Re: [Freeswitch-users] Radius/Authentication/Authorization
Dear Tihomir, Any update and help on the below please. Abid From: abid_freeswitch@live.com To: tculjaga@gmail.com CC: neal@wanlink.com Subject: Re: [Freeswitch-users] Radius/Authentication/Authorization Date: Wed, 31 Mar 2010 19:35:32 +0500 Dear Tihomir, Thank you very much for the configuration example but in which files to place these configurations. Please bear with me because I am new to FreeSwitch and if you could provide complete steps. Also when I compile FS and load the module mod_rad_auth in conf/autoload_configs/modules.conf.xml, I get an error while starting FS as follows. 2010-03-31 19:32:29.399466 [CRIT] switch_loadable_module.c:882 Error Loading module /usr/local/freeswitch/mod/mod_rad_auth.so**/usr/local/freeswitch/mod/mod_rad_auth.so: undefined symbol: rc_conf_str** Please advise. Thanks. Regards-----------Abid Saleem --Forwarded Message Attachment-- From: tculjaga@gmail.com CC: neal@wanlink.com To: freeswitch-users@lists.freeswitch.org Date: Tue, 30 Mar 2010 21:42:03 +0200 Subject: Re: [Freeswitch-users] Radius/Authentication/Authorization hello, here is an example <configuration name="rad_auth.conf" description="radius authentification module"> <settings> <!-- backward compatibility to allow radiusclient config file instead of an embedded config --> <!-- <param name="radius_config" value="/usr/local/etc/radiusclient/radiusclient.conf"/> --> </settings> <client> <param name="authserver" value="10.1.1.10:1812:gateway"/> <param name="dictionary" value="/usr/local/etc/radiusclient/dictionary.all"/> <param name="seqfile" value="/var/run/radius.seq"/> <param name="mapfile" value="/usr/local/etc/radiusclient/port-id-map"/> <param name="default_realm" value=""/> <param name="radius_timeout" value="3"/> <param name="radius_retries" value="2"/> <param name="radius_deadtime" value="0"/> <param name="bindaddr" value="*"/> </client> <vsas> <!-- name: just a description value: direct input or variable pec: vendor ID (0 for default, 9 for cisco...) expr: 1 for channel variable, 2 for direct input direction: in for radius-request, out for radius-response --> <!-- mappings for radius request message; input attributes --> <param name="h323-conf-id" id="24" value="CALLID" pec="9" expr="1" direction="in"/> <param name="h323-prompt-id" id="104" value="SERVICENUM" pec="9" expr="1" direction="in"/> <param name="Cisco-AVPair" id="1" value="TRANSACTIONID" pec="9" expr="1" direction="in"/> <param name="Calling-Station-Id" id="31" value="CALLINGNUMBER" pec="0" expr="1" direction="in"/> <param name="NAS-Port-Type" id="61" value="0" pec="0" expr="0" direction="in"/> <param name="NAS-Port-Id" id="87" value="ISDN 3/0:D:14" pec="0" expr="0" direction="in"/> <param name="Login-User" id="1" value="1" pec="0" expr="0" direction="in"/> <!-- mappings for radius-response message; output values from returning outributes --> <param name="BILING_MODEL" id="109" value="billing_model" pec="9" expr="0" direction="out"/> <param name="CREDIT_AMOUNT" id="101" value="credit_amount" pec="9" expr="0" direction="out"/> <param name="CURRENCY" id="110" value="currency" pec="9" expr="0" direction="out"/> <param name="PREFFERED_LANG" id="107" value="preffered_lang" pec="9" expr="0" direction="out"/> <param name="CREDIT_TIME" id="102" value="credit_time" pec="9" expr="0" direction="out"/> <param name="H323-IVR-IN:DIRATION" id="1" value="h323_ivr_duration" pec="9" expr="0" direction="out"/> <param name="RADIUS_RETURN_CODE" id="103" value="return_code" pec="9" expr="0" direction="out"/> <!-- expr param is to be ignored here--> </vsas> </configuration> in the dialplan you need to trigger auth as: <action application="auth_function" data="in ${DIALED_NUMBER}, in ${USERNAME}, in ${PASSWD}, out AUTH_RESULT"/> there are two behaviours: 1. authorize the call according to username&pass and dialed number - if authorized, the radius server returns credit time towards the dialed number 2. authorize the call according to username&pass - if authorized, the radius server returns the current account balance <extension name="unitest_rad-ANI-auth"> <condition field="destination_number" expression="^601$"> <action application="log" data="INFO PRIJE RAD_AUTH "/> <action inline="true" application="set" data="CALLID=h323-conf-id=${uuid}"/> <action inline="true" application="set" data="SERVICENUM=h323-prompt-id=${destination_number}"/> <action inline="true" application="set" data="TRANSACTIONID=h323-ivr-out=transactionID:1234"/> <!-- <action inline="true" application="set" data="CALLINGNUMBER=${caller_id_number}"/> --> <action inline="true" application="set" data="CALLINGNUMBER=38516060333"/> <action inline="true" application="set" data="USERNAME=38516060333"/> <!-- <action inline="true" application="set" data="USERNAME=209354"/> --> <action inline="true" application="set" data="PASSWD=003282"/> <!-- <action inline="true" application="set" data="DIALED_NUMBER=16094191500"/> --> <action application="sleep" data="2000"/> <action application="auth_function" data="in ${DIALED_NUMBER}, in ${USERNAME}, in ${PASSWD}, out AUTH_RESULT"/> <action application="log" data="INFO AUTH_RESULT=${AUTH_RESULT}"/> <action application="log" data="INFO billing_model=${billing_model}"/> <action application="log" data="INFO credit_amount=${credit_amount}"/> <action application="log" data="INFO currency=${currency}"/> <action application="log" data="INFO preffered_lang=${preffered_lang}"/> <action application="log" data="INFO credit_time=${credit_time}"/> <action application="log" data="INFO h323_ivr_duration=${h323_ivr_duration}"/> <action application="log" data="INFO return_code=${return_code}"/> <!-- <action application="execute_extension" data="AUTH XML default"/> --> </condition> </extension> <extension name="unitest_rad-ANI-balance"> <condition field="destination_number" expression="^602$"> <action application="log" data="INFO PRIJE RAD_AUTH "/> <action inline="true" application="set" data="CALLID=h323-conf-id=${uuid}"/> <action inline="true" application="set" data="SERVICENUM=h323-prompt-id=${destination_number}"/> <action inline="true" application="set" data="TRANSACTIONID=h323-ivr-out=transactionID:1234"/> <!-- <action inline="true" application="set" data="CALLINGNUMBER=${caller_id_number}"/> --> <action inline="true" application="set" data="CALLINGNUMBER=38516060333"/> <action inline="true" application="set" data="USERNAME=38516060333"/> <!-- <action inline="true" application="set" data="USERNAME=209354"/> --> <action inline="true" application="set" data="PASSWD=003282"/> <action inline="true" application="set" data="DIALED_NUMBER=16094191500"/> <action application="sleep" data="2000"/> <action application="auth_function" data="in ${DIALED_NUMBER}, in ${USERNAME}, in ${PASSWD}, out AUTH_RESULT"/> <action application="log" data="INFO AUTH_RESULT=${AUTH_RESULT}"/> <action application="log" data="INFO billing_model=${billing_model}"/> <action application="log" data="INFO credit_amount=${credit_amount}"/> <action application="log" data="INFO currency=${currency}"/> <action application="log" data="INFO preffered_lang=${preffered_lang}"/> <action application="log" data="INFO credit_time=${credit_time}"/> <action application="log" data="INFO h323_ivr_duration=${h323_ivr_duration}"/> <action application="log" data="INFO return_code=${return_code}"/> <!-- <action application="execute_extension" data="AUTH XML default"/> --> </condition> </extension> will update the wiki by the end of the week. you have enough information for now. Tihomir. On Tue, Mar 30, 2010 at 1:52 PM, Abid Saleem <abid_freeswitch@live.com> wrote: Hi Neal and other Contributors to FS, I recieved an answer on the list that mod_rad_auth is ready. I upgraded FS to download and install it by "make current" and it is successfully built and installed. Could you please outline the detailed steps to do all this configuration. If it is still not ready, is there any other method that somebody has already implemented like perl scripts etc. Any help in this regard is badly required. THanks for your cooperation. Regards----------Abid SaleemSr. Product Manager Hotmail: Powerful Free email with security by Microsoft. Get it now. _________________________________________________________________ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969
I'm currently successfully compiled & installed mod_rad_auth, but get some error: 2010-11-07 23:00:52.610078 [CRIT] switch_loadable_module.c:928 Error Loading module /usr/local/freeswitch/mod/mod_rad_auth.so **/usr/local/freeswitch/mod/mod_rad_auth.so: undefined symbol: rc_conf_str** FS ver.: FreeSWITCH Version 1.0.head (git-46a9fa3 2010-11-06 17-14-31 -0400) OS: # uname -a Linux lambda.core 2.6.33.6-147.fc13.i686.PAE #1 SMP Tue Jul 6 22:24:44 UTC 2010 i686 i686 i386 GNU/Linux Some ideas? Thanks. -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Radius-Authentication-Authoriz... Sent from the freeswitch-users mailing list archive at Nabble.com.
hello, do you have the correct rad_auth.conf.xml in place ? On Sun, Nov 7, 2010 at 7:12 PM, aekas <ak@in-oren.ru> wrote:
I'm currently successfully compiled & installed mod_rad_auth, but get some error:
2010-11-07 23:00:52.610078 [CRIT] switch_loadable_module.c:928 Error Loading module /usr/local/freeswitch/mod/mod_rad_auth.so **/usr/local/freeswitch/mod/mod_rad_auth.so: undefined symbol: rc_conf_str**
FS ver.: FreeSWITCH Version 1.0.head (git-46a9fa3 2010-11-06 17-14-31 -0400)
OS: # uname -a Linux lambda.core 2.6.33.6-147.fc13.i686.PAE #1 SMP Tue Jul 6 22:24:44 UTC 2010 i686 i686 i386 GNU/Linux
Some ideas?
Thanks. -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Radius-Authentication-Authoriz... Sent from the freeswitch-users mailing list archive at Nabble.com.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Tihomir Culjaga wrote:
hello, do you have the correct rad_auth.conf.xml in place ?
Hello, Tihomir! I think, is it in the right place, and exist: [root@lambda autoload_configs]# ls -l rad_auth.conf.xml -rw-r--r-- 1 root root 2694 Aug 26 00:37 rad_auth.conf.xml trying with default rad_auth.conf.xml, with changed "authserver" value only... -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Radius-Authentication-Authoriz... Sent from the freeswitch-users mailing list archive at Nabble.com.
On Wed, Nov 10, 2010 at 7:10 PM, aekas <ak@in-oren.ru> wrote:
Tihomir Culjaga wrote:
hello, do you have the correct rad_auth.conf.xml in place ?
Hello, Tihomir!
I think, is it in the right place, and exist:
[root@lambda autoload_configs]# ls -l rad_auth.conf.xml -rw-r--r-- 1 root root 2694 Aug 26 00:37 rad_auth.conf.xml
trying with default rad_auth.conf.xml, with changed "authserver" value only...
do you have the correct dictionary pointed? <param name="dictionary" value="/usr/local/etc/radiusclient/dictionary.all"/> T.
Tihomir Culjaga wrote:
do you have the correct dictionary pointed?
T.
Yes. File is taken from radiusclient-library tarball. -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Radius-Authentication-Authoriz... Sent from the freeswitch-users mailing list archive at Nabble.com.
Hi aekas, Try using version freeswitch-1.0.6. I am using it and mod_rad_auth is working fine but perhaps Tihomir and other developers may guide you better. I just told you that 1.0.6 is working for me. Let me know if you face any issues in that. Regards-----------Abid SaleemTechnical Product Manager NGN
Date: Sun, 7 Nov 2010 10:12:38 -0800 From: ak@in-oren.ru To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] Radius/Authentication/Authorization
I'm currently successfully compiled & installed mod_rad_auth, but get some error:
2010-11-07 23:00:52.610078 [CRIT] switch_loadable_module.c:928 Error Loading module /usr/local/freeswitch/mod/mod_rad_auth.so **/usr/local/freeswitch/mod/mod_rad_auth.so: undefined symbol: rc_conf_str**
FS ver.: FreeSWITCH Version 1.0.head (git-46a9fa3 2010-11-06 17-14-31 -0400)
OS: # uname -a Linux lambda.core 2.6.33.6-147.fc13.i686.PAE #1 SMP Tue Jul 6 22:24:44 UTC 2010 i686 i686 i386 GNU/Linux
Some ideas?
Thanks. -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Radius-Authentication-Authoriz... Sent from the freeswitch-users mailing list archive at Nabble.com.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Abid Saleem wrote:
Hi aekas, Try using version freeswitch-1.0.6. I am using it and mod_rad_auth is working fine but perhaps Tihomir and other developers may guide you better. I just told you that 1.0.6 is working for me. Let me know if you face any issues in that.
Abid, thank you for suggestion. I'm tried with "FreeSWITCH Version 1.0.6 (svn-exported)", and module has been successfully loaded. It is so strange that the module is not loaded with the git-version... with same OS, and system libs :( -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Radius-Authentication-Authoriz... Sent from the freeswitch-users mailing list archive at Nabble.com.
aekas <ak@...> writes:
I'm currently successfully compiled & installed mod_rad_auth, but get some error:
2010-11-07 23:00:52.610078 [CRIT] switch_loadable_module.c:928 Error Loading module /usr/local/freeswitch/mod/mod_rad_auth.so **/usr/local/freeswitch/mod/mod_rad_auth.so: undefined symbol: rc_conf_str**
FS ver.: FreeSWITCH Version 1.0.head (git-46a9fa3 2010-11-06 17-14-31 -0400)
OS: # uname -a Linux lambda.core 2.6.33.6-147.fc13.i686.PAE #1 SMP Tue Jul 6 22:24:44 UTC 2010 i686 i686 i386 GNU/Linux
Some ideas?
Thanks.
I saw the same problem with freeswitch 1.0.7 from latest git on Ubuntu 10 The problem is in the Makefile for mod_rad_auth need to edit /usr/local/src/freeswitch/src/mod/applications/mod_rad_auth/Makefile and change FREERADIUSLA=/usr/local/lib/libfreeradius-client.so to FREERADIUSLA=/usr/local/lib/libfreeradius-client.la make; make install
participants (4)
-
Abid Saleem
-
aekas
-
Mike McCauley
-
Tihomir Culjaga