Re: Strange bug with RadAuth

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Quite strange nobody yet noticed it. Aliases should not be
checked during ARQ authentication, only when processing RRQ.
This is how it works in 2.0.x and how it should work in 2.2.
I'll fix it. The alias ckeck is not recommended in ARQ step
for  another reason too. Many systems build CAT token
at the originating side, authenticate it, send it to the remote party
and the remote party does not build CAT but puts the token received.

----- Original Message ----- 
From: "kiel hedjam" <kiel@xxxxxxxxxx>
Sent: Saturday, May 22, 2004 6:52 AM


> Here is the problem.
> I use RadAuth to check ARQ and the authentication fails that way:
> 
> 2004/05/22 04:59:07.095 3            radauth.cxx(1121)  RADAUTH RadAuth
> auth failed: CAT m_generalID is not a valid alias
> 
> The scenario is quite simple: EP1 is calling EP2 using a GK.
> The first ARQ (EP1 to GK initiating call with EP2 ) is validated 
> normally since generalID and srcInfo.h323id match.
> 
> However, the second ARQ (EP2 with GK willing to answer EP1) is rejected
> because of the fact that generalID differs from srcInfo.h323id
> * generalID is EP2 (which is ok)
> * srcInfo.h323id is EP1 and destinationInfo is EP2
> 
> According to the h225.0 recommendation, when an ARQ is 
> sent to answer a call, srcInfo must indicate the originator 
> of the call and destinationInfo must refer to the called party.
> generalID is normally set to the id of EP2
> 
> This means that the ARQ received by the GK is well built.
> So, there is something that I must have misunderstood.
> 
> Why does RadAuth perform RadAuth::CheckTokens() on an ARQ sent
> to answer a call  since it will always fail ?
> Is there another way to perform RadAuth validation on ARQ without 
> getting such troubles ?
> 
> best regards,
> 
> -- 
> Kiel



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click

_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux