-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thursday 11 Dec 2003 12:53 am, Rafael J. Risco G.V. wrote:
> Hello
> My Parent GK (see diagram below) is using "RadAuth=required;RRQ,ARQ" as
> authentication method but we can`t complete calls beetwen this GK and its
> Child_GK, from ep1 to ep3 we got a ARJ with requestDenied cause, and from
> ep3 to ep1 we got securityDenial message... Anyone can help me please?
Ok - that looks like the ARQ from the receiving party is being rejected by
the radius server ...
The process the GK goes through (approximately and assuming
call is permited) is ....
1.Receives ARQ from caller
2.Generate radius access request
3.(If in routed mode) Pass ARQ on to callee, ACF to caller
4.Generate radius Start acct
5.Callee presses 'Accept', GK receives ARQ from callee
6.Generate radius 'Call-Check' access request
8.Send ACF to callee, call proceeds
7.On close generate radius stop acct
The second access request has the
Service-Type = Call-Check
cisco-h323-call-origin = "h323-call-origin=answer"
attributes whereas the first request has
Service-Type = Login-User
cisco-h323-call-origin = "h323-call-origin=originate"
You need to make sure that you are approving the second
one as well as the first and according to the logs you presented
you are rejecting that.
I handle this by tracking the 'cisco-h323-conf-id' attribute
and if I accept the call placing it into a db with 'call pending'
when the first ARQ is accepted and then check the db for a
matching pending conf-id when the second ARQ is received.
Hope that helps a bit .....
Mark
- --
Mark Vevers. mark@ifl.net / mark@vevers.net
Principal Internet Engineer, Internet for Learning,
Research Machines Plc. (AS5503)
- --
GPG Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xB08F3CA3
Fingerprint: 85BA 30C4 9EC8 1792 4C8C C31E 58B5 3D1C B08F 3CA3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE/2HbEWLU9HLCPPKMRApjZAJ4hz/wIn50gTtk8gCzIa5m6NLwuGgCfYjrf
J/0tr+UMxNK8MlIJ5hQnKpM=
=jnL7
-----END PGP SIGNATURE-----
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
List: Openh323gk-users@lists.sourceforge.net
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id…49
Homepage: http://www.gnugk.org/
