Hi All! I'm trying to setup gnugk with radius support, starting at radauth, and using freeradius+mysql. when i try to authenticate a client (openphone), Gnugk send auth request to radius, radius response with Access-accept, but gk denies with "security denial" reason. The gk log (using -ttttt) show that: radproto.cxx(1304) Radius PDU (id:90) received from 127.0.0.1:1812 has invalid response authenticator. I dont know if this is because iґm not sending the wright attributes from radiusd to gnugk, or for what reason. In doc/radauth.txt i saw attributes that gk send to radius in auth request packet (on RRQ, and ARQ) but i cant understand about radius server response attribs. Someone can help me? Thanks in advance and sorry for my "tarzan like" english :-) gus ----- Original Message ----- From: "Artur Yakupov" <artur@dartel.ru> To: "Oleg Ustinov" <openh323gk-users@lists.sourceforge.net> Sent: Thursday, November 27, 2003 5:46 PM Subject: Re[2]: Q931 Setup authentication > Hi! > > If you use SQL auth - you can simply make your own query in > freeradius, where you can use Framed-IP-Address. > > OU> Hi, > OU> thanks a lot. But > OU> 1) how to do this? > OU> 2) I use freeradius > > OU> Oleg > OU> -----Original Message----- > OU> From: openh323gk-users-admin@lists.sourceforge.net > OU> [mailto:openh323gk-users-admin@lists.sourceforge.net]On Behalf Of Jeff Chen > OU> Sent: Thursday, November 27, 2003 5:57 PM > OU> To: openh323gk-users@lists.sourceforge.net > OU> Subject: Re: Q931 Setup authentication > > > OU> There are two way to fix this . > > OU> 1. changing on gnugk , make gnugk to send IP address as user name to > OU> Radius server. > > OU> 2. Changing on radius server, make radius server to use the GW's IP > OU> address as user name ( instead of the normal user name). Winradius( > OU> www.winradius.net) can be customized to do this. > > OU> Oleg Ustinov <Oleg.Ustinov@nectis.com> wrote: > OU> Hi, > OU> I configure accept "Unregistered Calls", but authentication for they is > OU> only > OU> by Q931 Setup information possible > OU> In this way, if CLID is not known, authentication made by IP address of > OU> originating gateway - It accepted as username or CLID by GNUGK. > OU> We get many calls with different CLID and write it to Radius is not > OU> acceptable. But we need to authenticate that calls. > OU> How can I fix this with IP address only? > > OU> regards, > > > > > OU> ------------------------------------------------------- > OU> This SF.net email is sponsored by: SF.net Giveback Program. > OU> Does SourceForge.net help you be more productive? Does it > OU> help you create better code? SHARE THE LOVE, and help us help > OU> YOU! Click Here: http://sourceforge.net/donate/ > OU> _______________________________________________ > OU> List: Openh323gk-users@lists.sourceforge.net > OU> Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 > OU> Homepage: http://www.gnugk.org/ > > > > > OU> ------------------------------------------------------------------------ ---- > OU> -- > OU> Post your free ad now! Yahoo! Canada Personals > > > > ------------ > С уважением, > Артур Якупов > сис. адм. > ООО "Дартел" > 7(8342)328166 > > mailto:artur@dartel.ru > > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > List: Openh323gk-users@lists.sourceforge.net > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 > Homepage: http://www.gnugk.org/ > ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ List: Openh323gk-users@lists.sourceforge.net Archive: http://sourceforge.net/mailarchive/forum.php?forum_id…49 Homepage: http://www.gnugk.org/
