[Freeswitch-users] Radius auth based on IP without sending 407 Proxy authentication required

Tihomir Culjaga tculjaga at gmail.com
Tue Jun 20 18:28:14 UTC 2017


i build that module few years ago and it still works as a charm :P

have fun,
Tihomir.

On 20 June 2017 at 20:24, Tihomir Culjaga <tculjaga at gmail.com> wrote:

> mod_rad_auth if you want just to authenticate.
>
> its an application that you can trigger in dialplan regradless if its an
> incoming or outgoing call ..
>
> On 20 June 2017 at 20:22, Joseph Waite <joelists at tm.net.uk> wrote:
>
>> There are no users configured on FreeSwitch, all user config is done on
>> JeraSoft VCS and FreeSwitch authenticates via radius!
>>
>> FreeSwitch should allow an INVITE from any IP, not send 407, but
>> authenticate via Radius
>>
>> On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov at gmail.com> wrote:
>>
>> you can add cidr attribute for all users
>>
>> вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists at tm.net.uk>:
>>
>>> I don’t want to allow certain users, I want all calls that come in on
>>> this Sofia profile to not send the 407 but still authenticate via Radius
>>> based on the IP.
>>>
>>>
>>> On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov at gmail.com> wrote:
>>>
>>> When you generate manually ACL with trusted IP or via mod_xml_radius
>>> then you can accept call without 407 message.
>>> Also if you add cird attribute to user directory then FreeSwitch can map
>>> call to user via cidr attribute.
>>>
>>> вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists at tm.net.uk>:
>>>
>>>> I am using mod_xml_radius, however my issue is that if I enable
>>>> auth_calls in profile it sends a 407 Proxy Authentication Required sip
>>>> message, and if I set auth_calls to false it doesn’t authenticate with
>>>> Radius, it simply passes call straight into the dial plan.
>>>>
>>>>
>>>> On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov at gmail.com> wrote:
>>>>
>>>> You can try mod_xml_radius and generate directory record with cidr
>>>> adribute.
>>>>
>>>> вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists at tm.net.uk>:
>>>>
>>>>> Hi Guys
>>>>>
>>>>> I am trying to configure a Sofia Profile that will not send a 407
>>>>> Proxy Authentication Required, but will still authenticate the incoming
>>>>> invite via Radius based on the IP address of the INVITE.
>>>>>
>>>>> If I change the Auth_calls to false on the Sofia profile, it doesn’t
>>>>> send the 407, but then it doesn’t authenticate the call.
>>>>>
>>>>> Any help would be most appreciated.
>>>>>
>>>>> Regards
>>>>> ____________________________________________________________
>>>>> _____________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org
>>>>> http://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org
>>>>> http://confluence.freeswitch.org
>>>>> http://www.cluecon.com
>>>>>
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/
>>>>> freeswitch-users
>>>>> http://www.freeswitch.org
>>>>
>>>> ____________________________________________________________
>>>> _____________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/
>>>> freeswitch-users
>>>> http://www.freeswitch.org
>>>>
>>>>
>>>> ____________________________________________________________
>>>> _____________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/
>>>> freeswitch-users
>>>> http://www.freeswitch.org
>>>
>>> ____________________________________________________________
>>> _____________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>>
>>> ____________________________________________________________
>>> _____________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20170620/abb6b95c/attachment.html>


More information about the FreeSWITCH-users mailing list