Hi all,<br><br>Sorry for stepping so late in this post but I am facing exactly the same "issue" and would like to call for attention from other SER 2.0 rc2 users/developers.<br><br>Whenever you try to load from RADIUS user class attributes, for example with
<br> radius_load_attr("$tu","@to.uri")<br>you get in radius only <br>User-Name = "<a href="mailto:sip:sam@test.voip.com">sip:sam@test.voip.com</a>" <br>SER-Service-Type=Get-User-Attrs.
<br><br>In case you want to load uri class attributes, for example with<br> radius_load_attr("$tr","@to.uri")<br> the Radius Request paquet has completely different contents, namely the URI splited into 3 parameters SER-URI-Scheme = "sip"
<br>User-Name = "sam"<br>SER-DID = "<a href="http://test.voip.com">test.voip.com</a>"<br><br>This double format complicates unnecessarily, at least for me, radius configuration or forces you to do some "dirty", at least for me, tricks in order to get in the User-Name paramenter the same value so you onlyhave ONE USER DEFINITION in radius config and not all the possible combinations it may appear...Remember you can call load_user_attr with different arguments (@ruri,@to,@
to.uri,@to.uri,username,....) and it will end up being a complete mess.<br><br>I would therefore like to standardize both methods so the same data is expected in radius or that someone explain why this different methods are required.
<br><br>Thanks to all!!!<br><br>Samuel.<br><br><br>P.D. I'm a radius newbie, using FreeRadius, and may be there are clean ways to configure RADIUS so both Access-Requests are handled in a ellegant way requiring you to have only one user definition.
<br><br><br><div><span class="gmail_quote">2007/3/12, tzieleniewski <<a href="mailto:tzieleniewski@o2.pl">tzieleniewski@o2.pl</a>>:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi<br><br>Is this correct that when I send the Get-URI-Attrs request type to radius it has the following contents:<br> SER-Uri-Scheme = "sip"<br> User-Name = "hellboy"<br> SER-DID = "
<a href="http://voip.rd.touk.pl">voip.rd.touk.pl</a>"<br> SER-Service-Type = Get-URI-Attrs<br> NAS-Port = 0<br> NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br>and when I send the Get-User_Attrs the contents are the following:
<br> User-Name = "<a href="mailto:sip:hellboy@voip.rd.touk.pl">sip:hellboy@voip.rd.touk.pl</a>"<br> SER-Service-Type = Get-User-Attrs<br> NAS-Port = 0<br> NAS-IP-Address = <a href="http://127.0.0.1">
127.0.0.1</a><br><br>shouldn't here be the same split into the User-Name and SER-DID?<br>Such form implies to have double records in radius for sip:hellboy and hellboy.<br><br>Bests<br>Tomasz<br><br><br>> ><br>> > tzieleniewski wrote:
<br>> > > hi!<br>> > ><br>> > > When I invoke the radius_load_attrs() the message send to radius has the following shape:<br>> > > Thu Mar 8 10:50:46 2007<br>> > > Packet-Type = Access-Request
<br>> > > User-Name = "<a href="mailto:sip:hellboy@voip.rd.touk.pl">sip:hellboy@voip.rd.touk.pl</a>"<br>> > > SER-Service-Type = Get-User-Attrs<br>> > > NAS-Port = 0
<br>> > > NAS-IP-Address = <a href="http://127.0.0.1">127.0.0.1</a><br>> > ><br>> > > the message doesn't contain any authentication data like password.<br>> > > so do I understand right that radius in such case should be configured in such a way to accept any message of the SER-Service-Type = Get-User-Attrs?
<br>> > ><br>> > That's correct.<br>> > > Are still the avp loaded from radius prefixed or they are just put into the particular track and class?<br>> > ><br>> > No prefixes.<br>
> > > Could You please give me one example of the radius one avp record and the shape in which it will appear in ser after loading.<br>> > ><br>> > SER-Attr -> avp[:=]value<br>> Hi,<br>><br>
> I did it and connection with radius works fine - I see the Access-Request from ser being analyzed and answered by radius but I can see an avp value to appear in ser.<br>> I did such a check:<br>><br>> dump_attrs();
<br>> radius_load_attrs("$tr","@ruri");<br>> dump_attrs();<br>><br>> the following message arived at radius:<br>> SER-Uri-Scheme = "sip"<br>> User-Name = "tomix"
<br>> SER-DID = "<a href="http://tezet.no-ip.org">tezet.no-ip.org</a>"<br>> SER-Service-Type = Get-URI-Attrs<br>> NAS-Port = 0<br>> NAS-IP-Address = <a href="http://127.0.0.1">
127.0.0.1</a><br>><br>> and following one was answered:<br>> Sending Access-Accept of id 85 to <a href="http://127.0.0.1">127.0.0.1</a> port 32997<br>> SER-To-DID = "domain.any"<br>><br>> the ser debug output haven't show any change related to did avp in to track, why is that, what do I missed?
<br>><br>> debug output:<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:540: class=GLOBAL<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["lang"]="en"<br>> Mar 9 10:47:50 tomix ser[3721]: INFO:
avp.c:550: track=FROM class=DOMAIN<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["did"]="<a href="http://tezet.no-ip.org">tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["digest_realm"]="
<a href="http://tezet.no-ip.org">tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:560: track=TO class=DOMAIN<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["did"]="<a href="http://tezet.no-ip.org">
tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["digest_realm"]="<a href="http://tezet.no-ip.org">tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:570: track=FROM class=USER
<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: No AVP present<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:580: track=TO class=USER<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["uid"]="<a href="mailto:tomix@tezet.no-ip.org">
tomix@tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:590: track=FROM class=URI<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: No AVP present<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c
:600: track=TO class=URI<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["fforward_failure"]="<a href="mailto:sip:misia@tezet.no-ip.org">sip:misia@tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: route[INBOUND]: radius_load_attrs($tr,@ruri) <ACK> <
<a href="mailto:sip:tomix@tezet.no-ip.org">sip:tomix@tezet.no-ip.org</a>><br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:540: class=GLOBAL<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["lang"]="en"
<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:550: track=FROM class=DOMAIN<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["did"]="<a href="http://tezet.no-ip.org">tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["digest_realm"]="
<a href="http://tezet.no-ip.org">tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:560: track=TO class=DOMAIN<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["did"]="<a href="http://tezet.no-ip.org">
tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["digest_realm"]="<a href="http://tezet.no-ip.org">tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:570: track=FROM class=USER
<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: No AVP present<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:580: track=TO class=USER<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["uid"]="<a href="mailto:tomix@tezet.no-ip.org">
tomix@tezet.no-ip.org</a>"<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c:590: track=FROM class=URI<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: No AVP present<br>> Mar 9 10:47:50 tomix ser[3721]: INFO: avp.c
:600: track=TO class=URI<br>> Mar 9 10:47:50 tomix ser[3721]: AVP["fforward_failure"]="<a href="mailto:sip:misia@tezet.no-ip.org">sip:misia@tezet.no-ip.org</a>"<br>><br>> Bests<br>> Tomasz
<br>><br>><br>> ><br>> > Integer values are automatically converted from string into integer avp.<br>> > It is the responsibility of the RADIUS server to return the correct set<br>> > of AVP dependent on SER-Service-Type (see etc/dictionary.ser).
<br>> > g-)<br>> > > Thank you in advance<br>> > > Best<br>> > > Tomasz<br>> > > _______________________________________________<br>> > > Serusers mailing list<br>> > >
<a href="mailto:Serusers@lists.iptel.org">Serusers@lists.iptel.org</a><br>> > > <a href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a><br>> > ><br>
> > ><br>> > ><br>><br>> _______________________________________________<br>> Serusers mailing list<br>> <a href="mailto:Serusers@lists.iptel.org">Serusers@lists.iptel.org</a><br>> <a href="http://lists.iptel.org/mailman/listinfo/serusers">
http://lists.iptel.org/mailman/listinfo/serusers</a><br><br>_______________________________________________<br>Serusers mailing list<br><a href="mailto:Serusers@lists.iptel.org">Serusers@lists.iptel.org</a><br><a href="http://lists.iptel.org/mailman/listinfo/serusers">
http://lists.iptel.org/mailman/listinfo/serusers</a><br></blockquote></div><br>