[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sr-dev
Subject:    [Serdev] Configuring freeradius to use digest authentication
From:       <jaime () umtstrial ! co ! uk>
Date:       2003-07-10 9:56:48
Message-ID: 20344.193.36.79.206.1057831008.squirrel () gk ! umtstrial ! co ! uk
[Download RAW message or body]

Hello Juha,

I was just wondering if you have been able to configure FreeRadius-0.8.1
to perform digest authentication using the auth_radius module of SER.

The basic steps are:

1.- Include the following in "users" file:

#---
test    Auth-Type := Digest, User-Password = "test"
        Reply-Message = "Hello, test with digest"
#---

2.- Re-start the server and use 'radclient' to send the following packet
to the server:

$  radclient -f digest localhost auth testing123

Where 'digest' is a file containing:

User-Name = "test", Digest-Response = "631d6d73147add2f9e437f59bbc3aeb7",
Digest-Realm = "testrealm", Digest-Nonce = "1234abcd", Digest-Method =
"INVITE", Digest-URI = "sip:5555551212@example.com", Digest-Algorithm =
"MD5", Digest-User-Name = "test"


After following these simple instructions in doc/rlm_digest, restarting
the server, etc. it crashes after receiving the request with a
segmentation fault like this:

rad_recv: Access-Request packet from host 127.0.0.1:33422, id=169, length=140
Thread 1 assigned request 0
SMUX connect try 2
Can't connect to SNMP agent with SMUX: Connection refused
--- Walking the entire request list ---
Threads: total/active/spare threads = 5/1/4
Waking up in 5 seconds...
Thread 1 handling request 0, (1 handled so far)
        User-Name = "test"
        Digest-Response = "631d6d73147add2f9e437f59bbc3aeb7"
        Digest-Attributes = 0x010b746573747265616c6d
        Digest-Attributes = 0x020a3132333461626364
        Digest-Attributes = 0x0308494e56495445
        Digest-Attributes =
0x041c7369703a35353535353531323132406578616d706c652e636f6d
        Digest-Attributes = 0x06054d4435
        Digest-Attributes = 0x0a0674657374
modcall: entering group authorize
  modcall[authorize]: module "preprocess" returns ok
rlm_chap: Could not find proper Chap-Password attribute in request
  modcall[authorize]: module "chap" returns noop
  modcall[authorize]: module "mschap" returns notfound
    rlm_realm: No '@' in User-Name = "test", looking up realm NULL
    rlm_realm: No such realm NULL
  modcall[authorize]: module "suffix" returns noop
    users: Matched test at 129
  modcall[authorize]: module "files" returns ok
Segmentation fault


May be it is a bug or a configuration problem. Is there a working
configuration of SER + Freeradius somewhere that could be shared within
this mailing list?

Thanks in advance,

Jaime


[prev in list] [next in list] [prev in thread] [next in thread]