(RADIATOR) Digest Authentication Question.

[Ricardo Martinez]

Do i need to do something like this ?

AuthSelect select PASSWORD from SUBSCRIBERS where USERNAME=%0

AuthColumnDef 0, Digest-Response, check

Is this ok?

I'm using the Radiator 3.9 Full Version, do i need to install anything else?

Please help.

Thanks
Ricardo.


-----Mensaje original-----
De: Ricardo Martinez [mailto:rmartinez at redvoiss.net]
Enviado el: Lunes, 15 de Noviembre de 2004 9:22
Para: 'Mike McCauley'
CC: 'radiator at open.com.au'
Asunto: RE: (RADIATOR) Digest Authentication Question.


Mike.
	Thanks for the response.  How can activate this function to work?
Which is specifically the command to do that?

Thanks in advance.

Ricardo.-

-----Mensaje original-----
De: Mike McCauley [mailto:mikem at open.com.au]
Enviado el: Viernes, 12 de Noviembre de 2004 18:35
Para: Ricardo Martinez
CC: 'radiator at open.com.au'
Asunto: Re: (RADIATOR) Digest Authentication Question.


Hello Ricardo,


On Saturday 13 November 2004 01:40, Ricardo Martinez wrote:
> Hello List.
> 	I am trying to use Radiator to authenticate SIP users, my SIP server
> authenticate user using Digest Authentication, so the Radius packet is
like
> this :
>
>
>  Attributes:
> 		User-Name = "User1 at sipproxy.mydomain.com"
> 		Digest-Attributes = "<10><9>User1"
> 		Digest-Attributes = "<1><15>sipproxy.mydomain.com"
> 		Digest-Attributes
> ="<2>*4193f392b1c4523017059950be294b7c8bc80632"
> 		Digest-Attributes = "<4><19>sip:sipproxy.mydomain.com"
> 		Digest-Attributes = "<3><10>REGISTER"
> 		Digest-Attributes = "<5><6>auth"
> 		Digest-Attributes = "<9><10>00000001"
> 		Digest-Attributes = "<8><10>9a39a1b8"
> 		Digest-Response = "18f1da62dba6f25b2283b9c2cefd0235"
> 		Service-Type = Sip-Session
> 		NAS-IP-Address = 127.0.0.1
> 		NAS-Port = 5060
>
> For what i know in Digest Authentication the password never goes into the
> network.  So if i want to authenticate a user using Digest Authentication
> how can i configure my Radiator to acomplish this?.  I am also using SQL
to
> make database querys.  Supponse that i have a TABLE in my database with
the
> passwords(maybe in cleartext) of all my clients.  How can i use radiator
to
> authenticate a user?
> I really hope that someone can help me here

Radiator can already authenticate such SIP requests, provided it has access
to 
the correct plaintext password from the user database.

You dont need to do any special configuration to handle SIP: Radiator
notices 
the Digest-Response attribute and automatically uses SIP.

If it is not working as expected, please post a log file at trace level 5
(not 
4) showing what is happening when it tries to authenticate.

Cheers.

>
> Thanks in advance.
>
> Ricardo Javier Martinez Ogalde
> Ingeniero de Desarrollo
> VOISS NET S.A.
> Cisco Certified Network Associate ,CCNA (CSCO 10643101)
> *   :  (56 2) 240 81 96
> *    :  (56 2) 245 74 95
> *   :  rmartinez at redvoiss.net
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

-- 
Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia   http://www.open.com.au
Phone +61 7 5598-7474                       Fax   +61 7 5598-7070

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS etc.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.