Hello Ivonko,
Friday, May 7, 2004, 8:22:23 PM, you wrote:
IK> I use 2.0.7 version with RadAuth and RadAcct. When softphone
IK> is try to register with GK there is no problem.
IK> But when I tried to set up a Vocaltec VGW8 with GK I've got
IK> the following errors. Also in Radius logs there is no records for
IK> that attempt.
IK> It looks like GK block that attempt before reach Radius. Can anyone help me ? Any ideas ?
IK> Thank you in advance
IK> 2004/05/07 20:19:24.954 1 RasSrv.cxx(947) GK RRQ Received
IK> 2004/05/07 20:19:24.957 3 radauth.cxx(584)
IK> RADAUTH RRQ Auth failed - no m_tokens
IK> 2004/05/07 20:19:24.957 2 gkauth.cxx(295) GkAuth RadAuth check failed
IK> 2004/05/07 20:19:24.960 2 RasSrv.cxx(1202)
IK> RRJ|192.168.15.20|l4@xxxxxxxxxxxxx:email_ID=l4@xxxxxxxxxxxxx:h323_ID|gateway|securityDenial;
IK> 2004/05/07 20:19:24.961 3 RasSrv.cxx(2164) GK Send to 192.168.15.20:1719
IK> registrationReject {
IK> requestSeqNum = 9547
IK> protocolIdentifier = 0.0.8.2250.0.2
IK> rejectReason = securityDenial <<null>>
IK> gatekeeperIdentifier = 8 characters {
IK> 004c 0045 0056 0045 004c 0034 0047 004b Gatekeper
You must use RadAliasAuth instead RadAuth.
There is no H.235 password in ACF:
Gnugk manual:
RadAuth
Provides authentication based on H.235 username/password security scheme.
Authenticates RRQs and/or ARQs through remote RADIUS servers. It passes
to RADIUS servers usernames and passwords extracted from CAT (Cisco Access Tokens)
tokens carried inside RRQ and ARQ packets. Therefore if your endpoints do
not support CATs or you do not need authentication scheme based on individually
assigned usernames/password - this module will not work for you (but you may
check RadAliasAuth module).
--
Best regards,
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,.
Mike Tkachuk, ph:380-3433-47067
YES ISP, fx:380-3433-47067
Valova 17, mike|a|yes.net.ua
Kolomyia, www.yes.net.ua
Ukraine 78200 FWD: 66518
07.05.2004
ICQ# 57698805
MSN: mike_tkachuk|a|hotmail.com
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,.
-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver
higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________________
List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/
