[Freeswitch-users] Radius auth based on IP without sending 407 Proxy authentication required

Tue Jun 20 18:54:25 UTC 2017

Hi Joseph,
if you are using mod_xml_radius , i am not sure how your Dialplan is , but
if you are not missing you have to include file from mod_xml_radius source
in your dialplan.
00_dialplan_auth.xml
When we were using VCS , both ip/user authentication worked well .

On Tue, Jun 20, 2017 at 11:46 PM, Joseph Waite <joelists at tm.net.uk> wrote:

> One question. the docs in confluence seem to indicate that it can only be
> used for user/pass authentication and not IP authentication. Is this
> correct?
>
> On 20 Jun 2017, at 19:28, Tihomir Culjaga <tculjaga at gmail.com> wrote:
>
> i build that module few years ago and it still works as a charm :P
>
> have fun,
> Tihomir.
>
> On 20 June 2017 at 20:24, Tihomir Culjaga <tculjaga at gmail.com> wrote:
>
>> mod_rad_auth if you want just to authenticate.
>>
>> its an application that you can trigger in dialplan regradless if its an
>> incoming or outgoing call ..
>>
>> On 20 June 2017 at 20:22, Joseph Waite <joelists at tm.net.uk> wrote:
>>
>>> There are no users configured on FreeSwitch, all user config is done on
>>> JeraSoft VCS and FreeSwitch authenticates via radius!
>>>
>>> FreeSwitch should allow an INVITE from any IP, not send 407, but
>>> authenticate via Radius
>>>
>>> On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov at gmail.com> wrote:
>>>
>>> you can add cidr attribute for all users
>>>
>>> вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists at tm.net.uk>:
>>>
>>>> I don’t want to allow certain users, I want all calls that come in on
>>>> this Sofia profile to not send the 407 but still authenticate via Radius
>>>> based on the IP.
>>>>
>>>>
>>>> On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov at gmail.com> wrote:
>>>>
>>>> When you generate manually ACL with trusted IP or via mod_xml_radius
>>>> then you can accept call without 407 message.
>>>> Also if you add cird attribute to user directory then FreeSwitch can
>>>> map call to user via cidr attribute.
>>>>
>>>> вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists at tm.net.uk>:
>>>>
>>>>> I am using mod_xml_radius, however my issue is that if I enable
>>>>> auth_calls in profile it sends a 407 Proxy Authentication Required sip
>>>>> message, and if I set auth_calls to false it doesn’t authenticate with
>>>>> Radius, it simply passes call straight into the dial plan.
>>>>>
>>>>>
>>>>> On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov at gmail.com> wrote:
>>>>>
>>>>> You can try mod_xml_radius and generate directory record with cidr
>>>>> adribute.
>>>>>
>>>>> вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists at tm.net.uk>:
>>>>>
>>>>>> Hi Guys
>>>>>>
>>>>>> I am trying to configure a Sofia Profile that will not send a 407
>>>>>> Proxy Authentication Required, but will still authenticate the incoming
>>>>>> invite via Radius based on the IP address of the INVITE.
>>>>>>
>>>>>> If I change the Auth_calls to false on the Sofia profile, it doesn’t
>>>>>> send the 407, but then it doesn’t authenticate the call.
>>>>>>
>>>>>> Any help would be most appreciated.
>>>>>>
>>>>>> Regards
>>>>>>
>>>>>> ____________________________________________________________
>>>>>> _____________
>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>> consulting at freeswitch.org
>>>>>> http://www.freeswitchsolutions.com
>>>>>>
>>>>>> Official FreeSWITCH Sites
>>>>>> http://www.freeswitch.org
>>>>>> http://confluence.freeswitch.org
>>>>>> http://www.cluecon.com
>>>>>>
>>>>>> FreeSWITCH-users mailing list
>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free
>>>>>> switch-users
>>>>>> http://www.freeswitch.org
>>>>>>
>>>>> ____________________________________________________________
>>>>> _____________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org
>>>>> http://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org
>>>>> http://confluence.freeswitch.org
>>>>> http://www.cluecon.com
>>>>>
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free
>>>>> switch-users
>>>>> http://www.freeswitch.org
>>>>>
>>>>>
>>>>> ____________________________________________________________
>>>>> _____________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org
>>>>> http://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org
>>>>> http://confluence.freeswitch.org
>>>>> http://www.cluecon.com
>>>>>
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free
>>>>> switch-users
>>>>> http://www.freeswitch.org
>>>>>
>>>> ____________________________________________________________
>>>> _____________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free
>>>> switch-users
>>>> http://www.freeswitch.org
>>>>
>>>>
>>>> ____________________________________________________________
>>>> _____________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free
>>>> switch-users
>>>> http://www.freeswitch.org
>>>>
>>> ____________________________________________________________
>>> _____________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>>
>>>
>>> ____________________________________________________________
>>> _____________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20170620/5af08700/attachment-0001.html>