I don't remember what was the original post, but here...
[GkStatus::Auth]
rule=allow
[Gatekeeper::Auth]
RadAliasAuth=sufficient;RRQ,ARQ
[RadAliasAuth]
Servers=123.34.45.56:1812
# adr:port
#possible problem is that in radius
#you have the old port 1645 or something
#as port for access packets. Now 1812 is default.
SharedSecret=YOURSECRET
If you use freeradius in the config you should have:
port=1812
client 127.0.0.1 { <<-- Enter ip addres of your gk must be the
IP address of your gnugk!!
To set range - see docs
secret=YOURSECRET
shortname=home
nastype=other
}
The entry "client" is originaly located in clients.conf - you may place it there, or directly into radiusd.conf.
Then you should start freeradius: radiusd -X
means in debug mode,
gnugk: gnugk -c configfile.ini -ttt -o out.txt
-ttt -o out.txt means to do trace to file out.txt, alternatively you may try telnet localhost 7000 to see if there is at least someone is trying to connect your gk. If someone is, then you'll see that in telnet/trace output and then readius access packets are supposed to be sent, if at least something is sent, then you should see very informative messages in radiusd -X output. If nothing hapens then there are problems with configuartion somewhere...
Hope this helps a bit (sorry if I describe something you don't need - I don't remember what was the original message)
If radius msgs aren't sent, then It's probably, but very unlikely, that the endpoint is rejected before radius authorization
If you still have problems - try to post posibly more descriptive questions (including configs and or trace msgs if required) - someone will be able to help you.
>
> My apologies for not making myself clearer.
>
> I had set RadAliasAuth=sufficient;RRQ,ARQ,Setup and commented out the
> default=allow. I have also set the Servers variable and DefaultAuthPort. I
> have also checked that the radius server accepts connections from gnugk and
> that the shared secrets are the same.
>
> As I don't see so much as a sniff from gnugk towards the radius server
> (tcpdump) and there isn't anything that looks like an error on the console
> display I'm guessing that something else is skew-wiff in the config.
>
> many thanks for your reply,
>
> Brian.
>
> At 18:25 16/01/04, you wrote:
>
> >You should at least look inside RadAliasAuth before asking this question -
> >it qefaults to alow access for anybody
> >Modify this like this, should work:
> >
> >[Gatekeeper::Auth]
> >RadAliasAuth=sufficient;RRQ,ARQ
> >
> >Other than that, all radius configuration should be correct, or you'll
> >never see gk trying to *connect* radius.
> >
> > > --
> > > Brian A McMillan
> > > Colloquium Internet www.Colloquium.co.uk
> > > 101 Abercorn Street
> > > Paisley Telephone: (44) 141 849 0849
> > > PA3 4AT Facsimile: (44) 141 849 0414
> > >
> > >
> > >
> > >
> > > -------------------------------------------------------
> > > The SF.Net email is sponsored by EclipseCon 2004
> > > Premiere Conference on Open Tools Development and Integration
> > > See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> > > http://www.eclipsecon.org/osdn
> > > _______________________________________________
> > > List: Openh323gk-users@lists.sourceforge.net
> > > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> > > Homepage: http://www.gnugk.org/
> > >
> >
> >
> >-------------------------------------------------------
> >The SF.Net email is sponsored by EclipseCon 2004
> >Premiere Conference on Open Tools Development and Integration
> >See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> >http://www.eclipsecon.org/osdn
> >_______________________________________________
> >List: Openh323gk-users@lists.sourceforge.net
> >Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> >Homepage: http://www.gnugk.org/
>
> --
> Brian A McMillan
> Colloquium Internet www.Colloquium.co.uk
> 101 Abercorn Street
> Paisley Telephone: (44) 141 849 0849
> PA3 4AT Facsimile: (44) 141 849 0414
>
>
>
>
> -------------------------------------------------------
> The SF.Net email is sponsored by EclipseCon 2004
> Premiere Conference on Open Tools Development and Integration
> See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> http://www.eclipsecon.org/osdn
> _______________________________________________
> List: Openh323gk-users@lists.sourceforge.net
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> Homepage: http://www.gnugk.org/
>
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
List: Openh323gk-users@lists.sourceforge.net
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/
