[Freeswitch-users] Mod_rad_auth issue for FS working with FreeRadius server

Sun Jul 31 12:46:18 MSD 2011

Hello Gurus,

i met a issue when using
mod_rad_auth(http://wiki.freeswitch.org/wiki/Mod_rad_auth) to works
with freeradius server+mysql for AAA, the details is below, Could
anyone give any hints, Thanks in advance.

i setup a dial plan "unitest_rad-ANI-auth" as wiki above, however,
when i dialed 601 to trigger the dial plan, the console show errors,
it looks "h323-conf-id" is not in the directory, then i tried to add
this attribute to the dictionary, however, it does not help, in the
wiki, it mentioned the rad_auth.conf.xml contains <param
name="dictionary"
value="/usr/local/etc/radiusclient/dictionary.all"/>, however i did
not find the file "dictionary.all" at that directory, so i use
dictionary. BTW, the freeradius server + mysql works well.

console errors:

EXECUTE sofia/internal/1001 at 124.193.106.104 auth_function(in , in
38516060333, in 003282, out AUTH_RESULT)
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:301 allocate initial
structure.
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:313 initialzed configuration.
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:318 set authserver
:= 127.0.0.1:1812:gateway.
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:318 set dictionary
:= /usr/local/etc/radiusclient/dictionary.
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:318 set seqfile :=
/var/run/radius.seq.
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:318 set mapfile :=
/usr/local/etc/radiusclient/port-id-map.
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:318 set default_realm := .
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:318 set radius_timeout := 3.
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:318 set radius_retries := 2.
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:318 set radius_deadtime := 0.
2011-07-31 16:23:24.717088 [DEBUG] mod_rad_auth.c:318 set bindaddr := *.
2011-07-31 16:23:24.737004 [DEBUG] mod_rad_auth.c:371 ... radius:
User-Name: 38516060333
2011-07-31 16:23:24.737004 [DEBUG] mod_rad_auth.c:380 ... radius:
User-Password: 003282
2011-07-31 16:23:24.737004 [DEBUG] mod_rad_auth.c:391 ... radius:
Called-station-Id is empty, ignoring...
2011-07-31 16:23:24.737004 [DEBUG] mod_rad_auth.c:413 Handle
attribute: h323-conf-id
2011-07-31 16:23:24.737004 [ERR] mod_rad_auth.c:428 Unknown attribute:
key:h323-conf-id, not found in dictionary
2011-07-31 16:23:24.737004 [DEBUG] mod_rad_auth.c:538 abort sending
radius packet.
2011-07-31 16:23:24.737004 [ERR] mod_rad_auth.c:546 An error occured
during RADIUS Authentication(RC=-1)
2011-07-31 16:23:24.737004 [ERR] mod_rad_auth.c:702 An error occured
during radius authorization.
EXECUTE sofia/internal/1001 at 124.193.106.104 log(INFO  AUTH_RESULT=)
2011-07-31 16:23:24.737004 [INFO] mod_dptools.c:1202  AUTH_RESULT=
EXECUTE sofia/internal/1001 at 124.193.106.104 log(INFO  billing_model=)
2011-07-31 16:23:24.737004 [INFO] mod_dptools.c:1202  billing_model=
EXECUTE sofia/internal/1001 at 124.193.106.104 log(INFO  credit_amount=)
2011-07-31 16:23:24.737004 [INFO] mod_dptools.c:1202  credit_amount=
EXECUTE sofia/internal/1001 at 124.193.106.104 log(INFO  currency=)
2011-07-31 16:23:24.737004 [INFO] mod_dptools.c:1202  currency=
EXECUTE sofia/internal/1001 at 124.193.106.104 log(INFO  preffered_lang=)
2011-07-31 16:23:24.737004 [INFO] mod_dptools.c:1202  preffered_lang=

added below in the dictionary(/usr/local/etc/radiusclient/dictionary):

ATTRIBUTE	h323-conf-id		1008	string

dial plan:
<extension name="unitest_rad-ANI-auth">
    <condition field="destination_number" expression="^601$">
      <action application="log" data="INFO  Before Auth "/>

      <action inline="true" application="set"
data="CALLID=h323-conf-id=${uuid}"/>
      <action inline="true" application="set"
data="SERVICENUM=h323-prompt-id=${destination_number}"/>
      <action inline="true" application="set"
data="TRANSACTIONID=h323-ivr-out=transactionID:1234"/>
 <!--      <action inline="true" application="set"
data="CALLINGNUMBER=${caller_id_number}"/> -->
      <action inline="true" application="set" data="CALLINGNUMBER=38516060333"/>
      <action inline="true" application="set" data="USERNAME=38516060333"/>
 <!--      <action inline="true" application="set" data="USERNAME=209354"/> -->
      <action inline="true" application="set" data="PASSWD=003282"/>
 <!--      <action inline="true" application="set"
data="DIALED_NUMBER=16094191500"/>  -->

      <action application="sleep" data="2000"/>
      <action application="auth_function" data="in ${DIALED_NUMBER},
in ${USERNAME}, in ${PASSWD}, out AUTH_RESULT"/>

      <action application="log" data="INFO  AUTH_RESULT=${AUTH_RESULT}"/>
      <action application="log" data="INFO  billing_model=${billing_model}"/>
      <action application="log" data="INFO  credit_amount=${credit_amount}"/>
      <action application="log" data="INFO  currency=${currency}"/>
      <action application="log" data="INFO  preffered_lang=${preffered_lang}"/>
      <action application="log" data="INFO  credit_time=${credit_time}"/>
      <action application="log" data="INFO
h323_ivr_duration=${h323_ivr_duration}"/>
      <action application="log" data="INFO  return_code=${return_code}"/>
      <!-- <action application="execute_extension" data="AUTH XML default"/> -->
    </condition>
  </extension>

 radius_cdr.conf.xml:
 <configuration name="radius_cdr.conf" description="RADIUS CDR Configuration">

        <settings>

                <!-- location of the radius dictionary files -->

                <param name="dictionary"
value="/usr/local/freeswitch/conf/radius/dictionary"/>

                <!-- number of retries for each server -->

                <param name="radius_retries" value="3"/>

                <!-- number of seconds to wait between retries -->

                <param name="radius_timeout" value="5"/>

                <!-- accounting servers, up to 8 allowed -->

                <!-- value is "host:port:secret", port is optional -->

                <!-- use IP ADDRESSES, not hostnames -->

                <param name="acct_server" value="127.0.0.1:1813:testing123"/>

        </settings>

</configuration>

  the FS version:
  FreeSWITCH Version 1.0.head (git-492bc6b 2011-07-23 12-53-04 -0400)

  Regards,
  Charles