Hi Daniel,<br>Thanks for your reply,a quick question,how can I trace or check whether my radiusclient-ng sent the right information and algorithm to AAA server?Is the information below in the log conrrect for radius server to parse?Thanks a lot.
<span id="_user_daniel@voice-system.ro" style="color: rgb(121, 6, 25);"></span><br><br><div><span class="gmail_quote">On 5/30/07, <b class="gmail_sendername">Daniel-Constantin Mierla</b> <<a href="mailto:daniel@voice-system.ro">
daniel@voice-system.ro</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hello,<br><br>the algorithm for authentication is www digest (or http digest --
<br>rfc2617). The password has to be stored either plain text or HA1 format<br>(see the rfc for how to get the HA1). This auth algorithm uses md5 to<br>compute the response and decide whether auth was successful or not.<br>
<br>Cheers,<br>Daniel<br><br>On 05/30/07 17:15, Jason Ma wrote:<br>> Hi All,<br>> I'm configuring radius support on openser using<br>> radiusclient-ng-0.5.5.1.tar.gz,and the radius server is Lucent AAA<br>> server,everytime openser sent the request to AAA server,the AAA server
<br>> could not parse the request,the logs on AAA server is as below.I<br>> noticed that the the server said it was "Unsupported algorithm",and<br>> the algorithm was null,I'm wandering what kind of algorithm does
<br>> radiusclient-ng use?MD5 or HA1......... Please help ! Thanks in advance.<br>><br>> ~~~~~~~~~~~~~~~~~~~~~~~<br>> 2007/05/29 16:51:45.685 <engine.item.setup> Initializing Radius Item:<br>> 192.168.1.42:33345
->0.0.0.0:1812(77)<br>> 0 <engine.item.setup> Using dictionary: draft-sterman-aaa-sip-01<br>> 0 <engine.item.setup> Request decode:<br>> User-Name = "<a href="mailto:21230001@192.168.1.42">
21230001@192.168.1.42</a> <mailto:<a href="mailto:21230001@192.168.1.42">21230001@192.168.1.42</a>>"<br>> Digest-Attributes =<br>> User-Name = "21230001"<br>> Digest-Attributes =
<br>> Realm = "<a href="http://192.168.1.42">192.168.1.42</a> <<a href="http://192.168.1.42">http://192.168.1.42</a>>"<br>> Digest-Attributes =<br>> Nonce = "465c49b766fa11f4a9db29977bf16857d3372780"
<br>> Digest-Attributes =<br>> URI = "sip:<a href="http://192.168.1.42">192.168.1.42</a> <<a href="http://192.168.1.42">http://192.168.1.42</a>>"<br>> Digest-Attributes =
<br>> Method = "REGISTER"<br>> Digest-Response = "689a0f89cd73751f61b12d04f585a224"<br>> Service-Type = IAPP-Register<br>> Anonymous = v0-a208-3231323330303031
<br>> NAS-Port = 5060<br>> NAS-IP-Address = <a href="http://192.168.1.42">192.168.1.42</a> <<a href="http://192.168.1.42">http://192.168.1.42</a>><br>><br>> 0 <engine.item.setup > User-Name parsed: Base-User-Name =
<br>> "21230001", User-Realm = "<a href="http://192.168.1.42">192.168.1.42</a> <<a href="http://192.168.1.42">http://192.168.1.42</a>>"<br>> 0 <engine.item.setup> Item setup complete
<br>> 0 <engine.worker.1 > <setup> ==> ReadUserFile.auth:readUserFile<br>> 0 <plugin.ReadUserFile.auth:readUserFile> searchValue =<br>> '<a href="mailto:21230001@192.168.1.42">
21230001@192.168.1.42</a> <mailto:<a href="mailto:21230001@192.168.1.42">21230001@192.168.1.42</a>>'.<br>> 0 <plugin.ReadUserFile.auth:readUserFile > Found entry:<br>> <a href="mailto:21230001@192.168.1.42">
21230001@192.168.1.42</a> <mailto:<a href="mailto:21230001@192.168.1.42">21230001@192.168.1.42</a>><br>> 0 <plugin.ReadUserFile.auth:readUserFile> Check items for found<br>> entry:<br>> User-Password = <hidden>
<br>> Auth-Type = Local<br>><br>> 0 <plugin.ReadUserFile.auth:readUserFile> Reply items for found<br>> entry:<br>><br>> 0 <plugin.ReadUserFile.auth:readUserFile> SUCCESS -- Read User
<br>> <a href="mailto:21230001@192.168.1.42">21230001@192.168.1.42</a> <mailto:<a href="mailto:21230001@192.168.1.42">21230001@192.168.1.42</a>><br>> 0 <engine.worker.1> ReadUserFile.auth:readUserFile
==><br>> AuthHttpDigest.auth:checkDigest by SUCCESS -- Read User<br>> <a href="mailto:21230001@192.168.1.42">21230001@192.168.1.42</a> <mailto:<a href="mailto:21230001@192.168.1.42">21230001@192.168.1.42</a>>
<br>> 0 <plugin.AuthHttpDigest.auth:checkDigest > response =<br>> 689a0f89cd73751f61b12d04f585a224<br>> 0 <plugin.AuthHttpDigest.auth:checkDigest> realm = <a href="http://192.168.1.42">192.168.1.42
</a><br>> <<a href="http://192.168.1.42">http://192.168.1.42</a>><br>> 0 <plugin.AuthHttpDigest.auth:checkDigest> nonce =<br>> 465c49b766fa11f4a9db29977bf16857d3372780<br>> 0 <plugin.AuthHttpDigest.auth:checkDigest
> method = REGISTER<br>> 0 <plugin.AuthHttpDigest.auth:checkDigest> uri =<br>> sip:<a href="http://192.168.1.42">192.168.1.42</a> <<a href="http://192.168.1.42">http://192.168.1.42</a>><br>> 0 <
plugin.AuthHttpDigest.auth:checkDigest > qop =<br>> 0 <plugin.AuthHttpDigest.auth:checkDigest> algorithm =<br>> 0 <plugin.AuthHttpDigest.auth:checkDigest> entityBodyHash =<br>> 0 <
plugin.AuthHttpDigest.auth:checkDigest> cNonce =<br>> 0 <plugin.AuthHttpDigest.auth:checkDigest> nonceCount =<br>> 0 <plugin.AuthHttpDigest.auth:checkDigest> username = 21230001<br>> 0 <
plugin.AuthHttpDigest.auth:checkDigest> ERROR -- Error<br>> generating HTTP digest: java.io.IOException: Unsupported algorithm: :<br>> java.io.IOException: Unsupported algorithm:<br>> 1 <engine.worker.1
> AuthHttpDigest.auth:checkDigest ==><br>> End-Of-Methods by ERROR -- Error generating HTTP digest:<br>> java.io.IOException: Unsupported algorithm:<br>> 1 <engine.worker.1> <a href="mailto:21230001@192.168.1.42">
21230001@192.168.1.42</a><br>> <mailto:<a href="mailto:21230001@192.168.1.42">21230001@192.168.1.42</a>> login discarded due to Error generating<br>> HTTP digest: java.io.IOException: Unsupported algorithm:<br>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br>> ------------------------------------------------------------------------<br>><br>> _______________________________________________<br>> Users mailing list<br>>
<a href="mailto:Users@openser.org">Users@openser.org</a><br>> <a href="http://openser.org/cgi-bin/mailman/listinfo/users">http://openser.org/cgi-bin/mailman/listinfo/users</a><br>><br></blockquote></div><br>