RE: RE: [Openh323gk-users] ATA-186 + password based auth

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello Michal
You're right,
after configure NTPIP it is works.

Thausand thanks!
Oleg

-----Original Message-----
From: openh323gk-users-admin@lists.sourceforge.net
[mailto:openh323gk-users-admin@lists.sourceforge.net]On Behalf Of
Zygmuntowicz Michal
Sent: Thursday, August 28, 2003 1:23 PM
To: openh323gk-users@lists.sourceforge.net
Subject: Re: RE: [Openh323gk-users] ATA-186 + password based auth


>I\'ve tested ATA186 and RadAuth mode firt now, but something is wrong:
>Thu Aug 28 12:33:21 2003 : Auth: Login incorrect (rlm_chap: Wrong user
>password): [ata186/<CHAP-Password>] (from client NECTIS-GK port 0)
>Have any Ideas?

I am sure you did not set a correct NTP server (NTPIP) for ATA-186.
Without correct time from NTP server ATA-186 sends CATs with timestamp = 1
and these get rejected by radius.
I hit the same problem and after I had configured NTPIP to refer to RUNNING
NTP server, everything started to work fine.

timestamp is a very important thing in radius authentication - it prevents
repeat attacks using sniffed tokens.
 
---
Michal Zygmuntowicz


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
List: Openh323gk-users@lists.sourceforge.net
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
List: Openh323gk-users@lists.sourceforge.net
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux