Re: Simple Call Authentication/Authorization

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Try to check if endpoint identifiers match in the parent registration table
and the ARQ message.

----- Original Message ----- 
From: "Andrew Croch" <o_engenheiro71@xxxxxxxxxxx>
Sent: Monday, March 15, 2004 8:25 PM


> posting again...
> 
> Michal, that is the result of the rv command
> 
> AllRegistrations
> RCF|192.168.0.144:1721|childGK:h323_ID|gateway,gatekeeper|6736_endp
> Fri, 12 Mar 2004 13:05:57 -0500 (permanent) C(0/0/1) y.y.y.y <1>
> Prefixes: <none>
> 
> and when I reboot the child GK, I get the following in the parent
> UCF|y.y.y.y|6736_endp;
> RCF|192.168.0.144:1721|childGK:h323_ID|gateway,gatekeeper|6736_endp;
> 
> I tried to change the Section [Endpoint] adding the E164 and/or
> H323ID but the results where the same...
> 
> >>From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx>
> >>Reply-To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> >>To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>
> >>Subject: Re:  Simple Call Authentication/Authorization
> >>Date: Fri, 12 Mar 2004 20:56:44 +0100
> >>
> >>What does 'rv' command at the parent gk tell about the child gk?
> >>Maybe the child gk is not registered at all with the parent?
> >>
> >>----- Original Message -----
> >>From: "Andrew Croch" <o_engenheiro71@xxxxxxxxxxx>
> >>Sent: Friday, March 12, 2004 7:51 PM
> >>
> >>
> >> > Michal, the following is the trace that I get from the parent GK. It is 
> >>very
> >> > weird. I get from the parent GK a security denial
> >> > 
> >>ARJ|192.168.0.144:1721|yyyyyyyyyy:dialedDigits|60013:dialedDigits|false|securit
> >> > yDenial;
> >> >
> >> > In the parent GK I had the following config
> >> >
> >> > [Gatekeeper::Auth]
> >> > PrefixAuth=required;ARQ
> >> >
> >> > [PrefixAuth]
> >> > ALL=allow alias:60013
> >> >
> >> > TRACE FROM THE PARENT GK
> >> >
> >> > 2004/03/12 12:45:06.500 1             RasSrv.cxx(1321)  GK      ARQ 
> >>Received
> >> > 2004/03/12 12:45:06.516 2             RasSrv.cxx(1602)  ARJ|
> >> > |yyyyyyyyy:dialed
> >> > Digits|60013:dialedDigits|false|callerNotRegistered;
> >> >
> >> > 2004/03/12 12:45:06.531 3             RasSrv.cxx(2164)  GK      Send to
> >> > y.y.y.y:1719
> >> > admissionReject {
> >> >     requestSeqNum = 7
> >> >     rejectReason = callerNotRegistered <<null>>
> >> >   }
> >> > 2004/03/12 12:45:06.984 2             RasSrv.cxx(2224)  GK      Read 
> >>from
> >> > y.y.y.y:1719
> >> >
> >> >
> >> >
> >> > >From: "Zygmuntowicz Michal" <zvision@xxxxxxxxxx>
> >> > >Reply-To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> >> > >To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>
> >> > >Subject: Fw:  Simple Call 
> >>Authentication/Authorization
> >> > >Date: Fri, 12 Mar 2004 14:02:31 +0100
> >> > >
> >> > >Maybe you need to look at the parent gk log?
> >> > >
> >> > > > ----- Original Message -----
> >> > > > From: "Andrew Croch" <o_engenheiro71@xxxxxxxxxxx>
> >> > > > Sent: Thursday, March 11, 2004 12:25 AM
> >> > > >
> >> > > >
> >> > > > > posting again...
> >> > > > > >
> >> > > > > >Michal, thank you for your response. You're right, now it worked 
> >>fine
> >> > >for
> >> > > > > >almost all the scenarios that I have been testing. However, It
> >> > >doesn't work
> >> > > > > >in a scenario where I have a terminal registering with a Child 
> >>GK.
> >> > > > > >I have been using this setup without a problem before adding 
> >>this
> >> > >call
> >> > > > > >authentication feature. I mean, I have a terminal connected to a
> >> > >child gk
> >> > > > > >to go through NAT and it works beautifully.
> >> > > > > >When I added this alias authentication I can not make this setup
> >> > >work.
> >> > > > > >The terminal is able to register with the child GK but the 
> >>parent GK
> >> > > > > >rejects the call for securitydenial reason. The alias is comming
> >> > >correct
> >> > > > > >from the child to the parent, the ARQ that the parent gets from 
> >>the
> >> > >child
> >> > > > > >seems to be ok, with the correct alias, but I always get a 
> >>security
> >> > >denial.
> >> > > > > >It seems that I need to change something in the parent GK to 
> >>allow
> >> > >the
> >> > > > > >child to call. Do I need to change something in the parent GK
> >> > >configuration
> >> > > > > >to allow the child to call ?
> >> > > > > >
> >> > > > > >Thanks



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux