Re: MysqlAliasauth.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello, I am certainly not a linux freak but this is what I did to get the
stuff finally compiled under RH9 with MySQL support.

1. Check the forum before you start on EVERYTHING that has the keywords RH9.
You will find a lot of info.

2. After tis look into some particular RH9 compilation issues and carefully
study them!

I used the following rpms for MySQL .
MySQL-client-3.23.56-1.i386.rpm
MySQL-shared-3.23.56-1.i386.rpm
MySQL-3.23.56-1.i386.rpm
MySQL-devel-3.23.56-1.i386.rpm

I used gcc version 3.2.2

Go to the www.mysql.com site and down the rehat 9 rpm for mysql++ version
1.7.9
Install and do exactly what they say in the SPECS file that you will get
after you install the rpm.

Here you need to carefully check WHAT gcc compiler you are using but better
use gcc 3.2.2 and follow this instruction to build up and patch the source
file correctly.

Patch, Make and Install the sqlplus library according the SPECs file.

After you are ready patch the mysql++ file and comment  the line  that reads
#include "undef_shot" in the library where the you make and install the
sqlplus directory. ( see the forum on this)!)

Than download gnugk version 2.05.

Make clean , NO_LDAP=1 make all, make install.

When I gave the MYSQLDIR path in the make instruction the compilation always
went wrong because it could not find the mysql dir. I studied the Makefile
and you can see that there is some difference here so use make all and be
sure that your mysqldir is in the default location.

The problems I had with the path settings of finding mysql++ did solve
somebody else for me on my box. I am a linux newbie and therefore so not
know all the things to set paths etc... I received tremendous help from a
guy called Hemant.

So finally this took me 2 weeks , took away my sleep and after I finally had
my MySQL thing working I was not able to get my endpoints registered because
of something that IS in the manual but NOT so clearly described.........But
I got again a tip on this forum and finally solved it.

Make your dbase and your tables. Give them whatever name and check carefully
the mysql.ini file in /openh323gk/etc and use the field names accordingly
you set in your ini file. I used varchar(30) for all fields. The problem
that I got stuck on was that I simply put the IP address of an endpoint in a
table in stead of using a rule as described in the RasSrv::RRQAuth section
of the manual.... So lets say your EP is at 200.100.50.25 than use
sigip:200.100.50.25:1720 ( if your signalling port is 1720) or use the
sigaddr rule. Check again the rrq section in the manual for this.

Ok lets say you are using this ini file than make the dbase and the table
according the description hereunder:

MySQLAliasAuth
Host = localhost
Database = Billing ( your dbase name)
User=cwhuang ( the name of the MYSQL user that has access rights to your
tables)
Table=customer ( Your table name)
IDField=IPN ( The field name =IPN in your table and put here your h323 name
of your EP)
IPField= Address ( The field name =Address and put here the Ip address of
your EP with the rule as described in  in ras auth section of manual)
Extracriterion = Kind > 1 ( make a ffield name Kind and put a value >1 in
here like 2 , 3 etc.....!!! smile)

Now start the gnugk with gnugk -c (ini.file) -o (log file name) -ttttt &.
Study this log file carefully if you still are having problems. It will give
you almost all the information you need. It shows if gnugk has connected ok
to your mysql dbase, what rules you are using, what ep's ports you are
using, the ipaddress the used hashing mechanism for h235 everything is there
including if a authorization got passed or got stuck and with what
reason.....

The password authorization is working on h235 and your endpoint needs to
support this... Try first with openphone or ohphone and use in the
gatekeeper field the password.

Finally everything is working with the following rule, MySQLPassword
optional and MySQLAliasAuth is required...Ofcourse you can set this rule how
you like it.

Than I printed out gkauth.cxx and studied this for about 2 days.After you
manage to get the MYSQL thing to work you can make whatever query you like
by changing this particular file before you compile it again.

than the Manual: The manual i am referring to is the one that comes with the
gnugk....or look it up at www.gnugk.org.

There is no description in the manual of setting up tables for MySQL.
The section called  MySQLAuth in the ini file when referred to h235 password
authorization is earlier in the manual  described as MySQLPassword
authorizatio
There is no explanation in the manual that you should use the rules as
described in RasSrv::RRQAuth when you use the MySQLAliasAuth for matching
the Ip address.


Hope this helps.....Tjapko.





----- Original Message ----- 
From: "chaye wala" <chayewala@yahoo.com>
To: <openh323gk-users@lists.sourceforge.net>
Sent: Friday, September 26, 2003 6:34 PM
Subject: Re:  MysqlAliasauth.


> Congratulations on coming this far.
>
> I am trying to build GNUGK with MySQL support on RH9.0
> too and am running into compilation problems. Will
> greatly help if you could post the steps you took to
> make it compile and link with MySQL. This will help
> everyone.
>
> Second request:
> Which manual are you refering to in this mail? I want
> to look at some reference to create tables to get this
> data from MySQL. But I do not find anything with the
> source. Would you be kind enough to post your SQL
> scripts to help create tables etc. in MySQL.
>
> Thanks,
> Chayewala
>
> --- Tjapko Smits - iTS Consultancy
> <itsc99@hotmail.com> wrote:
> > Dear list,
> >
> >
> >
> > I switched gnugk from w32 platform to RH9 to be able
> > to make use of the
> > integrated Mysql support. Compiled openh323 1.12.2
> > with pwlib 1.5.2 and
> > gnugk 2.05. After some struggle with mydql++ the
> > compilation of gnugk has
> > worked out fine. I received an enormous amount of
> > help from Hemant to
> > achieve all this. Now I run into this problem that
> > might be an
> > interpretation error on my site but I can't get it
> > fixed and there fore
> > would like to ask the forum for any ideas. ( I just
> > spent 4 days debugging
> > it but still No GO!)
> >
> >
> >
> > If I use MySQPasswordAuth the cryptotokens are taken
> > out of the RAS messages
> > from my EP and the authorization tool can find the
> > information to be matched
> > to the succesfully connected Mysql dbase table info.
> > Therefore it uses
> > h235ras.cxx from openh323 and gkauth.cxx from
> > openh323gk. This mechanism
> > works fine for endpoints that allow h235 signalling
> > and do have the correct
> > info in the mysql table.
> >
> >
> >
> > If I understand the manual correct than the next
> > rule that can be used in
> > the same section is MySQLAliasAuth and this module
> > is using normal RAS
> > authentication for the EP's.
> >
> >
> >
> > For testing purposes I am using an endpoint that
> > makes use of openphone and
> > in the ini section of gnugk I have
> >
> >
> >
> > [RasSrv::RRQ]
> >
> >  rule = allow
> >
> >
> >
> >  [Gatekeeper::Auth]
> >
> > MySQLPasswordAuth=required;RRQ
> >
> > MySQLAliasAuth=required;RRQ
> >
> > default=allow
> >
> >
> >
> > [MySQLAuth]
> >
> > ;
> >
> > ; SELECT Password FROM IPNData WHERE IPN = %id AND
> > Kind > 1
> >
> > ;
> >
> > Host=localhost
> >
> > Database=testbase
> >
> > User=root
> >
> > Password=testpassword
> >
> > Table=IPNData
> >
> > IDField=IPN
> >
> > PasswordField=Password
> >
> > ExtraCriterion=Kind > 1
> >
> >
> >
> > [MySQLAliasAuth]
> >
> > ;
> >
> > ;SELECT IPAddr FROM IPNData WHERE IPN = %id AND Kind
> > > 1
> >
> > ;
> >
> > Host=localhost
> >
> > Database=testbase
> >
> > User=root
> >
> > Password=testpassword
> >
> > Table=IPNData
> >
> > IDField=IPN
> >
> > IPField=IPAddr
> >
> > ExtraCriterion=Kind > 1
> >
> > CacheTimeout=300
> >
> >
> >
> > My database layout is like the mentiond names above
> > with varchar(30) for all
> > fields.
> >
> >
> >
> > So now it comes. The error log from gnugk shows me a
> > successfull pass for
> > the EP while registering using the MySQLPassword
> > section but than get into a
> > "Unknown RRQAuth condition: on this part of the
> > gkauth.cxx code. (check line
> > 1003 in this module) just before entering the
> > MySQLAliasAuth section .
> >
> >
> >
> >       else if (rName=="sigip") {
> >
> >             if (rule.GetSize() < 2)
> >
> >                   return false;
> >
> >             PIPSocket::Address ip;
> >
> >             PIPSocket::GetHostAddress(rule[1], ip);
> >
> >             WORD port = (rule.GetSize() < 3) ?
> > GK_DEF_ENDPOINT_SIGNAL_PORT :
> > rule[2].AsInteger();
> >
> >             return (SignalAdr ==
> > SocketToH225TransportAddr(ip, port));
> >
> >       } else {
> >
> >             PTRACE(4, "Unknown RRQAuth condition: "
> > << Condition);
> >
> >             return ON_ERROR;
> >
> >
> >
> >
> >
> > It looks like the fetched IP address for the EP to
> > be matched is in some RRQ
> > authorization although the rule is set to allow or
> > the IP address can not be
> > fetched from the EP therefore this section bails out
> > with error message and
> > causing the MySQLAliasAuth section NOT be able to do
> > its query while there
> > is no IP address to be matched. ( I am sure that the
> > Ip address in the
> > tables matches with the one from the registering EP)
> >
> >
> >
> > Also when I completely bypass the MySQLPassword
> > section it return with
> > exactly the same error
> >
> >
> >
> > I have tried several different EP's all with the
> > same result ( Security
> > Denial while registering at the gnugk in the same
> > part of the gkauth.cxx
> > code).
> >
> >
> >
> >
> >
> > My questions are:
> >
> >
> >
> >
> === message truncated ===
>
>
> __________________________________
> Do you Yahoo!?
> The New Yahoo! Shopping - with improved product search
> http://shopping.yahoo.com
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> List: Openh323gk-users@lists.sourceforge.net
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> Homepage: http://www.gnugk.org/
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.521 / Virus Database: 319 - Release Date: 23/09/2003


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
List: Openh323gk-users@lists.sourceforge.net
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux