Dmitriy, do you have examples of configuration of the following files:

xml_radius.conf
‎And the freeradius user file (users)

?

Sent from my BlackBerry 10 smartphone.
From: Gustavo Silva
Sent: пятница, 3 апреля 2015 г., 17:43
To: Борисов, Дмитрий / Dmitriy Borisov; FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Freeswitch and Freeradius integration

With radtest I already did the test and it worked. I have asked if there is something else that I could test.

Sent from my BlackBerry 10 smartphone.
From: Борисов, Дмитрий / Dmitriy Borisov
Sent: пятница, 3 апреля 2015 г., 17:41
To: FreeSWITCH Users Help
Reply To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Freeswitch and Freeradius integration

Usage: radtest [OPTIONS] user passwd radius-server[:port] nas-port-number secret [ppphint] [nasname]
        -d RADIUS_DIR       Set radius directory
        -t <type>           Set authentication method
                            type can be pap, chap, mschap, or eap-md5
        -x                  Enable debug output
        -4                  Use IPv4 for the NAS address (default)
        -6                  Use IPv6 for the NAS address


2015-04-03 17:31 GMT+03:00 Gustavo Silva <silvagustavo@yandex.ru>:
I know only the radtest test. Is there something else to test?  Radtest show me connection accept.





Sent from my BlackBerry 10 smartphone.
From: Борисов, Дмитрий / Dmitriy Borisov
Sent: пятница, 3 апреля 2015 г., 17:19
To: FreeSWITCH Users Help
Reply To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Freeswitch and Freeradius integration

Check correction of all configuration for freeradius. Test connection to your RADIUS server with radtest command

2015-04-03 16:40 GMT+03:00 Gustavo Silva <silvagustavo@yandex.ru>:
What should I check there? The authserver and acctserver are set as localhost.

Sent from my BlackBerry 10 smartphone.
From: Борисов, Дмитрий / Dmitriy Borisov
Sent: пятница, 3 апреля 2015 г., 16:29
To: FreeSWITCH Users Help
Reply To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Freeswitch and Freeradius integration

Check correction of the radiusclient.conf file

2015-04-03 16:12 GMT+03:00 Gustavo Silva <silvagustavo@yandex.ru>:
Yes, I did!

Sent from my BlackBerry 10 smartphone.
From: Борисов, Дмитрий / Dmitriy Borisov
Sent: пятница, 3 апреля 2015 г., 16:11
To: FreeSWITCH Users Help
Reply To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Freeswitch and Freeradius integration

Do you have installed freeradius-client on the same machine which freeswitch is installed on?

2015-04-03 15:46 GMT+03:00 Gustavo Silva <silvagustavo@yandex.ru>:
I have freeradius server and freeradius client. I don't know what freeradius-ng is about.

I forgot to mention, the OS is debian 7

Sent from my BlackBerry 10 smartphone.
From: Борисов, Дмитрий / Dmitriy Borisov
Sent: пятница, 3 апреля 2015 г., 15:40
To: FreeSWITCH Users Help
Reply To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Freeswitch and Freeradius integration

Do you have freeraius-ng installed in your system?

2015-04-03 13:30 GMT+03:00 Густаво Силва <gfs@etherway.ru>:
Hi folks!

Im getting some errors trying to enable AAA on my freeswitch with freeradius.
I am getting the following errors:

- When I start freeswitch:
[ERR] mod_xml_radius.c:678 Failed to load radius handle for registration authentication

- When I make a call:
2015-04-03 13:22:55.840618 [ERR] mod_xml_radius.c:566 Failed to load radius handle for digest invite authentication
2015-04-03 13:22:55.840618 [ERR] mod_xml_radius.c:879 Failed to create new accounting_start handle for call: 64b32ec2-d9eb-11e4-9c8c-85505819ce7f

I can I solve this problem?

My xml_radius.conf bellow:

<configuration name="xml_radius.conf" description="Radius XML Gateway">
  <!--
     auth_invite is only called when a directory lookup is done on an inbound invite. Usually that means a digest auth challenge on the invite.
     
     auth_reg is only called on the actual registration. 
     
     auth_app is used when an invite is in the dialplan. If your profile requires digest auth then this isn't needed.
              but if your profile is doing only ip authentication this allows you to authenticate the call without the need for digest auth.
        
     acct_start happens when the call goes into the state 'routing' which means it is starting the dialplan
  -->
  <auth_invite>
    <connection name="testing">
      <param name="authserver" value="192.168.56.103:1812:testing123"/>
      <param name="radius_timeout" value="10"/>
      <param name="radius_retries" value="2"/>
      <param name="radius_deadtime" value="0"/>
      <param name="dictionary" value="/usr/src/freeswitch-1.2.23/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary"/>
      <param name="seqfile" value="/var/run/radius.seq"/>
    </connection>
    <fields>
      <param vendor="Cisco" name="Cisco-AVPair" variable="ip" format="src-gw-ip=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" format="src-gw-name=%s"/>
      <param vendor="Cisco" name="h323-conf-id" variable="Core-UUID" format="%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="ip" format="request-type=number"/>
      <param name="Called-Station-Id" variable="sip_to_user" format="%s"/>
      <param name="Calling-Station-Id" variable="sip_from_user" format="%s"/>
      <param name="User-Name" variable="sip_from_user" format="%s"/>
      <param name="Digest-Response" variable="sip_auth_response" format="%s"/>
      <param name="Digest-Realm" variable="sip_auth_realm" format="%s"/>
      <param name="Digest-Nonce" variable="sip_auth_nonce" format="%s"/>
      <param name="Digest-Username" variable="sip_auth_username" format="%s"/> 
      <param name="Digest-URI" variable="sip_auth_uri" format="%s"/>
      <param name="Digest-Method" variable="sip_auth_method" format="%s"/>
      <param name="Digest-Algorithm" variable="sip_auth_method" format="MD5"/> 
      <param name="Digest-Qop" variable="sip_auth_qop" format="%s"/>
      <param name="Digest-CNonce" variable="sip_auth_cnonce" format="%s"/>
      <param name="Digest-Nonce-Count" variable="sip_auth_nc" format="%s"/> 
    </fields>
  </auth_invite> 
  <auth_reg>
    <connection name="testing">
      <param name="authserver" value="192.168.56.103:1812:testing123"/>
      <param name="radius_timeout" value="10"/>
      <param name="radius_retries" value="2"/>
      <param name="radius_deadtime" value="0"/>
      <param name="dictionary" value="/usr/src/freeswitch-1.2.23/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary"/>
      <param name="seqfile" value="/var/run/radius.seq"/>
    </connection>
    <fields>
      <param vendor="Cisco" name="Cisco-AVPair" variable="ip" format="request-type=user"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="ip" format="src-gw-ip=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" format="src-gw-name=%s"/>
      <param name="User-Name" variable="sip_from_user" format="%s"/>
      <param name="Digest-Response" variable="sip_auth_response" format="%s"/>
      <param name="Digest-Realm" variable="sip_auth_realm" format="%s"/>
      <param name="Digest-Nonce" variable="sip_auth_nonce" format="%s"/>
      <param name="Digest-Username" variable="sip_auth_username" format="%s"/>
      <param name="Digest-URI" variable="sip_auth_uri" format="%s"/>
      <param name="Digest-Method" variable="sip_auth_method" format="%s"/>
      <param name="Digest-Algorithm" variable="sip_auth_method" format="MD5"/>
      <param name="Digest-Qop" variable="sip_auth_qop" format="%s"/>
      <param name="Digest-CNonce" variable="sip_auth_cnonce" format="%s"/>
      <param name="Digest-Nonce-Count" variable="sip_auth_nc" format="%s"/>
    </fields>
  </auth_reg>
  <auth_app>
    <connection name="testing">
      <param name="authserver" value="192.168.56.103:1812:testing123"/>
      <param name="radius_timeout" value="10"/>
      <param name="radius_retries" value="2"/>
      <param name="radius_deadtime" value="0"/>
      <param name="dictionary" value="/usr/src/freeswitch-1.2.23/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary"/>
      <param name="seqfile" value="/var/run/radius.seq"/>
    </connection>
    <fields>
      <param vendor="Cisco" name="h323-conf-id" variable_secondary="uuid" variable="originating_leg_uuid" format="%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="uuid" format="h323-call-id=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_network_ip" format="src-gw-ip=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" format="src-gw-name=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" format="src-number-in=%s" />
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_to_user" format="dst-number-in=%s" />
      <param name="Called-Station-Id" variable="sip_to_user" format="%s"/>
      <param name="Calling-Station-Id" variable="sip_from_user" format="%s"/>
    </fields>
  </auth_app>
  <auth_reg>
    <connection name="testing">
      <param name="authserver" value="192.168.56.103:1812:testing123"/>
      <param name="radius_timeout" value="10"/>
      <param name="radius_retries" value="2"/>
      <param name="radius_deadtime" value="0"/>
      <param name="dictionary" value="/usr/share/freeradius/dictionary.cisco"/>
      <param name="seqfile" value="/var/run/radius.seq"/>
    </connection>
    <fields>      
    </fields>
  </auth_reg>
  <acct_start>
    <connection name="testing">
      <param name="acctserver" value="192.168.56.103:1813:testing123"/>
      <param name="radius_timeout" value="10"/>
      <param name="radius_retries" value="0"/>
      <param name="radius_deadtime" value="0"/>
      <param name="dictionary" value="/usr/src/freeswitch-1.2.23/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary"/>
      <param name="seqfile" value="/var/run/radius.seq"/>
    </connection>
    <fields>
      <param vendor="Cisco" name="h323-call-origin" variable="h323-call-origin" default="answer" format="%s"/>
      <param vendor="Cisco" name="h323-conf-id" variable_secondary="uuid" variable="originating_leg_uuid" format="%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="uuid" format="h323-call-id=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_contact_host" format="src-gw-ip=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" variable_secondary="ani" format="src-gw-name=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" variable_secondary="ani" format="src-number-in=%s" />
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" variable_secondary="ani" format="src-number-out=%s" />
      <param name="Calling-Station-Id" variable="sip_from_user" variable_secondary="ani" format="%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_to_host" format="dst-gw-ip=%s"/>  
      <param vendor="Cisco" name="Cisco-AVPair" variable="destination_number" format="dst-gw-name=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="destination_number" format="dst-number-in=%s" />
      <param vendor="Cisco" name="Cisco-AVPair" variable="destination_number" format="dst-number-out=%s" />
      <param name="Called-Station-Id" variable="destination_number" format="%s"/>
      <param vendor="Cisco" name="h323-setup-time"/>
    </fields>
</acct_start>
<acct_end>
    <connection name="testing">
      <param name="acctserver" value="192.168.56.103:1813:testing123"/>
      <param name="radius_timeout" value="10"/>
      <param name="radius_retries" value="0"/>
      <param name="radius_deadtime" value="0"/>
      <param name="dictionary" value="/usr/src/freeswitch-1.2.23/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary"/>
      <param name="seqfile" value="/var/run/radius.seq"/>
    </connection>
    <fields>
      <param vendor="Cisco" name="h323-call-origin" variable="h323-call-origin" default="answer" format="%s"/>
      <param vendor="Cisco" name="h323-conf-id" variable_secondary="uuid" variable="originating_leg_uuid" format="%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="uuid" format="h323-call-id=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_contact_host" format="src-gw-ip=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" variable_secondary="ani" format="src-gw-name=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" variable_secondary="ani" format="src-number-in=%s" />
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" variable_secondary="ani" format="src-number-out=%s" />
      <param name="Calling-Station-Id" variable="sip_from_user" variable_secondary="ani" format="%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_to_host" format="dst-gw-ip=%s"/>  
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_to_user" variable_secondary="dialed_extension" format="dst-gw-name=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_to_user" variable_secondary="dialed_extension" format="dst-number-in=%s" />
      <param name="Called-Station-Id" variable="destination_number" format="%s"/>
      <param vendor="Cisco" name="h323-setup-time"/>
      <param vendor="Cisco" name="h323-connect-time"/>
      <param vendor="Cisco" name="h323-disconnect-time"/>
      <param vendor="Cisco" name="h323-disconnect-cause"/>
      <param name="Acct-Session-Time" variable="billsec" format="%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable_secondary="progressmsec" variable="progress_mediamsec" format="pdd-time=%s"/>
      <param vendor="Cisco" name="Cisco-AVPair" variable="destination_number" format="dst-number-out=%s"/>
    </fields>
  </acct_end>
</configuration>



_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
with best regards,
Dmitriy Borisov


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
with best regards,
Dmitriy Borisov


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
with best regards,
Dmitriy Borisov


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
with best regards,
Dmitriy Borisov


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
with best regards,
Dmitriy Borisov