<div dir="ltr">This can help you<div><br></div><div><div>[root@fs1 autoload_configs]# cat rad_auth.conf.xml</div><div><configuration name="rad_auth.conf" description="radius authentification module"></div><div> <settings></div><div> <!-- backward compatibility to allow radiusclient config file instead of an embedded config --></div><div> <!-- <param name="radius_config" value="/usr/local/etc/radiusclient/radiusclient.conf"/> --></div><div> </settings></div><div><br></div><div> <client></div><div> <param name="authserver" value="10.40.0.5:1814:x7h6t4g"/></div><div> <param name="dictionary" value="/etc/radiusclient/dictionary.all"/></div><div> <param name="seqfile" value="/var/run/radius.seq"/></div><div> <param name="mapfile" value="/etc/radiusclient/port-id-map"/></div><div> <param name="default_realm" value=""/></div><div> <param name="radius_timeout" value="1"/></div><div> <param name="radius_retries" value="0"/></div><div> <param name="radius_deadtime" value="0"/></div><div> <param name="bindaddr" value="*"/></div><div> </client></div><div><br></div><div> <vsas></div><div> <!--</div><div> name: just a description</div><div> value: direct input or variable</div><div> pec: vendor ID (0 for default, 9 for cisco...)</div><div> expr: 0 - direct input (string), 1 - channel variable</div><div> direction: in for radius-request, out for radius-response</div><div> --></div><div><br></div><div> <!-- mappings for radius request message; input attributes --></div><div> <param name="h323-conf-id" id="24" value="CALLID" pec="9" expr="1" direction="in"/></div><div> <param name="h323-gw-id" id="33" value="GWID" pec="9" expr="1" direction="in"/></div><div> <param name="Cisco-AVPair" id="1" value="TRANSACTIONID" pec="9" expr="1" direction="in"/><br></div><div> <param name="Called-Station-Id" id="30" value="CALLEDNUMBER" pec="0" expr="1" direction="in"/></div><div> <param name="Calling-Station-Id" id="31" value="CALLINGNUMBER" pec="0" expr="1" direction="in"/>--></div><div> <param name="NAS-Port-Type" id="61" value="0" pec="0" expr="0" direction="in"/></div><div> <param name="Login-User" id="1" value="1" pec="0" expr="0" direction="in"/> --><br></div><div><br></div><div> <!-- mappings for radius-response message; output values from returning outributes --></div><div> <param name="CREDIT_AMOUNT" id="101" value="credit_amount" pec="9" expr="0" direction="out"/></div><div> <param name="CURRENCY" id="110" value="currency" pec="9" expr="0" direction="out"/></div><div> <param name="CREDIT_TIME" id="102" value="h323-credit_time" pec="9" expr="0" direction="out"/></div><div> <param name="PER_MINUTE_PRICE" id="251" value="Cisco-Servicce-Info" pec="9" expr="0" direction="out"/></div><div> <param name="PREFFERED_LANG" id="107" value="preffered_lang" pec="9" expr="0" direction="out"/><br></div><div> <param name="H323-IVR-IN:DIRATION" id="1" value="h323_ivr_duration" pec="9" expr="0" direction="out"/> --></div><div> <param name="RADIUS_RETURN_CODE" id="103" value="return_code" pec="9" expr="0" direction="out"/></div><div> <!-- expr param is to be ignored here--></div><div> </vsas></div><div></configuration></div><div>[root@fs1 autoload_configs]# </div></div><div><br></div><div>Dialplan fragment</div><div><div> <extension name="operator-rad-auth" continue="true"></div><div> <condition regex="any"></div><div> <regex field="${accountcode}" expression="^8$"/></div><div> </condition></div><div> <condition field="${destination_number}" expression="^\+(\d+)$"></div><div> <action application="export" data="h323-gw-id=${accountcode_bleg}"/></div><div> <action application="unset" data="disable_radius_start"/></div><div> <action application="unset" data="disable_radius_stop"/></div><div> <action inline="true" application="set" data="CALLID=h323-conf-id=${uuid}"/></div><div> <action inline="true" application="set" data="GWID=${accountcode_bleg}"/></div><div> <action inline="true" application="set" data="USERNAME=<a href="mailto:login@operator.ru">login@operator.ru</a>"/></div><div> <action inline="true" application="set" data="PASSWD=xxxxxxxx"/></div><div> <action inline="true" application="set" data="DIALED_NUMBER=$1"/></div><div> <action application="auth_function" data="in ${DIALED_NUMBER}, in ${USERNAME}, in ${PASSWD}, out AUTH_RESULT"/></div><div> </condition></div><div> </extension></div></div><div><br></div><div>Log fragment</div><div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> parsing [mr24.gateways.rcsnet.ru->operator-rad-auth] continue=true</div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Regex (PASS) [operator-rad-auth] ${accountcode}(8) =~ /^8$/ match=any</div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Regex (PASS) [operator-rad-auth] ${destination_number}(+749593377xx) =~ /^\+(\d+)$/ break=on-false</div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Action export(h323-gw-id=${accountcode_bleg})</div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Action unset(disable_radius_start)</div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Action unset(disable_radius_stop)</div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Action set(CALLID=h323-conf-id=${uuid}) INLINE</div><div>EXECUTE sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> set(CALLID=h323-conf-id=bd091212-e2b0-11e4-98e2-d102deb9a97d)</div><div>2015-04-14 14:15:43.446357 [DEBUG] mod_dptools.c:1435 sofia/mr24/<a href="mailto:00000796396528xx@gateways.operator.ru">00000796396528xx@gateways.operator.ru</a> SET [CALLID]=[h323-conf-id=bd091212-e2b0-11e4-98e2-d102deb9a97d]</div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Action set(GWID=${accountcode_bleg}) INLINE</div><div>EXECUTE sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> set(GWID=1460)</div><div>2015-04-14 14:15:43.446357 [DEBUG] mod_dptools.c:1435 sofia/mr24/<a href="mailto:00000796396528xx@gateways.rcsnet.ru">00000796396528xx@gateways.rcsnet.ru</a> SET [GWID]=[1460]</div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Action set(USERNAME=<a href="mailto:login@operator.ru">login@operator.ru</a>) INLINE</div><div>EXECUTE sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> set(USERNAME=<a href="mailto:login@operator.ru">login@operator.ru</a>)</div><div>2015-04-14 14:15:43.446357 [DEBUG] mod_dptools.c:1435 sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> SET [USERNAME]=[<a href="mailto:login@operator.ru">login@operator.ru</a>]</div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Action set(PASSWD=xxxxxxxx) INLINE</div><div>EXECUTE sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> set(PASSWD=xxxxxxxx)</div><div>2015-04-14 14:15:43.446357 [DEBUG] mod_dptools.c:1435 sofia/mr24/<a href="mailto:00000796396528xx@gateways.operator.ru">00000796396528xx@gateways.operator.ru</a> SET [PASSWD]=[xxxxxxxxxxx]</div><div>Dialplan: sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Action set(DIALED_NUMBER=749593377xx) INLINE</div><div>EXECUTE sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> set(DIALED_NUMBER=749593377xx)</div><div>2015-04-14 14:15:43.446357 [DEBUG] mod_dptools.c:1435 sofia/mr24/<a href="mailto:00000796396528xx@gateways.rcsnet.ru">00000796396528xx@gateways.rcsnet.ru</a> SET [DIALED_NUMBER]=[749593377xx]</div><div>sofia/mr24/<a href="mailto:0000079639652834@gateways.rcsnet.ru">0000079639652834@gateways.rcsnet.ru</a> Action auth_function(in ${DIALED_NUMBER}, in ${USERNAME}, in ${PASSWD}, out AUTH_RESULT)</div><div>..........</div></div><div><br></div><div><div>bd091212-e2b0-11e4-98e2-d102deb9a97d EXECUTE sofia/mr24/<a href="mailto:00000796396528xx@gateways.operator.ru">00000796396528xx@gateways.operator.ru</a> auth_function(in 74959337786, in <a href="mailto:login@operator.ru">login@operator.ru</a>, in xxxxxxxxxxxx, out AUTH_RESULT)</div><div>[DEBUG] mod_rad_auth.c:301 allocate initial structure.</div><div>[DEBUG] mod_rad_auth.c:313 initialzed configuration.</div><div>[DEBUG] mod_rad_auth.c:318 set authserver := 10.40.0.5:1814:xxxxxxxx.</div><div>[DEBUG] mod_rad_auth.c:318 set dictionary := /etc/radiusclient/dictionary.all.</div><div>[DEBUG] mod_rad_auth.c:318 set seqfile := /var/run/radius.seq.</div><div>[DEBUG] mod_rad_auth.c:318 set mapfile := /etc/radiusclient/port-id-map.</div><div>[DEBUG] mod_rad_auth.c:318 set default_realm := .</div><div>[DEBUG] mod_rad_auth.c:318 set radius_timeout := 1.</div><div>[DEBUG] mod_rad_auth.c:318 set radius_retries := 0.</div><div>[DEBUG] mod_rad_auth.c:318 set radius_deadtime := 0.</div><div>[DEBUG] mod_rad_auth.c:318 set bindaddr := *.</div><div>[DEBUG] mod_rad_auth.c:371 ... radius: User-Name: <a href="mailto:login@operator.ru">login@operator.ru</a></div><div>[DEBUG] mod_rad_auth.c:380 ... radius: User-Password: xxxxxxxxxxxxxxxxxx</div><div>DEBUG] mod_rad_auth.c:396 ... radius: Called-station-Id: 74959337786</div><div>[DEBUG] mod_rad_auth.c:413 Handle attribute: h323-conf-id</div><div>[DEBUG] mod_rad_auth.c:439 ... dictionary data: id:24, vendor id:9, attr type:0, attr name:h323-conf-id (589848)</div><div>[DEBUG] mod_rad_auth.c:444 ... radius: key:h323-conf-id, value:CALLID (h323-conf-id=bd091212-e2b0-11e4-98e2-d102deb9a97d) as string</div><div>[DEBUG] mod_rad_auth.c:413 Handle attribute: h323-gw-id</div><div>[DEBUG] mod_rad_auth.c:439 ... dictionary data: id:33, vendor id:9, attr type:0, attr name:h323-gw-id (589857)</div><div>[DEBUG] mod_rad_auth.c:444 ... radius: key:h323-gw-id, value:GWID (1460) as string</div><div>[DEBUG] mod_rad_auth.c:413 Handle attribute: NAS-Port-Type</div><div>[DEBUG] mod_rad_auth.c:439 ... dictionary data: id:61, vendor id:0, attr type:1, attr name:NAS-Port-Type (61)</div><div>[DEBUG] mod_rad_auth.c:456 ... radius: key:NAS-Port-Type, value:0 (0) as integer</div><div>[DEBUG] mod_rad_auth.c:491 sending radius packet ...</div><div>[DEBUG] mod_rad_auth.c:497 RADIUS Authentication OK</div><div>[DEBUG] mod_rad_auth.c:519 Handle attribute: CREDIT_AMOUNT</div><div>[DEBUG] mod_rad_auth.c:522 attribute (CREDIT_AMOUNT) found in radius packet</div><div>[DEBUG] mod_rad_auth.c:523 set variable credit_amount := h323-credit-amount=-600913.47</div><div>[DEBUG] mod_rad_auth.c:519 Handle attribute: CURRENCY</div><div>[DEBUG] mod_rad_auth.c:522 attribute (CURRENCY) found in radius packet</div><div>[DEBUG] mod_rad_auth.c:523 set variable currency := h323-currency=RUR</div><div>[DEBUG] mod_rad_auth.c:519 Handle attribute: CREDIT_TIME</div><div>[DEBUG] mod_rad_auth.c:522 attribute (CREDIT_TIME) found in radius packet</div><div>[DEBUG] mod_rad_auth.c:523 set variable h323-credit_time := h323-credit-time=86400</div><div>[DEBUG] mod_rad_auth.c:519 Handle attribute: PER_MINUTE_PRICE</div><div>[DEBUG] mod_rad_auth.c:522 attribute (PER_MINUTE_PRICE) found in radius packet</div><div>[DEBUG] mod_rad_auth.c:523 set variable Cisco-Servicce-Info := 0.000000</div><div>[DEBUG] mod_rad_auth.c:519 Handle attribute: RADIUS_RETURN_CODE</div><div>[DEBUG] mod_rad_auth.c:522 attribute (RADIUS_RETURN_CODE) found in radius packet</div><div>[DEBUG] mod_rad_auth.c:523 set variable return_code := h323-return-code=0</div></div><div><br></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Apr 14, 2015 at 5:28 PM, Gustavo Silva <span dir="ltr"><<a href="mailto:silvagustavo@yandex.ru" target="_blank">silvagustavo@yandex.ru</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="background-color:rgb(255,255,255);line-height:initial"> <div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">First it says that the the login is OK and after it says that the login is incorrect. </div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><span style="font-family:sans-serif;white-space:pre-wrap;line-height:initial">Tue Apr 14 17:24:11 2015 : Auth: Login OK: [1008/<via Auth-Type = </span></div><span style="font-family:sans-serif;white-space:pre-wrap">DIGEST>] (from client localhost port 0 cli 1008)</span><br style="font-family:sans-serif;white-space:pre-wrap"><span style="font-family:sans-serif;white-space:pre-wrap">Tue Apr 14 17:24:11 2015 : Info: rlm_radutmp: Login entry for NAS </span><br style="font-family:sans-serif;white-space:pre-wrap"><span style="font-family:sans-serif;white-space:pre-wrap">localhost port 0 duplicate</span><br style="font-family:sans-serif;white-space:pre-wrap"><span style="font-family:sans-serif;white-space:pre-wrap">Tue Apr 14 17:24:11 2015 : Auth: Login incorrect: [<no User-Name </span><br style="font-family:sans-serif;white-space:pre-wrap"><span style="font-family:sans-serif;white-space:pre-wrap">attribute>/<no User-Password attribute>] (from client localhost port 0 </span><br style="font-family:sans-serif;white-space:pre-wrap"><span style="font-family:sans-serif;white-space:pre-wrap">cli 1008)</span><br style="font-family:sans-serif;white-space:pre-wrap"><span style="font-family:sans-serif;white-space:pre-wrap">Tue Apr 14 17:24:14 2015 : Error: rlm_radutmp: Logout for NAS localhost </span><br style="font-family:sans-serif;white-space:pre-wrap"><span style="font-family:sans-serif;white-space:pre-wrap">port 0, but no Login record</span><div><br></div><div><br></div><div><br style="font-family:sans-serif;white-space:pre-wrap"> <div></div> <div style="font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Sent from my BlackBerry 10 smartphone.</div> <div></div><div style="font-size:initial;text-align:initial;background-color:rgb(255,255,255)"><table width="100%" style="background-color:white;border-spacing:0px"> <tbody><tr><td></td><td rowspan="2" style="text-align:center;font-size:initial;background-color:rgb(255,255,255)"> <span style="background-color:white;color:#0073bc;font-size:smaller;font-family:"Slate Pro""> Original Message </span> </td></tr> <tr> <td colspan="2"><div style="border:none;border-top:solid #0073bc 1.0pt"></div> </td></tr></tbody></table></div> <table width="100%" style="background-color:white;border-spacing:0px"> <tbody><tr><td colspan="2" style="font-size:initial;text-align:initial;background-color:rgb(255,255,255)"> <div style="font-size:smaller;font-family:"Tahoma","BB Alpha Sans","Slate Pro","sans-serif""> <div><b>From: </b>Борисов, Дмитрий / Dmitriy Borisov</div><div><b>Sent: </b>вторник, 14 апреля 2015 г., 17:22</div><div><b>To: </b>FreeSWITCH Users Help</div><div><b>Reply To: </b>FreeSWITCH Users Help</div><div><b>Subject: </b>Re: [Freeswitch-users] Dialplan authentication</div></div></td></tr></tbody></table><div><div class="h5"><div style="border-style:solid none none;border-top-color:rgb(186,188,209);border-top-width:1pt;font-size:initial;text-align:initial;background-color:rgb(255,255,255)"></div><br><div><div dir="ltr"><div>Hi!</div><div><br></div>Configuration looks good there, and what in radius.log on RADIUS server?</div><div class="gmail_extra"><br><div class="gmail_quote">2015-04-14 14:01 GMT+03:00 Густаво Силва <span dir="ltr"><<a href="mailto:gfs@etherway.ru" target="_blank">gfs@etherway.ru</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I have set up the following in my dialplan:<br>
<br>
<extension name="auth" continue="true"><br>
<condition field="${radius_auth_result}" expression="^0$"><br>
<action application="radius_auth" inline="true"/><br>
</condition><br>
</extension><br>
<br>
I am facing the following error:<br>
<br>
Dialplan: sofia/internal/1008@ipaddress Regex (PASS) [auth]<br>
${radius_auth_result}(0) =~ /^0$/ break=on-false<br>
Dialplan: sofia/internal/1008@ipaddress Action radius_auth() INLINE<br>
EXECUTE sofia/internal/1008@ipaddress radius_auth()<br>
2015-04-14 13:53:42.734956 [ERR] mod_xml_radius.c:1090 mod_xml_radius:<br>
Failed to authenticate<br>
<br>
What should I do to the call authentication work?<br>
<br>
Regards,<br>
Gustavo<br>
<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div>with best regards,</div><div>Dmitriy Borisov</div></div></div></div></div></div></div></div></div></div></div>
</div>
<br></div></div></div></div></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>