AW: SimpleAuthentiaction Failed

["Frank Fischer" <frank.fischer@xxxxxxxxxxxxxxxx>]

Title: RE: SimpleAuthentiaction Failed

Hi Finny

 

sorry, no, i can not provide this kind of information at the moment (I'm "just" the project management guy).

Please refer to the ITU document refering to H.235 and have a close look at Appedinx D (Baseline Security Profile).

 

Greetings

Frank

---

Von: openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx [mailto:openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx] Im Auftrag von Finny
Gesendet: Freitag, 24. September 2004 12:07
An: 'openh323gk-users@xxxxxxxxxxxxxxxxxxxxx'
Betreff: RE: SimpleAuthentiaction Failed

Hi Frank,

              can you provide enough information to calculate the digest for cryptoEPPwdHash . so that i will have confident about our implementation.

Thanks

-Finny

-----Original Message-----
From: openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx [mailto:openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx]On Behalf Of Frank Fischer
Sent: Wednesday, September 22, 2004 7:16 PM
To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Subject: AW: SimpleAuthentiaction Failed

Hi Finny

 

we also had some problems with H.235 Authentication and found some "bugs" in the H.235 implementation if gnugk. Basically, H.235 is not fully implemented in gnugk.

We started a project with someone of the gnugk developers to fix that. Right now, we are testing the new implementation and i feel we are relatively close to "good-to-go" vesion.

 

Im not sure whether some of these changes are already in the cvs (version 2.0.9), you might want to have a look at.

 

Greetings

Frank

 

---

Von: openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx [mailto:openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx] Im Auftrag von Finny
Gesendet: Mittwoch, 22. September 2004 14:45
An: 'openh323gk-users@xxxxxxxxxxxxxxxxxxxxx'
Betreff: RE: SimpleAuthentiaction Failed

Hi
    I did the same.The same username and password work with openPhone.
When i configure in our gateway it fails.

Here is my earlier mail attachment. This is GnuGK's trace

registrationRequest {
    requestSeqNum = 37539
    protocolIdentifier = 0.0.8.2250.0.4
    discoveryComplete = FALSE
    callSignalAddress = 1 entries {
      [0]=ipAddress {
        ip =  4 octets {
          c0 a8 69 b4                                        ..i.
        }
        port = 1720
      }
    }
    rasAddress = 1 entries {
      [0]=ipAddress {
        ip =  4 octets {
          c0 a8 69 b4                                        ..i.
        }
        port = 1719
      }
    }
    terminalType = {
      gateway = {
      }
      mc = FALSE
      undefinedNode = FALSE
    }
    terminalAlias = 3 entries {
      [0]=dialedDigits "6676990"
      [1]=dialedDigits "6676991"
      [2]=h323_ID  7 characters {
        0067 0061 0074 0065 0077 0061 0079        gateway
      }
    }
    endpointVendor = {
      vendor = {
        t35CountryCode = 0
        t35Extension = 0
        manufacturerCode = 0
      }
    }
    timeToLive = 600
    cryptoTokens = 1 entries {
      [0]=cryptoEPPwdHash {
        alias = h323_ID  7 characters {
          0067 0061 0074 0065 0077 0061 0079        gateway
        }
        timeStamp = 1095765015
        token = {
          algorithmOID = 1.2.840.113549.2.5
          paramS = {
          }
          hash = Hex:  0f 0f d2 60 5b ef 5a 88  fe 49 f6 a0 9d ee 03 4e
        }
      }
    }
    keepAlive = FALSE
    willSupplyUUIEs = FALSE
    maintainConnection = FALSE
  }
2004/09/22 14:09:27.906 1       RasSrv.cxx(1002) GK RRQ Received
2004/09/22 14:09:27.984 1     h235auth.cxx(525) H235RAS H235AuthSimpleMD5 digest does not match.
2004/09/22 14:09:27.984 2       gkauth.cxx(448) GkAuth SimplePasswordAuth check failed
2004/09/22 14:09:28.000 2       RasSrv.cxx(1295) RRJ|192.168.105.180|6676990:dialedDigits=6676991:dialedDigits=gateway:h323_ID|gateway|securityDenial;

2004/09/22 14:09:28.000 3       RasSrv.cxx(2332) GK Send to 192.168.105.180:1719
registrationReject {
    requestSeqNum = 37539
    protocolIdentifier = 0.0.8.2250.0.4
    rejectReason = securityDenial <<null>>
    gatekeeperIdentifier =  8 characters {
      0044 0065 0076 0047 006e 0075 0047 004b   DevGnuGK
    }
  }
2004/09/22 14:09:28.016 5       RasSrv.cxx(2346) GK Sent Successful

Thanks
-Finny
-----Original Message-----
From: openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx
[mailto:openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx]On Behalf Of
Kompnet
Sent: Wednesday, September 22, 2004 5:33 PM
To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Subject: Re: SimpleAuthentiaction Failed

 Section [SimplePasswordAuth]

The section defines the userid and password pairs used by SimplePasswordAuth
module. Use `make addpasswd' to generate the utility addpasswd.

Usage:

addpasswd config userid password

Have you generated a pair userid-password by  addpasswd utility?

On Tuesday 21 September 2004 18:41, Finny wrote:
> Hi All
>         while using SimplePasswordAuthentication with GnuGk the RRQ is
> rejected by the GK.The following are the traces taken from Gatekeeper.
> Any body can tell me what is the problem and why it is happening?? Please
> provide full informatoin .
>
> 2004/09/21 20:05:27.641       1             RasSrv.cxx(1002)  GK      RRQ Received
> 2004/09/21 20:05:27.641       2             gkauth.cxx(448)   GkAuth
> SimplePasswordAuth check failed
> 2004/09/21 20:05:27.656       2             RasSrv.cxx(1295)
> RRJ|192.168.105.180|6676990:dialedDigits=6676991:dialedDigits=a2009@2220009
>: h323
> _ID|gateway|securityDenial;
> 2004/09/21 20:05:27.656       3             RasSrv.cxx(2332)  GK      Send to
> 192.168.105.180:1719
>
>
> Thanks
> -Finny

--
Best regards,
Igor Prokhorov

-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php

_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/