stop"/>
>>>>>>>>             <action inline="true" application="set"
>>>>>>>> data="CALLID=h323-conf-id=${uuid}"/>
>>>>>>>>             <action inline="true" application="set"
>>>>>>>> data="GWID=${accountcode_bleg}"/>
>>>>>>>>             <action inline="true" application="set" data="USERNAME=
>>>>>>>> login at operator.ru"/>
>>>>>>>>             <action inline="true" application="set"
>>>>>>>> data="PASSWD=xxxxxxxx"/>
>>>>>>>>             <action inline="true" application="set"
>>>>>>>> data="DIALED_NUMBER=$1"/>
>>>>>>>>             <action application="auth_function" data="in
>>>>>>>> ${DIALED_NUMBER}, in ${USERNAME}, in ${PASSWD}, out AUTH_RESULT"/>
>>>>>>>>          </condition>
>>>>>>>>       </extension>
>>>>>>>>
>>>>>>>>  Log fragment
>>>>>>>>  Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru parsing
>>>>>>>> [mr24.gateways.rcsnet.ru->operator-rad-auth] continue=true
>>>>>>>> Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru Regex
>>>>>>>> (PASS) [operator-rad-auth] ${accountcode}(8) =~ /^8$/ match=any
>>>>>>>> Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru Regex
>>>>>>>> (PASS) [operator-rad-auth] ${destination_number}(+749593377xx) =~
>>>>>>>> /^\+(\d+)$/ break=on-false
>>>>>>>> Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru Action
>>>>>>>> export(h323-gw-id=${accountcode_bleg})
>>>>>>>> Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru Action
>>>>>>>> unset(disable_radius_start)
>>>>>>>> Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru Action
>>>>>>>> unset(disable_radius_stop)
>>>>>>>> Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru Action
>>>>>>>> set(CALLID=h323-conf-id=${uuid}) INLINE
>>>>>>>> EXECUTE sofia/mr24/0000079639652834 at gateways.rcsnet.ru
>>>>>>>> set(CALLID=h323-conf-id=bd091212-e2b0-11e4-98e2-d102deb9a97d)
>>>>>>>> 2015-04-14 14:15:43.446357 [DEBUG] mod_dptools.c:1435 sofia/mr24/
>>>>>>>> 00000796396528xx at gateways.operator.ru SET
>>>>>>>> [CALLID]=[h323-conf-id=bd091212-e2b0-11e4-98e2-d102deb9a97d]
>>>>>>>> Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru Action
>>>>>>>> set(GWID=${accountcode_bleg}) INLINE
>>>>>>>> EXECUTE sofia/mr24/0000079639652834 at gateways.rcsnet.ru
>>>>>>>> set(GWID=1460)
>>>>>>>> 2015-04-14 14:15:43.446357 [DEBUG] mod_dptools.c:1435 sofia/mr24/
>>>>>>>> 00000796396528xx at gateways.rcsnet.ru SET [GWID]=[1460]
>>>>>>>> Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru Action
>>>>>>>> set(USERNAME=login at operator.ru) INLINE
>>>>>>>> EXECUTE sofia/mr24/0000079639652834 at gateways.rcsnet.ru
>>>>>>>> set(USERNAME=login at operator.ru)
>>>>>>>> 2015-04-14 14:15:43.446357 [DEBUG] mod_dptools.c:1435 sofia/mr24/
>>>>>>>> 0000079639652834 at gateways.rcsnet.ru SET [USERNAME]=[
>>>>>>>> login at operator.ru]
>>>>>>>> Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru Action
>>>>>>>> set(PASSWD=xxxxxxxx) INLINE
>>>>>>>> EXECUTE sofia/mr24/0000079639652834 at gateways.rcsnet.ru
>>>>>>>> set(PASSWD=xxxxxxxx)
>>>>>>>> 2015-04-14 14:15:43.446357 [DEBUG] mod_dptools.c:1435 sofia/mr24/
>>>>>>>> 00000796396528xx at gateways.operator.ru SET [PASSWD]=[xxxxxxxxxxx]
>>>>>>>> Dialplan: sofia/mr24/0000079639652834 at gateways.rcsnet.ru Action
>>>>>>>> set(DIALED_NUMBER=749593377xx) INLINE
>>>>>>>> EXECUTE sofia/mr24/0000079639652834 at gateways.rcsnet.ru
>>>>>>>> set(DIALED_NUMBER=749593377xx)
>>>>>>>> 2015-04-14 14:15:43.446357 [DEBUG] mod_dptools.c:1435 sofia/mr24/
>>>>>>>> 00000796396528xx at gateways.rcsnet.ru SET
>>>>>>>> [DIALED_NUMBER]=[749593377xx]
>>>>>>>> sofia/mr24/0000079639652834 at gateways.rcsnet.ru Action
>>>>>>>> auth_function(in ${DIALED_NUMBER}, in ${USERNAME}, in ${PASSWD}, out
>>>>>>>> AUTH_RESULT)
>>>>>>>> ..........
>>>>>>>>
>>>>>>>>  bd091212-e2b0-11e4-98e2-d102deb9a97d EXECUTE sofia/mr24/
>>>>>>>> 00000796396528xx at gateways.operator.ru auth_function(in
>>>>>>>> 74959337786, in login at operator.ru, in xxxxxxxxxxxx, out
>>>>>>>> AUTH_RESULT)
>>>>>>>> [DEBUG] mod_rad_auth.c:301 allocate initial structure.
>>>>>>>> [DEBUG] mod_rad_auth.c:313 initialzed configuration.
>>>>>>>> [DEBUG] mod_rad_auth.c:318 set authserver := 10.40.0.5:1814
>>>>>>>> :xxxxxxxx.
>>>>>>>> [DEBUG] mod_rad_auth.c:318 set dictionary :=
>>>>>>>> /etc/radiusclient/dictionary.all.
>>>>>>>> [DEBUG] mod_rad_auth.c:318 set seqfile := /var/run/radius.seq.
>>>>>>>> [DEBUG] mod_rad_auth.c:318 set mapfile :=
>>>>>>>> /etc/radiusclient/port-id-map.
>>>>>>>> [DEBUG] mod_rad_auth.c:318 set default_realm := .
>>>>>>>> [DEBUG] mod_rad_auth.c:318 set radius_timeout := 1.
>>>>>>>> [DEBUG] mod_rad_auth.c:318 set radius_retries := 0.
>>>>>>>> [DEBUG] mod_rad_auth.c:318 set radius_deadtime := 0.
>>>>>>>> [DEBUG] mod_rad_auth.c:318 set bindaddr := *.
>>>>>>>> [DEBUG] mod_rad_auth.c:371 ... radius: User-Name: login at operator.ru
>>>>>>>> [DEBUG] mod_rad_auth.c:380 ... radius: User-Password:
>>>>>>>> xxxxxxxxxxxxxxxxxx
>>>>>>>> DEBUG] mod_rad_auth.c:396 ... radius: Called-station-Id: 74959337786
>>>>>>>> [DEBUG] mod_rad_auth.c:413 Handle attribute: h323-conf-id
>>>>>>>> [DEBUG] mod_rad_auth.c:439 ... dictionary data: id:24, vendor id:9,
>>>>>>>> attr type:0, attr name:h323-conf-id (589848)
>>>>>>>> [DEBUG] mod_rad_auth.c:444 ... radius: key:h323-conf-id,
>>>>>>>> value:CALLID (h323-conf-id=bd091212-e2b0-11e4-98e2-d102deb9a97d) as string
>>>>>>>> [DEBUG] mod_rad_auth.c:413 Handle attribute: h323-gw-id
>>>>>>>> [DEBUG] mod_rad_auth.c:439 ... dictionary data: id:33, vendor id:9,
>>>>>>>> attr type:0, attr name:h323-gw-id (589857)
>>>>>>>> [DEBUG] mod_rad_auth.c:444 ... radius: key:h323-gw-id, value:GWID
>>>>>>>> (1460) as string
>>>>>>>> [DEBUG] mod_rad_auth.c:413 Handle attribute: NAS-Port-Type
>>>>>>>> [DEBUG] mod_rad_auth.c:439 ... dictionary data: id:61, vendor id:0,
>>>>>>>> attr type:1, attr name:NAS-Port-Type (61)
>>>>>>>> [DEBUG] mod_rad_auth.c:456 ... radius: key:NAS-Port-Type, value:0
>>>>>>>> (0) as integer
>>>>>>>> [DEBUG] mod_rad_auth.c:491 sending radius packet ...
>>>>>>>> [DEBUG] mod_rad_auth.c:497 RADIUS Authentication OK
>>>>>>>> [DEBUG] mod_rad_auth.c:519 Handle attribute: CREDIT_AMOUNT
>>>>>>>> [DEBUG] mod_rad_auth.c:522   attribute (CREDIT_AMOUNT) found in
>>>>>>>> radius packet
>>>>>>>> [DEBUG] mod_rad_auth.c:523   set variable credit_amount :=
>>>>>>>> h323-credit-amount=-600913.47
>>>>>>>> [DEBUG] mod_rad_auth.c:519 Handle attribute: CURRENCY
>>>>>>>> [DEBUG] mod_rad_auth.c:522   attribute (CURRENCY) found in radius
>>>>>>>> packet
>>>>>>>> [DEBUG] mod_rad_auth.c:523   set variable currency :=
>>>>>>>> h323-currency=RUR
>>>>>>>> [DEBUG] mod_rad_auth.c:519 Handle attribute: CREDIT_TIME
>>>>>>>> [DEBUG] mod_rad_auth.c:522   attribute (CREDIT_TIME) found in
>>>>>>>> radius packet
>>>>>>>> [DEBUG] mod_rad_auth.c:523   set variable h323-credit_time :=
>>>>>>>> h323-credit-time=86400
>>>>>>>> [DEBUG] mod_rad_auth.c:519 Handle attribute: PER_MINUTE_PRICE
>>>>>>>> [DEBUG] mod_rad_auth.c:522   attribute (PER_MINUTE_PRICE) found in
>>>>>>>> radius packet
>>>>>>>> [DEBUG] mod_rad_auth.c:523   set variable Cisco-Servicce-Info :=
>>>>>>>> 0.000000
>>>>>>>> [DEBUG] mod_rad_auth.c:519 Handle attribute: RADIUS_RETURN_CODE
>>>>>>>> [DEBUG] mod_rad_auth.c:522   attribute (RADIUS_RETURN_CODE) found
>>>>>>>> in radius packet
>>>>>>>> [DEBUG] mod_rad_auth.c:523   set variable return_code :=
>>>>>>>> h323-return-code=0
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> On Tue, Apr 14, 2015 at 5:28 PM, Gustavo Silva <
>>>>>>>> silvagustavo at yandex.ru> wrote:
>>>>>>>>
>>>>>>>>>
>>>>>>>>>  First it says that the the login is OK and after it says that
>>>>>>>>> the login is incorrect.
>>>>>>>>>
>>>>>>>>>  Tue Apr 14 17:24:11 2015 : Auth: Login OK: [1008/<via Auth-Type
>>>>>>>>> =
>>>>>>>>> DIGEST>] (from client localhost port 0 cli 1008)
>>>>>>>>> Tue Apr 14 17:24:11 2015 : Info: rlm_radutmp: Login entry for NAS
>>>>>>>>> localhost port 0 duplicate
>>>>>>>>> Tue Apr 14 17:24:11 2015 : Auth: Login incorrect: [<no User-Name
>>>>>>>>> attribute>/<no User-Password attribute>] (from client localhost
>>>>>>>>> port 0
>>>>>>>>> cli 1008)
>>>>>>>>> Tue Apr 14 17:24:14 2015 : Error: rlm_radutmp: Logout for NAS
>>>>>>>>> localhost
>>>>>>>>> port 0, but no Login record
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Sent from my BlackBerry 10 smartphone.
>>>>>>>>>
>>>>>>>>>    Original Message
>>>>>>>>>      *From: *Борисов, Дмитрий / Dmitriy Borisov
>>>>>>>>> *Sent: *вторник, 14 апреля 2015 г., 17:22
>>>>>>>>> *To: *FreeSWITCH Users Help
>>>>>>>>> *Reply To: *FreeSWITCH Users Help
>>>>>>>>> *Subject: *Re: [Freeswitch-users] Dialplan authentication
>>>>>>>>>
>>>>>>>>>  Hi!
>>>>>>>>>
>>>>>>>>>  Configuration looks good there, and what in radius.log on RADIUS
>>>>>>>>> server?
>>>>>>>>>
>>>>>>>>> 2015-04-14 14:01 GMT+03:00 Густаво Силва <gfs at etherway.ru>:
>>>>>>>>>
>>>>>>>>>> I have set up the following in my dialplan:
>>>>>>>>>>
>>>>>>>>>> <extension name="auth" continue="true">
>>>>>>>>>>   <condition field="${radius_auth_result}" expression="^0$">
>>>>>>>>>>   <action application="radius_auth" inline="true"/>
>>>>>>>>>>   </condition>
>>>>>>>>>> </extension>
>>>>>>>>>>
>>>>>>>>>> I am facing the following error:
>>>>>>>>>>
>>>>>>>>>> Dialplan: sofia/internal/1008 at ipaddress Regex (PASS) [auth]
>>>>>>>>>> ${radius_auth_result}(0) =~ /^0$/ break=on-false
>>>>>>>>>> Dialplan: sofia/internal/1008 at ipaddress Action radius_auth()
>>>>>>>>>> INLINE
>>>>>>>>>> EXECUTE sofia/internal/1008 at ipaddress radius_auth()
>>>>>>>>>> 2015-04-14 13:53:42.734956 [ERR] mod_xml_radius.c:1090
>>>>>>>>>> mod_xml_radius:
>>>>>>>>>> Failed to authenticate
>>>>>>>>>>
>>>>>>>>>> What should I do to the call authentication work?
>>>>>>>>>>
>>>>>>>>>> Regards,
>>>>>>>>>> Gustavo
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> _________________________________________________________________________
>>>>>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>>>>>> consulting at freeswitch.org
>>>>>>>>>> http://www.freeswitchsolutions.com
>>>>>>>>>>
>>>>>>>>>> Official FreeSWITCH Sites
>>>>>>>>>> http://www.freeswitch.org
>>>>>>>>>> http://confluence.freeswitch.org
>>>>>>>>>> http://www.cluecon.com
>>>>>>>>>>
>>>>>>>>>> FreeSWITCH-users mailing list
>>>>>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>>>>>> UNSUBSCRIBE:
>>>>>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>>>>>> http://www.freeswitch.org
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>  --
>>>>>>>>>      with best regards,
>>>>>>>>> Dmitriy Borisov
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> _________________________________________________________________________
>>>>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>>>>> consulting at freeswitch.org
>>>>>>>>> http://www.freeswitchsolutions.com
>>>>>>>>>
>>>>>>>>> Official FreeSWITCH Sites
>>>>>>>>> http://www.freeswitch.org
>>>>>>>>> http://confluence.freeswitch.org
>>>>>>>>> http://www.cluecon.com
>>>>>>>>>
>>>>>>>>> FreeSWITCH-users mailing list
>>>>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>>>>> UNSUBSCRIBE:
>>>>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>>>>> http://www.freeswitch.org
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> _________________________________________________________________________
>>>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>>>> consulting at freeswitch.org
>>>>>>>> http://www.freeswitchsolutions.com
>>>>>>>>
>>>>>>>> Official FreeSWITCH Sites
>>>>>>>> http://www.freeswitch.org
>>>>>>>> http://confluence.freeswitch.org
>>>>>>>> http://www.cluecon.com
>>>>>>>>
>>>>>>>> FreeSWITCH-users mailing list
>>>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>>>> UNSUBSCRIBE:
>>>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>>>> http://www.freeswitch.org
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> _________________________________________________________________________
>>>>>>> Professional FreeSWITCH Consulting Services: consulting at freeswitch.orghttp://www.freeswitchsolutions.com
>>>>>>>
>>>>>>> Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.com
>>>>>>>
>>>>>>> FreeSWITCH-users mailing listFreeSWITCH-users at lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> _________________________________________________________________________
>>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>>> consulting at freeswitch.org
>>>>>>> http://www.freeswitchsolutions.com
>>>>>>>
>>>>>>> Official FreeSWITCH Sites
>>>>>>> http://www.freeswitch.org
>>>>>>> http://confluence.freeswitch.org
>>>>>>> http://www.cluecon.com
>>>>>>>
>>>>>>> FreeSWITCH-users mailing list
>>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>>> UNSUBSCRIBE:
>>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>>> http://www.freeswitch.org
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> _________________________________________________________________________
>>>>>> Professional FreeSWITCH Consulting Services: consulting at freeswitch.orghttp://www.freeswitchsolutions.com
>>>>>>
>>>>>> Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.com
>>>>>>
>>>>>> FreeSWITCH-users mailing listFreeSWITCH-users at lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> _________________________________________________________________________
>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>> consulting at freeswitch.org
>>>>>> http://www.freeswitchsolutions.com
>>>>>>
>>>>>> Official FreeSWITCH Sites
>>>>>> http://www.freeswitch.org
>>>>>> http://confluence.freeswitch.org
>>>>>> http://www.cluecon.com
>>>>>>
>>>>>> FreeSWITCH-users mailing list
>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>> UNSUBSCRIBE:
>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>> http://www.freeswitch.org
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>>  --
>>>>>      with best regards,
>>>>> Dmitriy Borisov
>>>>>
>>>>>
>>>>>
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services: consulting at freeswitch.orghttp://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.com
>>>>>
>>>>> FreeSWITCH-users mailing listFreeSWITCH-users at lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org
>>>>> http://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org
>>>>> http://confluence.freeswitch.org
>>>>> http://www.cluecon.com
>>>>>
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:
>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>> http://www.freeswitch.org
>>>>>
>>>>
>>>>
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services: consulting at freeswitch.orghttp://www.freeswitchsolutions.com
>
> Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.com
>
> FreeSWITCH-users mailing listFreeSWITCH-users at lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>



-- 
with best regards,
Dmitriy Borisov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150416/82cd4b67/attachment-0001.html

Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users mailing list