forum.bitel.ru
http://forum.bitel.ru/

Регистрация клиентов
http://forum.bitel.ru/viewtopic.php?f=6&t=6687		 Страница 1 из 1
Автор:  anix [ 11 апр 2012, 13:45 ]
Заголовок сообщения:  Регистрация клиентов
Здравствуйте!

Возник вопрос как организовать регистрацию клиентов через радиус.
Если регистрировать клиентов на шлюзе и звонить, все работает. Хотим перенести проверку логин/пароль на радиус, запрос с шлюза улетает, приходит в радиус, в модуле появляется ошибка "Неверный пароль логина".
Код:
04-11/15:26:51  INFO [rdsLstnr-p-5-t-1] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 101
Authenticator: {D1 85 EC 03 37 97 96 40 91 C5 8C 79 6C B6 DB 3E}
Attributes:
  User-Name=7abc3991760
  Digest-Response=b0f603eb2ba389dfde1a2d6f801bd863
  NAS-IP-Address=10.1.19.250
  NAS-Port=5060
  Service-Type=1
  Framed-Protocol=2
  Digest-Algorithm=MD5
  Digest-Method=REGISTER
  Digest-URI=sip:10.1.19.250
  Digest-Realm=10.1.19.250
  Digest-Nonce=784baed02246c098604fdcdce06c33cd
  Digest-Username=7abc3991760
  Message-Authenticator={73 95 39 FF BE B5 A7 CD 99 03 FF 16 AC 7B 1A A8}
  SIP-AOR=sip:7abc3991760@10.1.19.250
  NAS-Port-Type=0

04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] RadiusProcessor - Create new radius session.
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] VoiceIpRadiusProcessor - Process outgoing auth Packet type: Access-Request
Identifier: 101
Authenticator: {D1 85 EC 03 37 97 96 40 91 C5 8C 79 6C B6 DB 3E}
Attributes:
  User-Name=7abc3991760
  Digest-Response=b0f603eb2ba389dfde1a2d6f801bd863
  NAS-IP-Address=10.1.19.250
  NAS-Port=5060
  Service-Type=1
  Framed-Protocol=2
  Digest-Algorithm=MD5
  Digest-Method=REGISTER
  Digest-URI=sip:10.1.19.250
  Digest-Realm=10.1.19.250
  Digest-Nonce=784baed02246c098604fdcdce06c33cd
  Digest-Username=7abc3991760
  Message-Authenticator={73 95 39 FF BE B5 A7 CD 99 03 FF 16 AC 7B 1A A8}
  SIP-AOR=sip:7abc3991760@10.1.19.250
  NAS-Port-Type=0

04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Finding login..
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] VoiceIpRadiusProcessor - Found login type 1
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Login found: 2
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Checking access allow...
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Checking password...
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - try checkDigestMD5Password
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - digestAttributes=null
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - digestResponse=null
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - user =null realm =null nonce = null method = null uri = null
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - try all in one string
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - digestAttribute=null
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Login password error
04-11/15:26:51 DEBUG [rdsLstnr-p-5-t-1] ProcessorRequest - Sending to /10.1.19.250:32774
04-11/15:26:51  INFO [rdsLstnr-p-5-t-1] RadiusListenerWorker - RESPONSE:
Packet type: Access-Reject
Identifier: 101
Authenticator: {79 94 5F 63 37 FD 8B FB 61 18 EC 47 D7 32 E6 68}
Attributes:
  Reply-Message=2
  Message-Authenticator={00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00}
  h323-return-code=2

Process time auth: 58
Автор:  anix [ 11 апр 2012, 14:32 ]
Заголовок сообщения:  Re: Регистрация клиентов
В соседней теме натолкнулся на сообщение про фикс бага "Ошибка при RADIUS Digest (rfc5090) авторизации." http://bgbilling.ru/v5.1/download/voiceip/fixed_rad.
У нас версия 5.2, может быть в ней ошибка есть?
Код:
Сервер: вер. 5.2 сборка 1154 от 09.04.2012 02:32:18
    os: Linux; java: Java HotSpot(TM) Client VM, v.1.6.0_30

  voiceip вер. 5.2 сборка 178 от 04.04.2012 19:12:42
Автор:  FessAectan [ 12 апр 2012, 13:47 ]
Заголовок сообщения:  Re: Регистрация клиентов
После обновления регистрация проходит, но вот позвонить никуда не удаётся
Код:
04-12/14:43:54  INFO [rdsLstnr-p-5-t-20] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 96
Authenticator: {FF 4D 20 5F 22 18 7D 1C 81 AB 7B 4E 9D E0 CF 25}
Attributes:
  User-Name=506
  NAS-IP-Address=10.1.19.250
  Message-Authenticator={2E C2 86 78 5A 83 37 33 26 69 85 7E 1F F3 AC 45}
  NAS-Port=5060
  Service-Type=1
  Framed-Protocol=2
  Digest-Method=INVITE
  Digest-URI=sip:506@10.1.19.250
  Calling-Station-Id=506
  NAS-Port-Type=0
  Called-Station-Id=505
  h323-gw-id=10.1.19.250
  h323-conf-id=11000307|4f8687d9

04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-20] RadiusProcessor - Create new radius session.
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-20] ProcessorRequest - Sending to /10.1.19.250:32772
04-12/14:43:54  INFO [rdsLstnr-p-5-t-20] RadiusListenerWorker - RESPONSE:
Packet type: Access-Challenge
Identifier: 96
Authenticator: {C0 70 1B 17 64 FC 43 F9 D0 17 9B AB 22 AD A4 7C}
Attributes:
  Message-Authenticator={00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00}
  Digest-Qop=auth
  Digest-Algorithm=MD5
  Digest-Realm=bgbilling.ru
  Digest-Nonce=cc0ae4e6366db5b5

04-12/14:43:54  INFO [rdsLstnr-p-5-t-1] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 97
Authenticator: {8C 68 B3 8F D6 0F 91 A8 09 81 D6 70 62 FE 18 D8}
Attributes:
  User-Name=506
  Digest-Response=600bde9730e9ec04fa0281576e207e7e
  NAS-IP-Address=10.1.19.250
  NAS-Port=5060
  Service-Type=1
  Framed-Protocol=2
  Digest-Qop=auth
  Digest-Algorithm=MD5
  Digest-Method=INVITE
  Digest-URI=sip:505@10.1.19.250
  Digest-Realm=bgbilling.ru
  Digest-Nonce=cc0ae4e6366db5b5
  Digest-Username=506
  Message-Authenticator={37 5F 35 49 A3 B2 2D 36 5C D2 B9 AC 6C 10 13 F2}
  Digest-Nonce-Count=00000001
  Digest-CNonce=6ff91c2b
  SIP-AOR=sip:506@10.1.19.250
  NAS-Port-Type=0
  Calling-Station-Id=506
  Called-Station-Id=505
  h323-gw-id=10.1.19.250
  h323-conf-id=11000152|4f8687d9

04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] RadiusProcessor - Create new radius session.
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] VoiceIpRadiusProcessor - Process outgoing auth Packet type: Access-Request
Identifier: 97
Authenticator: {8C 68 B3 8F D6 0F 91 A8 09 81 D6 70 62 FE 18 D8}
Attributes:
  User-Name=506
  Digest-Response=600bde9730e9ec04fa0281576e207e7e
  NAS-IP-Address=10.1.19.250
  NAS-Port=5060
  Service-Type=1
  Framed-Protocol=2
  Digest-Qop=auth
  Digest-Algorithm=MD5
  Digest-Method=INVITE
  Digest-URI=sip:505@10.1.19.250
  Digest-Realm=bgbilling.ru
  Digest-Nonce=cc0ae4e6366db5b5
  Digest-Username=506
  Message-Authenticator={37 5F 35 49 A3 B2 2D 36 5C D2 B9 AC 6C 10 13 F2}
  Digest-Nonce-Count=00000001
  Digest-CNonce=6ff91c2b
  SIP-AOR=sip:506@10.1.19.250
  NAS-Port-Type=0
  Calling-Station-Id=506
  Called-Station-Id=505
  h323-gw-id=10.1.19.250
  h323-conf-id=11000152|4f8687d9

04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Finding login..
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] VoiceIpRadiusProcessor - Found login type 1
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Login found: 3
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Checking access allow...
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Checking password...
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - try checkDigestMD5Password
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - digestAttributes=null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - digestResponse=null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - user =null realm =null nonce = null method = null uri = null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - try all in one string
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] RadiusUtils - digestAttribute=null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Checking contract status
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] AbstractRadiusProcessor - Checking balance...
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] VoiceIpRadiusProcessor - Checking tariff...
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-1] ProcessorRequest - Sending to /10.1.19.250:32772
04-12/14:43:54  INFO [rdsLstnr-p-5-t-1] RadiusListenerWorker - RESPONSE:
Packet type: Access-Accept
Identifier: 97
Authenticator: {80 3E D2 DD 38 31 B0 DD 05 BD EC B5 8C 63 09 5B}
Attributes:
  Message-Authenticator={00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00}
  Digest-Response-Auth=1b5c9e1907a23c85ba0a905aabee7457
  h323-credit-time=1800
  h323-return-code=0
  h323-credit-amount=998.95

Process time auth: 7

04-12/14:43:54  INFO [rdsLstnr-p-5-t-2] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 228
Authenticator: {DC A5 8C 5A F6 7F 8C C4 64 6C 78 F8 F1 0E 96 85}
Attributes:
  User-Name=506
  User-Password=�ڠFNU��f*�ĶQ�s
  NAS-IP-Address=10.1.19.250
  NAS-Port=285213010
  Acct-Session-Id=11000152|4f8687d9
  NAS-Port-Type=0
  Calling-Station-Id=506
  cisco-avpair=xpgk-request-type=number
  cisco-avpair=xpgk-src-number-in=506
  cisco-avpair=h323-gw-address=10.1.19.250
  h323-gw-id=10.1.19.250
  h323-conf-id=11000152|4f8687d9

04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] RadiusProcessor - Create new radius session.
04-12/14:43:54  INFO [rdsLstnr-p-5-t-3] RadiusListenerWorker - REQUEST:
Packet type: Access-Request
Identifier: 229
Authenticator: {DF FF FF ED F7 1A A1 76 27 E0 46 1D A4 48 19 F7}
Attributes:
  User-Name=506
  User-Password=I�F��(a�����x;`
  NAS-IP-Address=10.1.19.250
  NAS-Port=285213010
  Acct-Session-Id=11000152|4f8687d9
  NAS-Port-Type=0
  Calling-Station-Id=506
  Called-Station-Id=505
  cisco-avpair=xpgk-request-type=number
  cisco-avpair=xpgk-src-number-in=506
  cisco-avpair=xpgk-dst-number-in=505
  cisco-avpair=h323-gw-address=10.1.19.250
  h323-gw-id=10.1.19.250
  h323-conf-id=11000152|4f8687d9

04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] VoiceIpRadiusProcessor - Process outgoing auth Packet type: Access-Request
Identifier: 228
Authenticator: {DC A5 8C 5A F6 7F 8C C4 64 6C 78 F8 F1 0E 96 85}
Attributes:
  User-Name=506
  User-Password=�ڠFNU��f*�ĶQ�s
  NAS-IP-Address=10.1.19.250
  NAS-Port=285213010
  Acct-Session-Id=11000152|4f8687d9
  NAS-Port-Type=0
  Calling-Station-Id=506
  cisco-avpair=xpgk-request-type=number
  cisco-avpair=xpgk-src-number-in=506
  cisco-avpair=h323-gw-address=10.1.19.250
  h323-gw-id=10.1.19.250
  h323-conf-id=11000152|4f8687d9

04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] AbstractRadiusProcessor - Finding login..
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] VoiceIpRadiusProcessor - Found login type 1
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] RadiusProcessor - Create new radius session.
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] VoiceIpRadiusProcessor - Process outgoing auth Packet type: Access-Request
Identifier: 229
Authenticator: {DF FF FF ED F7 1A A1 76 27 E0 46 1D A4 48 19 F7}
Attributes:
  User-Name=506
  User-Password=I�F��(a�����x;`
  NAS-IP-Address=10.1.19.250
  NAS-Port=285213010
  Acct-Session-Id=11000152|4f8687d9
  NAS-Port-Type=0
  Calling-Station-Id=506
  Called-Station-Id=505
  cisco-avpair=xpgk-request-type=number
  cisco-avpair=xpgk-src-number-in=506
  cisco-avpair=xpgk-dst-number-in=505
  cisco-avpair=h323-gw-address=10.1.19.250
  h323-gw-id=10.1.19.250
  h323-conf-id=11000152|4f8687d9

04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] AbstractRadiusProcessor - Finding login..
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] AbstractRadiusProcessor - Login found: 3
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] AbstractRadiusProcessor - Checking access allow...
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] AbstractRadiusProcessor - Checking password...
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] RadiusUtils - try checkDigestMD5Password
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] RadiusUtils - digestAttributes=null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] RadiusUtils - digestResponse=null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] RadiusUtils - user =null realm =null nonce = null method = null uri = null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] RadiusUtils - try all in one string
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] RadiusUtils - digestAttribute=null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] AbstractRadiusProcessor - Login password error
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] VoiceIpRadiusProcessor - Found login type 1
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] AbstractRadiusProcessor - Login found: 3
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] AbstractRadiusProcessor - Checking access allow...
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] AbstractRadiusProcessor - Checking password...
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] RadiusUtils - try checkDigestMD5Password
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] RadiusUtils - digestAttributes=null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] RadiusUtils - digestResponse=null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] RadiusUtils - user =null realm =null nonce = null method = null uri = null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] RadiusUtils - try all in one string
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] RadiusUtils - digestAttribute=null
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] AbstractRadiusProcessor - Login password error
04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-2] ProcessorRequest - Sending to /10.1.19.250:32769
04-12/14:43:54  INFO [rdsLstnr-p-5-t-2] RadiusListenerWorker - RESPONSE:
Packet type: Access-Reject
Identifier: 228
Authenticator: {3C 63 85 F2 B4 7C 8E C3 69 12 10 6C E2 CC 30 2A}
Attributes:
  Reply-Message=2
  h323-return-code=2

Process time auth: 13

04-12/14:43:54 DEBUG [rdsLstnr-p-5-t-3] ProcessorRequest - Sending to /10.1.19.250:32769
04-12/14:43:54  INFO [rdsLstnr-p-5-t-3] RadiusListenerWorker - RESPONSE:
Packet type: Access-Reject
Identifier: 229
Authenticator: {6F F4 4F 39 5F 2D DF 4F C2 5E F6 DE 6B 50 DA 4C}
Attributes:
  Reply-Message=2
  h323-return-code=2

Process time auth: 10
Автор:  FessAectan [ 12 апр 2012, 13:55 ]
Заголовок сообщения:  Re: Регистрация клиентов
хм, изменил пароли, звонки пошли...
проверяем дальше
Страница 1 из 1 Часовой пояс: UTC + 5 часов [ Летнее время ]
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/