Adding a new configurable radius module that will support both authentication…

Adding a new configurable radius module that will support both authentication based on a dialplan app, as well as digest based radius authentication by hooking into the directory. It is also fully configurable on which fields to send by the config file.

src/mod/xml_int/mod_xml_radius/.gitignore

+freeradius-client*
\ No newline at end of file

src/mod/xml_int/mod_xml_radius/00_dialpla_auth.xml

+<include>
+
+  <extension name="auth" continue="true">
+    <condition field="radius_auth_result" expression="^$">
+      <action application="radius_auth" inline="true"/>
+    </condition>
+  </extension>
+
+  <extension name="rejctions">
+    <condition field="${radius_auth_result}" expression="2">
+      <action application="hangup" data="CALL_REJECTED"/>      
+    </condition>
+  </extension>
+
+  <extension name="timedouts">
+    <condition field="${radius_auth_result}" expression="1">
+      <action application="hangup" data="SWITCH_CONGESTION"/>
+    </condition>
+  </extension>
+
+</include>
+

src/mod/xml_int/mod_xml_radius/Makefile

+RADCLIENT_VERSION=1.1.6
+RADCLIENT=freeradius-client-$(RADCLIENT_VERSION)
+RADCLIENT_DIR=$(switch_srcdir)/libs/$(RADCLIENT)
+RADCLIENT_BUILDDIR=$(switch_builddir)/libs/$(RADCLIENT)
+RADCLIENT_LIBDIR=$(RADCLIENT_BUILDDIR)/lib
+RADCLIENT_LA=${RADCLIENT_LIBDIR}/libfreeradius-client.la
+
+LOCAL_CFLAGS=-I$(RADCLIENT_DIR)/include
+LOCAL_LIBADD=$(RADCLIENT_LA)
+
+BASE=../../../..
+include $(BASE)/build/modmake.rules
+
+$(RADCLIENT_DIR):
+	$(GETLIB) $(RADCLIENT).tar.gz
+
+$(RADCLIENT_BUILDDIR)/Makefile: $(RADCLIENT_DIR)
+	mkdir -p $(RADCLIENT_BUILDDIR)
+	cd $(RADCLIENT_BUILDDIR) && $(DEFAULT_VARS) $(RADCLIENT_DIR)/configure $(DEFAULT_ARGS) --srcdir=$(RADCLIENT_DIR)
+	$(TOUCH_TARGET)
+
+$(RADCLIENT_LA): $(RADCLIENT_BUILDDIR)/Makefile
+	cd $(RADCLIENT_BUILDDIR) && CFLAGS="$(CFLAGS)" $(MAKE)
+	$(TOUCH_TARGET)
+
+

src/mod/xml_int/mod_xml_radius/dictionaries/dictionary

+#
+# Updated 97/06/13 to livingston-radius-2.01 miquels@cistron.nl
+#
+#	This file contains dictionary translations for parsing
+#	requests and generating responses.  All transactions are
+#	composed of Attribute/Value Pairs.  The value of each attribute
+#	is specified as one of 4 data types.  Valid data types are:
+#
+#	string - 0-253 octets
+#	ipaddr - 4 octets in network byte order
+#	integer - 32 bit value in big endian order (high byte first)
+#	date - 32 bit value in big endian order - seconds since
+#					00:00:00 GMT,  Jan.  1,  1970
+#
+#	Enumerated values are stored in the user file with dictionary
+#	VALUE translations for easy administration.
+#
+#	Example:
+#
+#	ATTRIBUTE	  VALUE
+#	---------------   -----
+#	Framed-Protocol = PPP
+#	7		= 1	(integer encoding)
+#
+
+#
+#	Following are the proper new names. Use these.
+#
+$INCLUDE /usr/local/src/freeswitch/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary.cisco
+$INCLUDE /usr/local/src/freeswitch/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary.rfc5090
+
+ATTRIBUTE	User-Name		1	string
+ATTRIBUTE	Password		2	string
+ATTRIBUTE	CHAP-Password		3	string
+ATTRIBUTE	NAS-IP-Address		4	ipaddr
+ATTRIBUTE	NAS-Port-Id		5	integer
+ATTRIBUTE	Service-Type		6	integer
+ATTRIBUTE	Framed-Protocol		7	integer
+ATTRIBUTE	Framed-IP-Address	8	ipaddr
+ATTRIBUTE	Framed-IP-Netmask	9	ipaddr
+ATTRIBUTE	Framed-Routing		10	integer
+ATTRIBUTE	Filter-Id		11	string
+ATTRIBUTE	Framed-MTU		12	integer
+ATTRIBUTE	Framed-Compression	13	integer
+ATTRIBUTE	Login-IP-Host		14	ipaddr
+ATTRIBUTE	Login-Service		15	integer
+ATTRIBUTE	Login-TCP-Port		16	integer
+ATTRIBUTE	Reply-Message		18	string
+ATTRIBUTE	Callback-Number		19	string
+ATTRIBUTE	Callback-Id		20	string
+ATTRIBUTE	Framed-Route		22	string
+ATTRIBUTE	Framed-IPX-Network	23	ipaddr
+ATTRIBUTE	State			24	string
+ATTRIBUTE	Class			25	string
+ATTRIBUTE	Vendor-Specific		26	string
+ATTRIBUTE	Session-Timeout		27	integer
+ATTRIBUTE	Idle-Timeout		28	integer
+ATTRIBUTE	Termination-Action	29	integer
+ATTRIBUTE	Called-Station-Id	30	string
+ATTRIBUTE	Calling-Station-Id	31	string
+ATTRIBUTE	NAS-Identifier		32	string
+ATTRIBUTE	Proxy-State		33	string
+ATTRIBUTE	Login-LAT-Service	34	string
+ATTRIBUTE	Login-LAT-Node		35	string
+ATTRIBUTE	Login-LAT-Group		36	string
+ATTRIBUTE	Framed-AppleTalk-Link	37	integer
+ATTRIBUTE	Framed-AppleTalk-Network	38	integer
+ATTRIBUTE	Framed-AppleTalk-Zone	39	string
+ATTRIBUTE	Acct-Status-Type	40	integer
+ATTRIBUTE	Acct-Delay-Time		41	integer
+ATTRIBUTE	Acct-Input-Octets	42	integer
+ATTRIBUTE	Acct-Output-Octets	43	integer
+ATTRIBUTE	Acct-Session-Id		44	string
+ATTRIBUTE	Acct-Authentic		45	integer
+ATTRIBUTE	Acct-Session-Time	46	integer
+ATTRIBUTE	Acct-Input-Packets	47	integer
+ATTRIBUTE	Acct-Output-Packets	48	integer
+ATTRIBUTE	Acct-Terminate-Cause	49	integer
+ATTRIBUTE	Acct-Multi-Session-Id	50	string
+ATTRIBUTE	Acct-Link-Count		51	integer
+ATTRIBUTE	Event-Timestamp		55	integer
+ATTRIBUTE	CHAP-Challenge		60	string
+ATTRIBUTE	NAS-Port-Type		61	integer
+ATTRIBUTE	Port-Limit		62	integer
+ATTRIBUTE	Login-LAT-Port		63	integer
+ATTRIBUTE	Connect-Info		77	string
+
+#
+#	RFC3162 IPv6 attributes
+#
+ATTRIBUTE	NAS-IPv6-Address	95	string
+ATTRIBUTE	Framed-Interface-Id	96	string
+ATTRIBUTE	Framed-IPv6-Prefix	97	string
+ATTRIBUTE	Login-IPv6-Host		98	string
+ATTRIBUTE	Framed-IPv6-Route	99	string
+ATTRIBUTE	Framed-IPv6-Pool	100	string
+
+#
+#	Experimental Non Protocol Attributes used by Cistron-Radiusd
+#
+ATTRIBUTE	Huntgroup-Name		221	string
+ATTRIBUTE	User-Category		1029	string
+ATTRIBUTE	Group-Name		1030	string
+ATTRIBUTE	Simultaneous-Use	1034	integer
+ATTRIBUTE	Strip-User-Name		1035	integer
+ATTRIBUTE	Fall-Through		1036	integer
+ATTRIBUTE	Add-Port-To-IP-Address	1037	integer
+ATTRIBUTE	Exec-Program		1038	string
+ATTRIBUTE	Exec-Program-Wait	1039	string
+ATTRIBUTE	Hint			1040	string
+
+#
+#	Non-Protocol Attributes
+#	These attributes are used internally by the server
+#
+ATTRIBUTE	Expiration		  21	date
+ATTRIBUTE	Auth-Type		1000	integer
+ATTRIBUTE	Menu			1001	string
+ATTRIBUTE	Termination-Menu	1002	string
+ATTRIBUTE	Prefix			1003	string
+ATTRIBUTE	Suffix			1004	string
+ATTRIBUTE	Group			1005	string
+ATTRIBUTE	Crypt-Password		1006	string
+ATTRIBUTE	Connect-Rate		1007	integer
+
+#
+#	Integer Translations
+#
+
+#	User Types
+
+VALUE		Service-Type		Login-User		1
+VALUE		Service-Type		Framed-User		2
+VALUE		Service-Type		Callback-Login-User	3
+VALUE		Service-Type		Callback-Framed-User	4
+VALUE		Service-Type		Outbound-User		5
+VALUE		Service-Type		Administrative-User	6
+VALUE		Service-Type		NAS-Prompt-User		7
+
+#	Framed Protocols
+
+VALUE		Framed-Protocol		PPP			1
+VALUE		Framed-Protocol		SLIP			2
+
+#	Framed Routing Values
+
+VALUE		Framed-Routing		None			0
+VALUE		Framed-Routing		Broadcast		1
+VALUE		Framed-Routing		Listen			2
+VALUE		Framed-Routing		Broadcast-Listen	3
+
+#	Framed Compression Types
+
+VALUE		Framed-Compression	None			0
+VALUE		Framed-Compression	Van-Jacobson-TCP-IP	1
+
+#	Login Services
+
+VALUE		Login-Service		Telnet			0
+VALUE		Login-Service		Rlogin			1
+VALUE		Login-Service		TCP-Clear		2
+VALUE		Login-Service		PortMaster		3
+
+#	Status Types
+
+VALUE		Acct-Status-Type	Start			1
+VALUE		Acct-Status-Type	Stop			2
+VALUE		Acct-Status-Type	Alive			3
+VALUE		Acct-Status-Type	Accounting-On		7
+VALUE		Acct-Status-Type	Accounting-Off		8
+
+#	Authentication Types
+
+VALUE		Acct-Authentic		RADIUS			1
+VALUE		Acct-Authentic		Local			2
+VALUE		Acct-Authentic		PowerLink128		100
+
+#	Termination Options
+
+VALUE		Termination-Action	Default			0
+VALUE		Termination-Action	RADIUS-Request		1
+
+#	NAS Port Types, available in 3.3.1 and later
+
+VALUE		NAS-Port-Type		Async			0
+VALUE		NAS-Port-Type		Sync			1
+VALUE		NAS-Port-Type		ISDN			2
+VALUE		NAS-Port-Type		ISDN-V120		3
+VALUE		NAS-Port-Type		ISDN-V110		4
+
+#	Acct Terminate Causes, available in 3.3.2 and later
+
+VALUE           Acct-Terminate-Cause    User-Request            1
+VALUE           Acct-Terminate-Cause    Lost-Carrier            2
+VALUE           Acct-Terminate-Cause    Lost-Service            3
+VALUE           Acct-Terminate-Cause    Idle-Timeout            4
+VALUE           Acct-Terminate-Cause    Session-Timeout         5
+VALUE           Acct-Terminate-Cause    Admin-Reset             6
+VALUE           Acct-Terminate-Cause    Admin-Reboot            7
+VALUE           Acct-Terminate-Cause    Port-Error              8
+VALUE           Acct-Terminate-Cause    NAS-Error               9
+VALUE           Acct-Terminate-Cause    NAS-Request             10
+VALUE           Acct-Terminate-Cause    NAS-Reboot              11
+VALUE           Acct-Terminate-Cause    Port-Unneeded           12
+VALUE           Acct-Terminate-Cause    Port-Preempted          13
+VALUE           Acct-Terminate-Cause    Port-Suspended          14
+VALUE           Acct-Terminate-Cause    Service-Unavailable     15
+VALUE           Acct-Terminate-Cause    Callback                16
+VALUE           Acct-Terminate-Cause    User-Error              17
+VALUE           Acct-Terminate-Cause    Host-Request            18
+
+#
+#	Non-Protocol Integer Translations
+#
+
+VALUE		Auth-Type		Local			0
+VALUE		Auth-Type		System			1
+VALUE		Auth-Type		SecurID			2
+VALUE		Auth-Type		Crypt-Local		3
+VALUE		Auth-Type		Reject			4
+
+#
+#	Cistron extensions
+#
+VALUE		Auth-Type		Pam			253
+VALUE		Auth-Type		Accept			254
+
+#
+#	Experimental Non-Protocol Integer Translations for Cistron-Radiusd
+#
+VALUE		Fall-Through		No			0
+VALUE		Fall-Through		Yes			1
+VALUE		Add-Port-To-IP-Address	No			0
+VALUE		Add-Port-To-IP-Address	Yes			1
+
+#
+#	Configuration Values
+#	uncomment these two lines to turn account expiration on
+#
+
+#VALUE		Server-Config		Password-Expiration	30
+#VALUE		Server-Config		Password-Warning	5
+
+

src/mod/xml_int/mod_xml_radius/dictionaries/dictionary.cisco

+# -*- text -*-
+#
+# dictionary.cisco
+#
+#		Accounting VSAs originally by
+#		"Marcelo M. Sosa Lugones" <marcelo@sosa.com.ar>
+#
+# Version:	$Id$
+#
+#  For documentation on Cisco RADIUS attributes, see:
+#
+# http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/vapp_dev/vsaig3.htm
+#
+#  For general documentation on Cisco RADIUS configuration, see:
+#
+# http://www.cisco.com/en/US/partner/tech/tk583/tk547/tsd_technology_support_sub-protocol_home.html
+#
+
+VENDOR		Cisco				9
+
+#
+#	Standard attribute
+#
+#BEGIN-VENDOR	Cisco
+
+ATTRIBUTE	Cisco-AVPair				1	string vendor=Cisco
+ATTRIBUTE	Cisco-NAS-Port				2	string vendor=Cisco
+
+#
+#  T.37 Store-and-Forward attributes.
+#
+ATTRIBUTE	Cisco-Fax-Account-Id-Origin		3	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Msg-Id			4	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Pages				5	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Coverpage-Flag		6	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Modem-Time			7	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Connect-Speed			8	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Recipient-Count		9	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Process-Abort-Flag		10	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Dsn-Address			11	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Dsn-Flag			12	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Mdn-Address			13	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Mdn-Flag			14	string vendor=Cisco
+ATTRIBUTE	Cisco-Fax-Auth-Status			15	string vendor=Cisco
+ATTRIBUTE	Cisco-Email-Server-Address		16	string vendor=Cisco
+ATTRIBUTE	Cisco-Email-Server-Ack-Flag		17	string vendor=Cisco
+ATTRIBUTE	Cisco-Gateway-Id			18	string vendor=Cisco
+ATTRIBUTE	Cisco-Call-Type				19	string vendor=Cisco
+ATTRIBUTE	Cisco-Port-Used				20	string vendor=Cisco
+ATTRIBUTE	Cisco-Abort-Cause			21	string vendor=Cisco
+
+#
+#  Voice over IP attributes.
+#
+ATTRIBUTE	h323-remote-address			23	string vendor=Cisco
+ATTRIBUTE	h323-conf-id				24	string vendor=Cisco
+ATTRIBUTE	h323-setup-time				25	string vendor=Cisco
+ATTRIBUTE	h323-call-origin			26	string vendor=Cisco
+ATTRIBUTE	h323-call-type				27	string vendor=Cisco
+ATTRIBUTE	h323-connect-time			28	string vendor=Cisco
+ATTRIBUTE	h323-disconnect-time			29	string vendor=Cisco
+ATTRIBUTE	h323-disconnect-cause			30	string vendor=Cisco
+ATTRIBUTE	h323-voice-quality			31	string vendor=Cisco
+ATTRIBUTE	h323-gw-id				33	string vendor=Cisco
+ATTRIBUTE	h323-incoming-conf-id			35	string vendor=Cisco
+
+ATTRIBUTE	Cisco-Policy-Up				37	string vendor=Cisco
+ATTRIBUTE	Cisco-Policy-Down			38	string vendor=Cisco
+
+ATTRIBUTE	sip-conf-id				100	string vendor=Cisco
+ATTRIBUTE	h323-credit-amount			101	string vendor=Cisco
+ATTRIBUTE	h323-credit-time			102	string vendor=Cisco
+ATTRIBUTE	h323-return-code			103	string vendor=Cisco
+ATTRIBUTE	h323-prompt-id				104	string vendor=Cisco
+ATTRIBUTE	h323-time-and-day			105	string vendor=Cisco
+ATTRIBUTE	h323-redirect-number			106	string vendor=Cisco
+ATTRIBUTE	h323-preferred-lang			107	string vendor=Cisco
+ATTRIBUTE	h323-redirect-ip-address		108	string vendor=Cisco
+ATTRIBUTE	h323-billing-model			109	string vendor=Cisco
+ATTRIBUTE	h323-currency				110	string vendor=Cisco
+ATTRIBUTE	subscriber				111	string vendor=Cisco
+ATTRIBUTE	gw-rxd-cdn				112	string vendor=Cisco
+ATTRIBUTE	gw-final-xlated-cdn			113	string vendor=Cisco
+ATTRIBUTE	remote-media-address			114	string vendor=Cisco
+ATTRIBUTE	release-source				115	string vendor=Cisco
+ATTRIBUTE	gw-rxd-cgn				116	string vendor=Cisco
+ATTRIBUTE	gw-final-xlated-cgn			117	string vendor=Cisco
+
+# SIP Attributes
+ATTRIBUTE	call-id					141	string vendor=Cisco
+ATTRIBUTE	session-protocol			142	string vendor=Cisco
+ATTRIBUTE	method					143	string vendor=Cisco
+ATTRIBUTE	prev-hop-via				144	string vendor=Cisco
+ATTRIBUTE	prev-hop-ip				145	string vendor=Cisco
+ATTRIBUTE	incoming-req-uri			146	string vendor=Cisco
+ATTRIBUTE	outgoing-req-uri			147	string vendor=Cisco
+ATTRIBUTE	next-hop-ip				148	string vendor=Cisco
+ATTRIBUTE	next-hop-dn				149	string vendor=Cisco
+ATTRIBUTE	sip-hdr					150	string vendor=Cisco
+
+#
+#	Extra attributes sent by the Cisco, if you configure
+#	"radius-server vsa accounting" (requires IOS11.2+).
+#
+ATTRIBUTE	Cisco-Multilink-ID			187	integer vendor=Cisco
+ATTRIBUTE	Cisco-Num-In-Multilink			188	integer vendor=Cisco
+ATTRIBUTE	Cisco-Pre-Input-Octets			190	integer vendor=Cisco
+ATTRIBUTE	Cisco-Pre-Output-Octets			191	integer vendor=Cisco
+ATTRIBUTE	Cisco-Pre-Input-Packets			192	integer vendor=Cisco
+ATTRIBUTE	Cisco-Pre-Output-Packets		193	integer vendor=Cisco
+ATTRIBUTE	Cisco-Maximum-Time			194	integer vendor=Cisco
+ATTRIBUTE	Cisco-Disconnect-Cause			195	integer vendor=Cisco
+ATTRIBUTE	Cisco-Data-Rate				197	integer vendor=Cisco
+ATTRIBUTE	Cisco-PreSession-Time			198	integer vendor=Cisco
+ATTRIBUTE	Cisco-PW-Lifetime			208	integer vendor=Cisco
+ATTRIBUTE	Cisco-IP-Direct				209	integer vendor=Cisco
+ATTRIBUTE	Cisco-PPP-VJ-Slot-Comp			210	integer vendor=Cisco
+ATTRIBUTE	Cisco-PPP-Async-Map			212	integer vendor=Cisco
+ATTRIBUTE	Cisco-IP-Pool-Definition		217	string vendor=Cisco
+ATTRIBUTE	Cisco-Assign-IP-Pool			218	integer vendor=Cisco
+ATTRIBUTE	Cisco-Route-IP				228	integer vendor=Cisco
+ATTRIBUTE	Cisco-Link-Compression			233	integer vendor=Cisco
+ATTRIBUTE	Cisco-Target-Util			234	integer vendor=Cisco
+ATTRIBUTE	Cisco-Maximum-Channels			235	integer vendor=Cisco
+ATTRIBUTE	Cisco-Data-Filter			242	integer vendor=Cisco
+ATTRIBUTE	Cisco-Call-Filter			243	integer vendor=Cisco
+ATTRIBUTE	Cisco-Idle-Limit			244	integer vendor=Cisco
+ATTRIBUTE	Cisco-Subscriber-Password		249	string vendor=Cisco
+ATTRIBUTE	Cisco-Account-Info			250	string vendor=Cisco
+ATTRIBUTE	Cisco-Service-Info			251	string vendor=Cisco
+ATTRIBUTE	Cisco-Command-Code			252	string vendor=Cisco
+ATTRIBUTE	Cisco-Control-Info			253	string vendor=Cisco
+ATTRIBUTE	Cisco-Xmit-Rate				255	integer vendor=Cisco
+
+VALUE	Cisco-Disconnect-Cause		Unknown			2
+VALUE	Cisco-Disconnect-Cause		CLID-Authentication-Failure 4
+VALUE	Cisco-Disconnect-Cause		No-Carrier		10
+VALUE	Cisco-Disconnect-Cause		Lost-Carrier		11
+VALUE	Cisco-Disconnect-Cause		No-Detected-Result-Codes 12
+VALUE	Cisco-Disconnect-Cause		User-Ends-Session	20
+VALUE	Cisco-Disconnect-Cause		Idle-Timeout		21
+VALUE	Cisco-Disconnect-Cause		Exit-Telnet-Session	22
+VALUE	Cisco-Disconnect-Cause		No-Remote-IP-Addr	23
+VALUE	Cisco-Disconnect-Cause		Exit-Raw-TCP		24
+VALUE	Cisco-Disconnect-Cause		Password-Fail		25
+VALUE	Cisco-Disconnect-Cause		Raw-TCP-Disabled	26
+VALUE	Cisco-Disconnect-Cause		Control-C-Detected	27
+VALUE	Cisco-Disconnect-Cause		EXEC-Program-Destroyed	28
+VALUE	Cisco-Disconnect-Cause		Timeout-PPP-LCP		40
+VALUE	Cisco-Disconnect-Cause		Failed-PPP-LCP-Negotiation 41
+VALUE	Cisco-Disconnect-Cause		Failed-PPP-PAP-Auth-Fail 42
+VALUE	Cisco-Disconnect-Cause		Failed-PPP-CHAP-Auth	43
+VALUE	Cisco-Disconnect-Cause		Failed-PPP-Remote-Auth	44
+VALUE	Cisco-Disconnect-Cause		PPP-Remote-Terminate	45
+VALUE	Cisco-Disconnect-Cause		PPP-Closed-Event	46
+VALUE	Cisco-Disconnect-Cause		Session-Timeout		100
+VALUE	Cisco-Disconnect-Cause		Session-Failed-Security	101
+VALUE	Cisco-Disconnect-Cause		Session-End-Callback	102
+VALUE	Cisco-Disconnect-Cause		Invalid-Protocol	120
+
+#END-VENDOR	Cisco

src/mod/xml_int/mod_xml_radius/dictionaries/dictionary.rfc5090

+# -*- text -*-
+#
+#	Attributes and values defined in RFC 5090.
+#	http://www.ietf.org/rfc/rfc5090.txt
+#
+#	$Id$
+#
+ATTRIBUTE	Digest-Response				103	string
+ATTRIBUTE	Digest-Realm				104	string
+ATTRIBUTE	Digest-Nonce				105	string
+ATTRIBUTE	Digest-Response-Auth			106	string
+ATTRIBUTE	Digest-Nextnonce			107	string
+ATTRIBUTE	Digest-Method				108	string
+ATTRIBUTE	Digest-URI				109	string
+ATTRIBUTE	Digest-Qop				110	string
+ATTRIBUTE	Digest-Algorithm			111	string
+ATTRIBUTE	Digest-Entity-Body-Hash			112	string
+ATTRIBUTE	Digest-CNonce				113	string
+ATTRIBUTE	Digest-Nonce-Count			114	string
+ATTRIBUTE	Digest-Username				115	string
+ATTRIBUTE	Digest-Opaque				116	string
+ATTRIBUTE	Digest-Auth-Param			117	string
+ATTRIBUTE	Digest-AKA-Auts				118	string
+ATTRIBUTE	Digest-Domain				119	string
+ATTRIBUTE	Digest-Stale				120	string
+ATTRIBUTE	Digest-HA1				121	string
+ATTRIBUTE	SIP-AOR					122	string

src/mod/xml_int/mod_xml_radius/xml_radius.conf.xml

+<configuration name="xml_radius.conf" description="Radius XML Gateway">
+  <!--
+     auth_invite is only called when a directory lookup is done on an inbound invite. Usually that means a digest auth challenge on the invite.
+     
+     auth_reg is only called on the actual registration. 
+     
+     auth_app is used when an invite is in the dialplan. If your profile requires digest auth then this isn't needed.
+              but if your profile is doing only ip authentication this allows you to authenticate the call without the need for digest auth.
+	      
+     acct_start happens when the call goes into the state 'routing' which means it is starting the dialplan
+  -->
+  <auth_invite>
+    <connection name="testing">
+      <param name="authserver" value="127.0.0.1:1812:testing123"/>
+      <param name="radius_timeout" value="10"/>
+      <param name="radius_retries" value="2"/>
+      <param name="radius_deadtime" value="0"/>
+      <param name="dictionary" value="/usr/local/src/freeswitch/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary"/>
+      <param name="seqfile" value="/var/run/radius.seq"/>
+    </connection>
+    <fields>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="ip" format="src-gw-ip=%s"/>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" format="src-gw-name=%s"/>
+      <param vendor="Cisco" name="h323-conf-id" variable="Core-UUID" format="%s"/>
+      <param name="Called-Station-Id" variable="sip_to_user" format="%s"/>
+      <param name="Calling-Station-Id" variable="sip_from_user" format="%s"/>
+    </fields>
+  </auth_invite>
+  <auth_app>
+    <connection name="testing">
+      <param name="authserver" value="127.0.0.1:1812:testing123"/>
+      <param name="radius_timeout" value="10"/>
+      <param name="radius_retries" value="2"/>
+      <param name="radius_deadtime" value="0"/>
+      <param name="dictionary" value="/usr/local/src/freeswitch/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary"/>
+      <param name="seqfile" value="/var/run/radius.seq"/>
+    </connection>
+    <fields>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_network_ip" format="src-gw-ip=%s"/>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" format="src-gw-name=%s"/>
+      <param vendor="Cisco" name="h323-conf-id" variable="Core-UUID" format="%s"/>
+      <param name="Called-Station-Id" variable="sip_to_user" format="%s"/>
+      <param name="Calling-Station-Id" variable="sip_from_user" format="%s"/>
+    </fields>
+  </auth_app>
+  <auth_reg>
+    <connection name="testing">
+      <param name="authserver" value="127.0.0.1:1812:testing123"/>
+      <param name="radius_timeout" value="10"/>
+      <param name="radius_retries" value="2"/>
+      <param name="radius_deadtime" value="0"/>
+      <param name="dictionary" value="/usr/share/freeradius/dictionary.cisco"/>
+      <param name="seqfile" value="/var/run/radius.seq"/>
+    </connection>
+    <fields>      
+    </fields>
+  </auth_reg>
+  <acct_start>
+    <connection name="testing">
+      <param name="acctserver" value="127.0.0.1:1813:testing123"/>
+      <param name="radius_timeout" value="10"/>
+      <param name="radius_retries" value="0"/>
+      <param name="radius_deadtime" value="0"/>
+      <param name="dictionary" value="/usr/local/src/freeswitch/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary"/>
+      <param name="seqfile" value="/var/run/radius.seq"/>
+    </connection>
+    <fields>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_host" format="src-gw-ip=%s"/>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" format="src-gw-name=%s"/>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_to_host" format="dst-gw-ip=%s"/>
+      <param vendor="Cisco" name="h323-conf-id" variable="uuid" format="%s"/>
+      <param vendor="Cisco" name="h323-setup-time"/>
+      <param vendor="Cisco" name="h323-connect-time"/>
+      <param name="Called-Station-Id" variable="sip_to_user" format="%s"/>
+      <param name="Calling-Station-Id" variable="sip_from_user" format="%s"/>
+    </fields>
+  </acct_start>
+  <acct_end>
+    <connection name="testing">
+      <param name="acctserver" value="127.0.0.1:1813:testing123"/>
+      <param name="radius_timeout" value="10"/>
+      <param name="radius_retries" value="0"/>
+      <param name="radius_deadtime" value="0"/>
+      <param name="dictionary" value="/usr/local/src/freeswitch/src/mod/xml_int/mod_xml_radius/dictionaries/dictionary"/>
+      <param name="seqfile" value="/var/run/radius.seq"/>
+    </connection>
+    <fields>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_host" format="src-gw-ip=%s"/>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" format="src-gw-name=%s"/>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_to_host" format="dst-gw-ip=%s"/>
+      <param vendor="Cisco" name="h323-conf-id" variable="uuid" format="%s"/>
+      <param vendor="Cisco" name="h323-setup-time"/>
+      <param vendor="Cisco" name="h323-connect-time"/>
+      <param vendor="Cisco" name="h323-disconnect-time"/>
+      <param vendor="Cisco" name="h323-disconnect-cause"/>
+      <param name="Called-Station-Id" variable="sip_to_user" format="%s"/>
+      <param name="Acct-Session-Time" variable="billsec" format="%s"/>
+      <param name="Calling-Station-Id" variable="sip_from_user" format="%s"/>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_from_user" format="src-number-out=%s"/>
+      <param vendor="Cisco" name="Cisco-AVPair" variable="sip_to_user" format="dst-number-out=%s"/>
+    </fields>
+  </acct_end>
+</configuration>