The best way to include some custom fields in reply RAS messages would be to modify GkAuthenticator API to take one more parameter - some kind of reply_ras, so we could manipulated replies inside Check functions. I think it is a good idea, so I am going to see how to implement this. The problem with RadAuth and Setup is that there were no requests to support CATs inside Setup messages, therefore it is not implemented. But if you can provide some example scenario where you need to authenticate CAT tokens inside Setup messages, I can add the implementation. Maybe some trace or something similar? ----- Original Message ----- From: "P.P." <block111@mail.ru> Sent: Wednesday, January 28, 2004 12:11 PM Strange - I wrote a reply on this message and it's not on the list... Ok, anyways, I have some other simple questions. In radius I can include something like User-ReplyMessage which is intended to be delivered to the user. What's the best way to include info into rcf/rrj, acf/arj based on the data received from radius packet? To be more speceific - I have written code that checks if there is my atribute in received radius packet, I also have code that includes generic data field (e.g. any string/numbers/mixed data) into xCF,xRJ reply to my endpoint, BUT there is no nice way to connect data from received radius packet to the reply which is to be sent to the endpoint - all the radius job is done inside a function and everithing destroyed by the way when I get to the final step before sending ACF/ARJ. I added extra parameters in ProcessARQ function, but I REALLY don't like this method. (For example problems when moving to the next release... what if in the next relaese this particular mechanism is redesigned - more headaches...). What could you recommend?? Another question... I asked about h235 pass and setup in some other post. Mr. Michal wrote something like "It is possible to send CAT in Setup, thus RadAuth does not support it." I didn't understand the meaning :)), sorry man. Sounds like "it's a usefull feature, and therefore, gnugk doesn't support it" :)) I checked m-w.com and now I really don't know if it's possible or if gnugk supports it... :(( > > What is wrong with your test results? > > Let's take a look - you have RadAliasAuth configured as a second > authenticator - it always sends User-Password, not Chap-Password. > If you have overloaded your system, there something has to fail. > 1500/(20*60) = 1,25 calls/sec. So in average, your system (gnugk+radius+db) > has to process single call event in less that 800ms. I would even say it > should do much shorter than that - maybe 200ms... > If you have radius timeout setup to 2sec for example, you block other calls. > Be aware that RAS is single-threaded, so it can process next > event (ARQ) only when the previous is handled. If you have > CallSignalHandlerNumber=1, signalling handling is also single-threaded so it > can > send accounting-start/update/stop events only when a previous request is > handled. So it's easy to block the system, unless you measure its > performance > and limit number of simultaneous calls properly. > You can also try gnugk 2.2 - it has multithreaded RAS, which should give you > much better results. > > Simultaneous use is easy to monitor by external script that interfaces with > the database and gnugk telnet interface - it can disconnect > calls when account balance drops below zero. Acct-Updates are required for > this purpose, so you have your balance continuously updated. > I doubt whether mysql is a right choice for a billing system... > > ----- Original Message ----- > From: "P. P." <block111@mail.ru> > Sent: Monday, January 26, 2004 7:05 AM > > > > > > > > Hello everybody, > > > > I've been trying to write some simple billing system for gnugk/radius and > then I found some strange problems. > > > > first problem I saw, is that strangely at some point gnugk wasn't sending > id/h235 pass to my radius - istead it decided to go easier way - it started > to send User-Name and User-Password as if I had fixedusername option in > config. > > > > My first test was with accounts prepaid - 1500 calls in ~20min gave me 0 > errors. gnugk was runing on linux-rh9 and both callgen323 on winxp. However > when I added some sort of slow connections/slow database emulation I got > tons of problems - barely 50 % of the calls were established. And at some > point all the calls were JUST rejected. When I looked inside radiusd -X I > found strange thing: In the middle of my test gnugk stopped sending > Chap_Pass and started to send User-Password same as User-Name. > > I had this config: > > Gk::Auth] > > RadAuth=optional;RRQ,ARQ > > RadAliasAuth=sufficient;RRQ,ARQ > > > > calling callgen323 was run with -u user -p pass (<- h235 password) > > > > > > > > Another issue - I faced a quite difficult problem in building a realiable > and efficient billing application that cound support prepaid with gnugk. > Most of what I did was really working, but it was kinda a way around > different obstacles and just became not reliable and not efficient at the > end (with my last test where my sql sometimes dropped connections and wasn't > replying instantly and considerable network jitter between endpoints and gk, > all my efforts prooved to be useless):)) > > That's why I want to ask about the way gnugk does radius comunications. > There are some people around wishing to build biling for prepaid who whould > probably also like to know this information. > > The question I have... > > > > If radius received 1st leg access request, then will it receive > accounting-start/stop for this user if radius replied access-accept? > Actually, acct-start is sent immidiately after access-accept is received by > gnugk? > > Will radius send acct/stop if it sent acct/start? (meaning there is no way > a call could be dropped/rejected without notifying radius) > > And a more general question... what should be the right way to control > simultaneous use?? Previous 2 questions are directly related to this one in > my solution - whether I leave holes in my billing and everything woks nice, > or in another way often accounts of users are locked without future > possiblity for access. That was the outcome from my test with callgen. Some > sort of stored procedures, trigers and transactions in db could simplify my > tasks, but still it doesn't become more secure and stable. > > Anybody has any ideas?? > > > > > > ps. Does static build work for 207 ?? Couldn't get it compiled properly - > some error in BRF or something like that (that what make says it was :)) - > without any error codes or unresolved dependencies. ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ List: Openh323gk-users@lists.sourceforge.net Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/
