Junaid Saeed Uppal
ca09317856
Two-step auth flow: 1. AuthGetPassword: Fetches password from attributes using *dry_run 2. AuthPAP: Performs PAP authentication with *radauth + *pap Will add CHAP and MS-CHAPv1 after PAP is confirmed working. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
120 lines
2.6 KiB
JSON
120 lines
2.6 KiB
JSON
{
|
|
// CGRateS Configuration file
|
|
//
|
|
|
|
"general": {
|
|
"log_level": 7,
|
|
},
|
|
|
|
|
|
"listen": {
|
|
"rpc_json": ":2012", // RPC JSON listening address
|
|
"rpc_gob": ":2013", // RPC GOB listening address
|
|
"http": ":2080", // HTTP listening address
|
|
},
|
|
|
|
"data_db": {
|
|
"db_type": "redis",
|
|
"db_port": 6379,
|
|
"db_name": "10",
|
|
},
|
|
|
|
"stor_db": { // database used to store offline tariff plans and CDRs
|
|
"db_password": "CGRateS.org", // password to use when connecting to stordb
|
|
},
|
|
"filters": {
|
|
"apiers_conns": ["*localhost"],
|
|
},
|
|
|
|
"rals": {
|
|
"enabled": true,
|
|
},
|
|
|
|
"schedulers": {
|
|
"enabled": true,
|
|
},
|
|
|
|
"cdrs": {
|
|
"enabled": true,
|
|
"rals_conns": ["*internal"],
|
|
},
|
|
|
|
"resources": {
|
|
"enabled": true,
|
|
},
|
|
|
|
"attributes": {
|
|
"enabled": true,
|
|
},
|
|
|
|
"routes": {
|
|
"enabled": true,
|
|
},
|
|
|
|
"chargers": {
|
|
"enabled": true,
|
|
},
|
|
|
|
"sessions": {
|
|
"enabled": true,
|
|
"attributes_conns": ["*localhost"],
|
|
"cdrs_conns": ["*localhost"],
|
|
"rals_conns": ["*localhost"],
|
|
"resources_conns": ["*localhost"],
|
|
"chargers_conns": ["*internal"],
|
|
"debit_interval": "10s",
|
|
},
|
|
"radius_agent": {
|
|
"enabled": true,
|
|
"sessions_conns": ["*localhost"],
|
|
"listeners":[
|
|
{
|
|
"network": "udp",
|
|
"auth_address": "0.0.0.0:1812",
|
|
"acct_address": "0.0.0.0:1813"
|
|
}
|
|
],
|
|
"client_secrets": {
|
|
"*default": "CGRateS.org"
|
|
},
|
|
"client_dictionaries": {
|
|
"*default": ["/usr/share/cgrates/radius/dict/"]
|
|
},
|
|
"request_processors": [
|
|
{
|
|
"id": "AuthGetPassword",
|
|
"filters": ["*string:~*vars.*radReqType:*radAuth"],
|
|
"flags": ["*dry_run", "*attributes", "*continue", "*log"],
|
|
"request_fields": [
|
|
{"tag": "Account", "path": "*cgreq.Account", "type": "*composed", "value": "~*req.User-Name", "mandatory": true}
|
|
],
|
|
"reply_fields": [
|
|
{"tag": "SessionTimeout", "path": "*rep.Session-Timeout", "type": "*constant", "value": "3600"},
|
|
{"tag": "AcctInterimInterval", "path": "*rep.Acct-Interim-Interval", "type": "*constant", "value": "60"}
|
|
]
|
|
},
|
|
{
|
|
"id": "AuthPAP",
|
|
"filters": ["*string:~*vars.*radReqType:*radAuth"],
|
|
"flags": ["*radauth", "*pap", "*log"],
|
|
"request_fields": [
|
|
{"tag": "UserPassword", "path": "*vars.UserPassword", "type": "*variable", "value": "~*cgrep.Attributes.Password"}
|
|
],
|
|
"reply_fields": [
|
|
{"tag": "ReplyOnError", "filters": ["*notempty:~*cgrep.Error:"], "path": "*rep.*radReplyCode", "type": "*constant", "value": "AccessReject"},
|
|
{"tag": "ReplyMessage", "filters": ["*notempty:~*cgrep.Error:"], "path": "*rep.Reply-Message", "type": "*variable", "value": "~*cgrep.Error"}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
|
|
|
|
|
|
"apiers": {
|
|
"enabled": true,
|
|
"scheduler_conns": ["*internal"],
|
|
},
|
|
|
|
}
|
|
|