Re[4]: Call gen tests

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Maybe I don't understand clear enough about cat & setup, but I had in mind the following situation: openphone calls gnugk's callsignalling address - just like a gateway, and from this point gnugk authenticates this call based on the username/cat suplied by openphone and routes the call as needed. So, that in this case there would be no necessity to maintain registration between gk and endpoint. But there is radAliasAuth..?? - I don't trust it (aliases travel as clear text etc.)

I did some tests with openphone - It brodcasted all it's aliases even if I told gnugk to modify caller Id/display number.

Another easy and important for me question :) 
Let's say an andPoint registered and called some number. In Acct-Start I had "User-Name" = "user0123". Then, during a call aliases may change, gnugk can change them as well... So, obviously, when I receive acct-stop, I need to pay attention to the "User-name", but it could already be different ...-> biling fails. Or such a situation is not posible? Cause I did experiments - when included terminal-aliases: in radius reply message endpoint got new aliases and later I would receive this new aliases in subsequent communication. So, the question is: If on AccessRequest (registration or addmission) in radius I got some user-Name = "just_a_user007", will I also get this "just_a_user007" in acct-start, and more importatly it would still be the same in acct-stop? or I need to track acct-session-id to match correctly the user who placed the call?

And completely newbie question... What's Call-Check  access-request usually is used for? :))

> The best way to include some custom fields in reply RAS messages would be to modify GkAuthenticator
> API to take one more parameter - some kind of reply_ras, so we could manipulated replies inside Check functions.

Thanks for the hint - I'll take a look tomorrow.
 I've been learinig perl - for writing billing app lately and I really think that something like a perl module for configuring/controlling gk trough perl scripts would be a great plus - the need bothering with different modules as ldap/mysql would dissapear, and there would be far less requests for rewriting gw prefixes - it's just wouldn't be a big problem... Though it wouldn't be a gatekeeper anymore I think :), depends how implemented. Maybe gnugk 3.0? Why am I saying this - simply with perl module in radius many tasks I was afraid of appeared to be !really! easy... I think No configuration can be as flexible as perl scripts 

Thanks.


> I think it is a good idea, so I am going to see how to implement this.
> 
> The problem with RadAuth and Setup is that there were no requests to support CATs inside Setup messages,
> therefore it is not implemented. But if you can provide some example scenario where you need to authenticate
> CAT tokens inside Setup messages, I can add the implementation. Maybe some trace or something similar?
> 
> ----- Original Message ----- 
> From: "P.P." <block111@mail.ru>
> Sent: Wednesday, January 28, 2004 12:11 PM
> 
> 
> Strange - I wrote a reply on this message and it's not on the list...
> 
> Ok, anyways, I have some other simple questions.
> 
> In radius I can include something like User-ReplyMessage which is intended to be delivered to the user. What's the best way to
> include info into rcf/rrj, acf/arj based on the data received from radius packet? To be more speceific - I have written code that
> checks if there is my atribute in received radius packet, I also have code that includes generic data field (e.g. any
> string/numbers/mixed data) into xCF,xRJ reply to my endpoint, BUT there is no nice way to connect data from received radius packet
> to the reply which is to be sent to the endpoint - all the radius job is done inside a function and everithing destroyed by the way
> when I get to the final step before sending ACF/ARJ. I added extra parameters in ProcessARQ function, but I REALLY don't like this
> method. (For example problems when moving to the next release... what if in the next relaese this particular mechanism is
> redesigned - more headaches...). What could you recommend??
> 
> 
> Another question... I asked about h235 pass and setup in some other post. Mr. Michal wrote something like "It is possible to send
> CAT in Setup, thus RadAuth does not support it."
> I didn't understand the meaning :)), sorry man. Sounds like "it's a usefull feature, and therefore, gnugk doesn't support it" :)) I
> checked m-w.com and now I really don't know if it's possible or if gnugk supports it... :((
> 
> 
> >
> > What is wrong with your test results?
> >
> > Let's take a look - you have RadAliasAuth configured as a second
> > authenticator - it always sends User-Password, not Chap-Password.
> > If you have overloaded your system, there something has to fail.
> > 1500/(20*60) = 1,25 calls/sec. So in average, your system (gnugk+radius+db)
> > has to process single call event in less that 800ms. I would even say it
> > should do much shorter than that - maybe 200ms...
> > If you have radius timeout setup to 2sec for example, you block other calls.
> > Be aware that RAS is single-threaded, so it can process next
> > event (ARQ) only when the previous is handled. If you have
> > CallSignalHandlerNumber=1, signalling handling is also single-threaded so it
> > can
> > send accounting-start/update/stop events only when a previous request is
> > handled. So it's easy to block the system, unless you measure its
> > performance
> > and limit number of simultaneous calls properly.
> > You can also try gnugk 2.2 - it has multithreaded RAS, which should give you
> > much better results.
> >
> > Simultaneous use is easy to monitor by external script that interfaces with
> > the database and gnugk telnet interface - it can disconnect
> > calls when account balance drops below zero. Acct-Updates are required for
> > this purpose, so you have your balance continuously updated.
> > I doubt whether mysql is a right choice for a billing system...
> >
> > ----- Original Message ----- 
> > From: "P. P." <block111@mail.ru>
> > Sent: Monday, January 26, 2004 7:05 AM
> >
> >
> > >
> > >
> > > Hello everybody,
> > >
> > > I've been trying to write some simple billing system for gnugk/radius and
> > then I found some strange problems.
> > >
> > > first problem I saw, is that strangely at some point gnugk wasn't sending
> > id/h235 pass to my radius - istead it decided to go easier way - it started
> > to send User-Name and User-Password as if I had fixedusername option in
> > config.
> > >
> > > My first test was with accounts prepaid - 1500 calls in ~20min gave me 0
> > errors. gnugk was runing on linux-rh9 and both callgen323 on winxp. However
> > when I added some sort of slow connections/slow database emulation I got
> > tons of problems - barely 50 % of the calls were established. And at some
> > point all the calls were JUST rejected. When I looked inside radiusd -X I
> > found strange thing: In the middle of my test gnugk stopped sending
> > Chap_Pass and started to send User-Password same as User-Name.
> > > I had this config:
> > > Gk::Auth]
> > > RadAuth=optional;RRQ,ARQ
> > > RadAliasAuth=sufficient;RRQ,ARQ
> > >
> > > calling callgen323 was run with -u user -p pass (<- h235 password)
> > >
> > >
> > >
> > > Another issue - I faced a quite difficult problem in building a realiable
> > and efficient billing application that cound support prepaid with gnugk.
> > Most of what I did was really working, but it was kinda a way around
> > different obstacles and just became not reliable and not efficient at the
> > end (with my last test where my sql sometimes dropped connections and wasn't
> > replying instantly and considerable network jitter between endpoints and gk,
> > all my efforts prooved to be useless):))
> > > That's why I want to ask about the way gnugk does radius comunications.
> > There are some people around wishing to build biling for prepaid who whould
> > probably also like to know this information.
> > > The question I have...
> > >
> > > If radius received 1st leg access request, then will it receive
> > accounting-start/stop for this user if radius replied access-accept?
> > Actually, acct-start is sent immidiately after access-accept is received by
> > gnugk?
> > > Will radius send acct/stop if it sent acct/start? (meaning there is no way
> > a call could be dropped/rejected without notifying radius)
> > > And a more general question... what should be the right way to control
> > simultaneous use?? Previous 2 questions are directly related to this one in
> > my solution - whether I leave holes in my billing and everything woks nice,
> > or in another way often accounts of users are locked without future
> > possiblity for access. That was the outcome from my test with callgen. Some
> > sort of stored procedures, trigers and transactions in db could simplify my
> > tasks, but still it doesn't become more secure and stable.
> > > Anybody has any ideas??
> > >
> > >
> > > ps. Does static build work for 207 ?? Couldn't get it compiled properly -
> > some error in BRF or something like that (that what make says it was :)) -
> > without any error codes or unresolved dependencies.
> 
> 
> 
> -------------------------------------------------------
> The SF.Net email is sponsored by EclipseCon 2004
> Premiere Conference on Open Tools Development and Integration
> See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> http://www.eclipsecon.org/osdn
> _______________________________________________
> List: Openh323gk-users@lists.sourceforge.net
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> Homepage: http://www.gnugk.org/
> 


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
List: Openh323gk-users@lists.sourceforge.net
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id┘49
Homepage: http://www.gnugk.org/


[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux