I issued the debug trace level 5. But I am not sure what I am looking for. Also how do you send trace output to a file. I have been trying to get OpenGK to communicate with a radius server for the purpose of accounting and billing. Below is my config file. Any suggestion of why it does not work. [Gatekeeper::Main] Fourtytwo=42 Name=XXXXX-XXXXXXX [GkStatus::Auth] rule=allow [RoutedMode] GKRouted=1 H245Routed=0 CallSignalPort=1721 CallSignalHandlerNumber=1 RemoveH245AddressOnTunneling=0 AcceptNeighborsCalls=1 AcceptUnregisteredCalls=0 SupportNATedEndpoints=1 DropCallsByReleaseComplete=1 #RemoveCallOnDRQ=1 #SendReleaseCompleteOnDRQ=0 #ScreenDisplayIE= #ScreenCallingPartyNumberIE= #ForwardOnFacility=1 #ShowForwarderNumber=1 #Q931PortRange=20000-20999 #H245PortRange=30000-30999 #ConnectTimeout=180000 [RasSrv::GWPrefixes] #ConnectTimeout=180000 [RasSrv::GWPrefixes] XXXXX=777,555 [RasSrv::PermanentEndpoints] Xxx.XXX.XXX.XXX=GWROCXXXXX [Gatekeeper::Acct] RadAcct=required;start,stop [RadAcct] Servers=XX.XX.XXX.XXX DefaultAuthPort=1812 DefaultAcctPort=1813 SharedSecret=mysecret IdCacheTimeout=9000 SocketDeleteTimeout=60000 AppendCiscoAttributes=1 IncludeEndpointIP=1 RequestRetransmissions=4 RadiusPortRange=10000-11000 -----Original Message----- From: openh323gk-users-admin@lists.sourceforge.net [mailto:openh323gk-users-admin@lists.sourceforge.net]On Behalf Of openh323gk-users-request@lists.sourceforge.net Sent: Wednesday, October 29, 2003 2:31 AM To: openh323gk-users@lists.sourceforge.net Subject: Openh323gk-users digest, Vol 1 #741 - 12 msgs Send Openh323gk-users mailing list submissions to openh323gk-users@lists.sourceforge.net To subscribe or unsubscribe via the World Wide Web, visit https://lists.sourceforge.net/lists/listinfo/openh323gk-users or, via email, send a message with subject or body 'help' to openh323gk-users-request@lists.sourceforge.net You can reach the person managing the list at openh323gk-users-admin@lists.sourceforge.net When replying, please edit your Subject line so it is more specific than "Re: Contents of Openh323gk-users digest..." Today's Topics: 1. Cannt route call, (John Foster) 2. Re: Routing (Andrey S Pankov) 3. RadAuth RCF doesn't contain tokens (Aivis Olsteins) 4. Re: CallerID (Zygmuntowicz Michal) 5. Radius Accounting (MIchael Steven McClenney) 6. Re: gnugk + mysql (Zygmuntowicz Michal) 7. Re: Gateway disconnect immediately (Zygmuntowicz Michal) 8. Re: RadAuth RCF doesn't contain tokens (Zygmuntowicz Michal) 9. Re: Radius Accounting (Zygmuntowicz Michal) 10. radius key encryption (Macram Zaarour) 11. Re: radius key encryption (Zygmuntowicz Michal) 12. Re: Virtual Queues (Nir Simionovich) --__--__-- Message: 1 Date: Tue, 28 Oct 2003 22:04:04 -0800 (PST) From: John Foster <jfoste2003@yahoo.com> To: openh323gk-users@lists.sourceforge.net Subject: Cannt route call, Reply-To: openh323gk-users@lists.sourceforge.net --0-947481569-1067407444=:5810 Content-Type: text/plain; charset=us-ascii Hi list, I am facing problem that i cannt route call, gk gives failed mesage, here is my conf and log mesg, any idea abt mistake? [Endpoint] Gatekeeper=212.112.58.188 Type=Gateway H323ID=SJDGW #E164=099 Password=SJD-GK-TEST Prefix=099 TimeToLive=900 RRQRetryInterval=10 ARQTimeout=1 [RasSrv::GWPrefixes] SJDGW=099 [RasSrv::PermanentEndpoints] 216.206.188.200=SJDGW;099 [Endpoint::RewriteE164] 0991=1 Log from GK ACF|202.133.64.66:1720|9574_endp|30867|09912342334:dialedDigits|12321:dialed Digits=2114295:dialedDigits|false; I m trying to dial any USA destination form my soft phone (openphone) to reach USA client dials 099_______ GK strips off 099 and sengs e.164 number to softswitch 216.206.188.200 (ipcb.net) Thanks for expected help in advance JF --------------------------------- Do you Yahoo!? Exclusive Video Premiere - Britney Spears --0-947481569-1067407444=:5810 Content-Type: text/html; charset=us-ascii <DIV>Hi list, </DIV> <DIV> </DIV> <DIV>I am facing problem that i cannt route call, gk gives failed mesage, here is my conf and log mesg, any idea abt mistake?</DIV> <DIV> </DIV> <DIV>[Endpoint]<BR>Gatekeeper=212.112.58.188<BR>Type=Gateway<BR>H323ID=SJDGW <BR>#E164=099<BR>Password=SJD-GK-TEST<BR>Prefix=099<BR>TimeToLive=900<BR>RRQ RetryInterval=10<BR>ARQTimeout=1</DIV> <DIV><BR>[RasSrv::GWPrefixes]<BR>SJDGW=099</DIV> <DIV>[RasSrv::PermanentEndpoints]<BR>216.206.188.200=SJDGW;099</DIV> <DIV>[Endpoint::RewriteE164]<BR>0991=1</DIV> <DIV> </DIV> <DIV>Log from GK</DIV> <DIV> </DIV> <DIV>ACF|202.133.64.66:1720|9574_endp|30867|09912342334:dialedDigits|12321:d ialedDigits=2114295:dialedDigits|false;<BR></DIV> <DIV> </DIV> <DIV>I m trying to dial any USA destination form my soft phone (openphone) to reach USA client dials 099_______ GK strips off 099 and sengs e.164 number to softswitch 216.206.188.200 (ipcb.net)</DIV> <DIV> </DIV> <DIV>Thanks for expected help in advance</DIV> <DIV> </DIV> <DIV>JF</DIV><p><hr SIZE=1> Do you Yahoo!?<br> Exclusive Video Premiere - <a href="http://launch.yahoo.com/video/?1093432&fs=1&redirectURL=http://launch. yahoo.com/promos/britneyspears/">Britney Spears</a> --0-947481569-1067407444=:5810-- --__--__-- Message: 2 From: Andrey S Pankov <casper@kbuapa.kharkov.ua> To: openh323gk-users@lists.sourceforge.net Subject: Re: Routing Date: Wed, 29 Oct 2003 10:39:46 +0200 Reply-To: openh323gk-users@lists.sourceforge.net --Boundary-00=_Sz3n/GroS/qHe/P Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Please see the attached document (by Chih-Wei Huang). It is not up-to-date, but I'm sure you'll be able to find there some answers. -- Best regards, Andrey S Pankov. > Somebody can explain how Routin policy works in GnuGK 2.2 Beta 2?... --Boundary-00=_Sz3n/GroS/qHe/P Content-Type: text/plain; charset="iso-8859-1"; name="2.2-user.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="2.2-user.txt" Hi all, Here is the changes/features of GnuGK 2.2beta1. Sorry for the late documents. Most parts of the codes are rewritten to improve efficiency, maintainability and code reusability. It includes: * object factory * new thread model * unified sockets handling mechanism * RAS type traits * multi-threaded RAS server * thread-safed gkauth Most of the changes are in the underlying architecture that don't affect the user level. I will write documents to describe more about them later. Two major changes that affect and are useful to you * configurable routing policies The new routing architecture of GnuGK 2.2 is flexible and extensible that allows you to rearrange routing policies for different situations at runtime. A routing policy is a rule to determine the destination for a given routing request. If a policy can't determine the fate of the request, it passed to the next policy. There are two kinds of policies, direct and indirect (or forwarded). A direct policy determine the destination directly, while an indirect policy rewrites the request and forwards it to the next policy. Currently five routing policies are implemented * explicit - the destination is explicitly specified in the routing request * internal - the classical rule, search the destination in RegistrationTable * parent - route a call to the parent gatekeeper by ARQ * neighbor - route a call to neighbors by exchanging LRQs * dns - the destination is resolved from DNS, provided it is resolvable A routing request is issued when the gatekeeper has to make a routing decision. There are four possible situations, namely, RAS ARQ and LRQ, Q.931 Setup and Facility (with reason callForwarded). [RoutingPolicy] h323_ID=dns,internal 002=neighbor,internal Default=internal,neighbor,parent It means, for aliases of type h323_ID, use dns policy first, then follows the internal policy; for aliases begin with 002, use neighbor policy and then the internal policy; otherwise, use internal, neighbor, parent policies sequentially. Moreover, you can specify policies for different routing requests, for example, [RoutingPolicy::OnLRQ] 09=neighbor ... If you don't specified any RoutingPolicy section, the default policies are explicit,internal,parent,neighbor, just like 2.0. The new routing architecture solves many old problems that can't(hardly) be implemented in 2.0. For example, * route a call from a neighbor to the parent * route a call from the parent to a neighbor * forward a call to neighbor/parent and more... To provide a new routing policy, just include "Routing.h", derive from the abstract class Policy, and override the four virtual functions OnRequest(). Then associate it with an identifier (a C-style string) by SimpleCreator so it can be created by Factory<Policy>. * new neighboring system Now you can define profile of a neighbor GK like the following. If multiple LCFs are received from different neighbors, the one with most matched prefix and highest priority will be selected. [RasSrv::Neighbors] CitronProxy=10.0.1.1;09 # old style TestGK=GnuGK # new style: id=type of neighbor ;CiscoGK=CiscoGK [Neighbor::TestGK] # profile for TestGK ; IP:port or FQDN of this NB Host=10.0.1.4 ; gatekeeperIdentifier of this NB GatekeeperIdentifier=gkid ; Prefixes to send to the NB, format: prefix:priority,prefix:priority,... SendPrefixes=09,080:2 ; accept these prefixes from this NB AcceptPrefixes=09,08,07 Password= ; whether to resolve the domain name every time Dynamic=1 ; the hopCount set in LRQs sent to the NB ForwardHopCount=2 ; if the NB sends a forwarded LRQ, accept or not AcceptForwardedLRQ=1 ; whether to forward response for this NB ; if yes, the GK waits reply (LCF/LRJ) from forwarded NBs and send result ; to the requesting NB (the NB the original LRQ comes from) ForwardResponse=1 ; whether to forward LRQ for the NB (never, always, depend) ForwardLRQ=never Some minor changes: * MySQL support is rewritten by MySQL C API directly so you don't need mysql++ any more. (thanks to Hu Yuxin) The section MySQLAuth is renamed to MySQLPasswordAuth for consistency. The name of key field and queried field(s) are renamed to the same for every section for simplicity. For example, [MySQLPasswordAuth] Host=10.0.1.10 Database=billing User=bruce Password=testtest Table=Account ; old name: IDField KeyField=IPN ; old name: PasswordField DataField=Password ExtraCriterion=Kind < 2 * SimplePasswordAuth (and all its derivatives) now caches result returned by GetPassword method, no matter the request is authenticated or not. (in 2.0 only an authenticated password is cached) * The option CallUnregisteredEndpoints is obsolete. Use explicit routing policy rule instead. TODO: * Port virtual queue feature in 2.0 by new routing architecture. * Radius support * Accounting/call duration limit * Grouping endpoints * More routing policies ... -- ~ Chih-Wei Huang (cwhuang@linux.org.tw) 'v' CLDP Project : http://www.linux.org.tw/CLDP/ (Coordinator) // \\ CLE Project : http://cle.linux.org.tw/CLE/ (Developer) /( )\ I18N Project : http://i18n.linux.org.tw/ (Translator) ^`~'^ HomePage : http://www.cwhuang.idv.tw/ --Boundary-00=_Sz3n/GroS/qHe/P-- --__--__-- Message: 3 From: "Aivis Olsteins" <aivis@datatechlabs.com> To: <openh323gk-users@lists.sourceforge.net> Date: Wed, 29 Oct 2003 10:49:46 +0200 Subject: RadAuth RCF doesn't contain tokens Reply-To: openh323gk-users@lists.sourceforge.net Hello, The following issue appeared when testing RadAuth on 2.0.7 One of endpoint vendors claims that according to H.235, the RCF message from gatekeeper should return tokens field otherwise this RAS message is considered unsecure and Registration Process unsuccessful. This leads to situation when gnugk thinks that endpoint is registered but Endpoint is not. Is it possible to have tokens included in RCF message and what should be done to get them there? I believe ACF may have the same problem. Thanks, Aivis --__--__-- Message: 4 From: "Zygmuntowicz Michal" <m.zygmuntowicz@onet.pl> To: <openh323gk-users@lists.sourceforge.net> Subject: Re: CallerID Date: Wed, 29 Oct 2003 10:01:18 +0100 Reply-To: openh323gk-users@lists.sourceforge.net It should be present as Calling-Station-Id. What is your configuration that does not work (registered/unregistered endpoint,sample ARQ/Setup message from gk trace log level 5,...)? ----- Original Message ----- From: "Artur Yakupov" <artur@dartel.ru> Sent: Tuesday, October 28, 2003 11:19 PM > I can't see CallerID in Stop Record to my Radius after call has > disconnected. It is possible to do it? > I need it really. --__--__-- Message: 5 From: "MIchael Steven McClenney" <msm@warrendevelopmentcorp.com> To: <openh323gk-users@lists.sourceforge.net> Date: Wed, 29 Oct 2003 01:08:42 -0800 Subject: Radius Accounting Reply-To: openh323gk-users@lists.sourceforge.net I have been trying to get OpenGK to communicate with a radius server for the purpose of accounting and billing. Below is my config file. Any suggestion of why it does not work. [Gatekeeper::Main] Fourtytwo=42 Name=XXXXX-XXXXXXX [GkStatus::Auth] rule=allow [RoutedMode] GKRouted=1 H245Routed=0 CallSignalPort=1721 CallSignalHandlerNumber=1 RemoveH245AddressOnTunneling=0 AcceptNeighborsCalls=1 AcceptUnregisteredCalls=0 SupportNATedEndpoints=1 DropCallsByReleaseComplete=1 #RemoveCallOnDRQ=1 #SendReleaseCompleteOnDRQ=0 #ScreenDisplayIE= #ScreenCallingPartyNumberIE= #ForwardOnFacility=1 #ShowForwarderNumber=1 #Q931PortRange=20000-20999 #H245PortRange=30000-30999 #ConnectTimeout=180000 [RasSrv::GWPrefixes] #ConnectTimeout=180000 [RasSrv::GWPrefixes] XXXXX=777,555 [RasSrv::PermanentEndpoints] Xxx.XXX.XXX.XXX=GWROCXXXXX [Gatekeeper::Acct] RadAcct=required;start,stop [RadAcct] Servers=XX.XX.XXX.XXX DefaultAuthPort=1812 DefaultAcctPort=1813 SharedSecret=mysecret IdCacheTimeout=9000 SocketDeleteTimeout=60000 AppendCiscoAttributes=1 IncludeEndpointIP=1 RequestRetransmissions=4 RadiusPortRange=10000-11000 --__--__-- Message: 6 From: "Zygmuntowicz Michal" <m.zygmuntowicz@onet.pl> To: <openh323gk-users@lists.sourceforge.net> Subject: Re: gnugk + mysql Date: Wed, 29 Oct 2003 10:20:36 +0100 Reply-To: openh323gk-users@lists.sourceforge.net Which gk version are you using (2.0 or 2.2)? Make sure your endpoint is sending H.235 username/password (full RRQ message details - trace level 5 would help). ----- Original Message ----- From: "md esa kamsan" <mesak77@yahoo.com> Sent: Wednesday, October 29, 2003 2:36 AM > I have a problem with the registration using mysql > auth. --__--__-- Message: 7 From: "Zygmuntowicz Michal" <m.zygmuntowicz@onet.pl> To: <openh323gk-users@lists.sourceforge.net> Subject: Re: Gateway disconnect immediately Date: Wed, 29 Oct 2003 10:21:30 +0100 Reply-To: openh323gk-users@lists.sourceforge.net GK trace log level 5 for the scenario you are describing would be helpful. ----- Original Message ----- From: "Alex Yung" <alex@f-technology.com> Sent: Wednesday, October 29, 2003 3:00 AM > I want to use openphone to dail to the telephone line, I use the > following structure. I have set the openphone and opehn323gk which > will change 00 to 10# and pass the call to the gateway; however when > the user dial "002345", the gateway will connect and disconnect > immediately. If the user tried again, the gateway will no response and > wait for the gatekeeper will wait until the normal drop. I would like to > know what's wrong with my setting and how can I solve it. Thank you > for all of your help. --__--__-- Message: 8 From: "Zygmuntowicz Michal" <m.zygmuntowicz@onet.pl> To: <openh323gk-users@lists.sourceforge.net> Subject: Re: RadAuth RCF doesn't contain tokens Date: Wed, 29 Oct 2003 10:29:40 +0100 Reply-To: openh323gk-users@lists.sourceforge.net There is some issue with tokens/cryptoTokens inside xCF messages - these are just copied from xRQ messages. If the endpoint checks the tokens carefully, it will find it wrong. I'll try to solve the issue. ----- Original Message ----- From: "Aivis Olsteins" <aivis@datatechlabs.com> Sent: Wednesday, October 29, 2003 9:49 AM > The following issue appeared when testing RadAuth on 2.0.7 > > One of endpoint vendors claims that according to H.235, the RCF message from > gatekeeper should return tokens field otherwise this RAS message is > considered unsecure and Registration Process unsuccessful. This leads to > situation when gnugk thinks that endpoint is registered but Endpoint is not. > > Is it possible to have tokens included in RCF message and what should be > done to get them there? I believe ACF may have the same problem. --__--__-- Message: 9 From: "Zygmuntowicz Michal" <m.zygmuntowicz@onet.pl> To: <openh323gk-users@lists.sourceforge.net> Subject: Re: Radius Accounting Date: Wed, 29 Oct 2003 10:45:33 +0100 Reply-To: openh323gk-users@lists.sourceforge.net Your config looks more-less fine. Maybe you should look at the gk log file (trace level 5) to find the problem. You can also send the log file fragment to the list. ----- Original Message ----- From: "MIchael Steven McClenney" <msm@warrendevelopmentcorp.com> Sent: Wednesday, October 29, 2003 10:08 AM > I have been trying to get OpenGK to communicate with a radius server for the > purpose of accounting and billing. Below is my config file. Any suggestion > of why it does not work. --__--__-- Message: 10 From: "Macram Zaarour" <macram@savanatech.com> To: <openh323gk-users@lists.sourceforge.net> Date: Thu, 30 Oct 2003 11:53:32 +0200 Subject: radius key encryption Reply-To: openh323gk-users@lists.sourceforge.net This is a multi-part message in MIME format. ------=_NextPart_000_0014_01C39EDC.70E140F0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, I plan to use gnugatekeeper with radius The gnu gatekeeper required in its configuration file that the client = key (to radius) be encrypted Can you please suggest an encryption tool? Thanks ------=_NextPart_000_0014_01C39EDC.70E140F0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2800.1264" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2><FONT face=3D"Times New Roman" = size=3D3>Hello,<BR><BR>I=20 plan to use gnugatekeeper with radius<BR>The gnu gatekeeper = required in=20 its configuration file that the client key<BR>(to radius) be=20 encrypted<BR><BR>Can you please suggest an encryption = tool?</FONT></FONT></DIV> <DIV><FONT face=3DArial size=3D2><FONT face=3D"Times New Roman"=20 size=3D3></FONT></FONT> </DIV> <DIV><FONT face=3DArial size=3D2><FONT face=3D"Times New Roman"=20 size=3D3>Thanks</FONT></DIV> <DIV><BR></DIV></FONT></BODY></HTML> ------=_NextPart_000_0014_01C39EDC.70E140F0-- --__--__-- Message: 11 From: "Zygmuntowicz Michal" <m.zygmuntowicz@onet.pl> To: <openh323gk-users@lists.sourceforge.net> Subject: Re: radius key encryption Date: Wed, 29 Oct 2003 11:20:49 +0100 Reply-To: openh323gk-users@lists.sourceforge.net The password is not encrypted - it is a plain text password. ----- Original Message ----- From: "Macram Zaarour" <macram@savanatech.com> Sent: Thursday, October 30, 2003 10:53 AM I plan to use gnugatekeeper with radius The gnu gatekeeper required in its configuration file that the client key (to radius) be encrypted Can you please suggest an encryption tool? --__--__-- Message: 12 Date: Wed, 29 Oct 2003 12:29:56 +0200 From: Nir Simionovich <nirs@m-wise.com> To: openh323gk-users@lists.sourceforge.net Subject: Re: Virtual Queues Reply-To: openh323gk-users@lists.sourceforge.net Hi All, Can anyone please explain how a call finds itself on the Virtual Queue ? That part isn't clear to me yet. Nir S Nir Simionovich wrote: > Hi Jan, > > So, I'm still waiting for an explenation how dows a call find itself > on the > VQ ? > > Nir S > > Jan Willamowius wrote: > >> For those listening in: >> ACD stands for "Automatic Call Distribution". It's a standard >> abreviation from the world of "plain old telephony". ;-) >> >> >> Nir Simionovich wrote: >> >> >>> According to what you said: " It looks if the first destination >>> field in an ACF >>> message from an ednpoint matches a queue name set by VirtualQueue=..." >>> >>> Well, how does the queue name get into the ACF message. Suppose that >>> >>> the ACF >>> comes from a remote endpoint, do I need to ask him to configure >>> something special >>> on his side? >>> >> >> >> That's correct: You publish a different address to call. >> >> Example: >> You want to setup a hotline and the calls will be handled by "frank", >> "alice" or "jeff" whoever is available or may be all of them at times of >> high demand. >> >> You tell you customers: Call "hotline" when you have a problem. >> You set up VirtualQueue=hotline in the gatekeeper config. >> In the ACD config you set up who will handle wich call (frank, alice and >> jeff). >> When your customers call "hotline" the ACD will check who is available >> and route the call to that alias. >> >> >> >> >>> Or, if I understand correctly, the content of that field is >>> controlled from the >>> origination side, and is unique per each endpoint, same as the >>> information that >>> appears in the CDR's under SrcInfo. Which means that I would need to >>> create virtual queues for each endpoint? Hmmm.... that doesn't make >>> much sense. >>> >> >> >> See above: The endpoints handling the calls stay the same, none becomes >> a virtual queue. >> >> Some people call a virtual queue a "service entry point": It's just a >> and entry point people will call to get a certain service. The ACD will >> find the endpoint providing the service. >> If that confuses more than it helps, stick to the example above. >> >> - Jan >> >> >> >> > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > List: Openh323gk-users@lists.sourceforge.net > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 > Homepage: http://www.gnugk.org/ > --__--__-- _______________________________________________ Openh323gk-users mailing list Openh323gk-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openh323gk-users End of Openh323gk-users Digest ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ List: Openh323gk-users@lists.sourceforge.net Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/
