RE: Different User Names appeared in Access Request and Accounting Request sent to Radius Server

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

This point I've shown before
>From some GW types (eg. NEXTONE or Vocaltec GK) comes something strangest
that GNUGk  sent different calling-station-ID inside Access and Accounting
requests
Small example:
   Calling: 888101
   Called: 200
   Username: test

This is SETUP message
----------------------------------------------------------------------------
2004/06/17 16:57:14.657 3       ProxyChannel.cxx(680)   Q931s   Received:
Setup CRV=4096 from 192.168.1.3:3355
2004/06/17 16:57:14.666 4       ProxyChannel.cxx(633)   Q931    Received: {
  q931pdu = {
    protocolDiscriminator = 8
    callReference = 4096
    from = originator
    messageType = Setup
    IE: Bearer-Capability = {
      88 c0 a5                                           ...
    }
    IE: Display = {
      74 65 73 74                                        test
    }
    IE: Calling-Party-Number = {
      81 38 38 38 31 30 31                               .888101
    }
    IE: Called-Party-Number = {
      81 32 30 30                                        .200
    }
----------------------------------------------------------------------------

Access-request sent to RADIUS:
------------------------------
          [7]= {
            type = 31 (Calling-Station-Id)
            length = 8 octets
            value = 6 octets {
              38 38 38 31 30 31                                  888101
            }
          }
          [8]= {
            type = 30 (Called-Station-Id)
            length = 5 octets
            value = 3 octets {
              32 30 30                                           200
            }
          }
----------------------------------------------------------------------------
Accounting-request sent to RADIUS:
----------------------------------
          [5]= {
            type = 44 (Acct-Session-Id)
            length = 18 octets
            value = 16 octets {
              34 30 64 31 62 31 33 66  30 30 30 30 30 30 30 31
40d1b13f00000001
            }
          }
          [6]= {
            type = 1 (User-Name)
            length = 18 octets
            value = 16 octets {
              31 39 32 2e 31 36 38 2e  31 2e 33 3a 33 33 35 35
192.168.1.3:3355
            }
          }
          [7]= {
            type = 8 (Framed-IP-Address)
            length = 6 octets
            value = 4 octets {
              c0 a8 01 03                                        ....
            }
          }
----------------------------------------------------------------------------
And this Username (192.168.1.3:3355)
GNUGk send to accounting as Calling-Station-ID
----------------------------------------------
        [6]= {
          type = 1 (User-Name)
          length = 18 octets
          value = 16 octets {
            31 39 32 2e 31 36 38 2e  31 2e 33 3a 33 33 35 35
192.168.1.3:3355
          }
        }
        [7]= {
          type = 8 (Framed-IP-Address)
          length = 6 octets
          value = 4 octets {
            c0 a8 01 03                                        ....
          }
        }
        [8]= {
          type = 46 (Acct-Session-Time)
          length = 6 octets
          value = 4 octets {
            00 00 00 03                                        ....
          }
        }
        [9]= {
          type = 31 (Calling-Station-Id)
          length = 18 octets
          value = 16 octets {
            31 39 32 2e 31 36 38 2e  31 2e 33 3a 33 33 35 35
192.168.1.3:3355
          }
        }
        [10]= {
          type = 30 (Called-Station-Id)
          length = 5 octets
          value = 3 octets {
            32 30 30                                           200
          }
        }
----------------------------------------------------------------------------


I think it is point to do something.


Best regards,
Oleg




-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com

_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux