Hello,
following scenario observed when tried authenticate unregistered caller in latest 2.0.9 from CVS:
call comes from Quintum Tenor gateway with no calling-station-id in Setup message. RadaliasAuth module rejects call without sending request to Radius server.
Wanted to know if there is a way to make RadAliasAuth to send request to Radius server even if CallSetup does not contain calling-station-id
Here is log below. 2.0.8 used to send request to radius server. It was useful as it provided way to authenticate caller by IP address even with no calling-station-id
regards, Aivis
2004/10/26 11:46:19.638 4 ProxyChannel.cxx(387) Q931 Received: {
q931pdu = {
protocolDiscriminator = 8
callReference = 723
from = originator
messageType = Setup
IE: Bearer-Capability = {
80 80 a2 ...
}
IE: Display = {
54 65 6e 6f 72 2d 47 61 74 65 77 61 79 Tenor-Gateway
}
IE: Called-Party-Number = {
91 34 34 31 36 31 36 35 32 32 35 37 39 .441616522579
}
IE: User-User = {
30 90 06 00 08 91 4a 00 03 28 c0 b5 00 07 27 3f 0.....J..(....'?
54 65 6e 6f 72 20 41 6e 61 6c 6f 67 20 41 38 30 Tenor Analog A80
30 20 4d 75 6c 74 69 70 61 74 68 20 53 77 69 74 0 Multipath Swit
63 68 20 2d 20 38 20 70 6f 72 74 73 20 28 52 65 ch - 8 ports (Re
76 2e 20 42 29 00 00 92 3e f8 00 47 55 b8 00 00 v. B)...>..GU...
1f 50 34 2d 32 2d 32 30 2d 33 36 28 4c 45 43 29 .P4-2-20-36(LEC)
20 28 31 37 33 33 30 34 36 2f 30 78 30 37 45 36 (1733046/0x07E6
29 00 01 05 80 77 49 49 85 58 ac 00 34 31 37 65 )....wII.X..417e
38 64 62 34 37 30 62 00 38 31 00 00 00 7d 1d 98 8db470b.81...}..
07 00 d5 b9 71 ae 06 b8 11 00 34 31 37 65 38 64 ....q.....417e8d
62 63 37 30 63 00 00 00 00 00 80 96 06 13 00 10 bc70c...........
b0 0e 04 01 01 80 0a 04 00 01 00 d5 b9 71 ae 28 .............q.(
01 1e 40 10 b1 06 04 01 00 4e 04 01 01 80 11 14 ..@......N......
00 01 00 d5 b9 71 ae 28 00 00 d5 b9 71 ae 28 01 .....q.(....q.(.
12 00 10 b2 0d 60 01 80 0a 04 00 01 00 d5 b9 71 .....`.........q
ae 28 01 1d 40 10 b3 06 04 01 00 4d 60 01 80 11 .(..@......M`...
14 00 01 00 d5 b9 71 ae 28 00 00 d5 b9 71 ae 28 ......q.(....q.(
01 12 00 10 b4 0d 40 01 80 0a 04 00 01 00 d5 b9 ......@.........
71 ae 28 01 1d 40 10 b5 06 04 01 00 4d 40 01 80 q.(..@......M@..
11 14 00 01 00 d5 b9 71 ae 28 00 00 d5 b9 71 ae .......q.(....q.
28 01 01 00 01 00 01 00 01 00 01 00 01 00 40 b5 (.............@.
00 07 27 26 0c 01 03 18 02 28 00 0b 04 31 30 38 ..'&.....(...108
32 05 01 00 0f 0b 41 30 30 32 2d 30 30 38 34 35 2.....A002-00845
41 00 01 00 01 01 00 02 01 02 08 80 01 80 A.............
}
}
h225pdu = {
h323_uu_pdu = {
h323_message_body = setup {
protocolIdentifier = 0.0.8.2250.0.3
sourceInfo = {
vendor = {
vendor = {
t35CountryCode = 181
t35Extension = 0
manufacturerCode = 1831
}
productId = 64 octets {
54 65 6e 6f 72 20 41 6e 61 6c 6f 67 20 41 38 30 Tenor Analog A80
30 20 4d 75 6c 74 69 70 61 74 68 20 53 77 69 74 0 Multipath Swit
63 68 20 2d 20 38 20 70 6f 72 74 73 20 28 52 65 ch - 8 ports (Re
76 2e 20 42 29 00 00 92 3e f8 00 47 55 b8 00 00 v. B)...>..GU...
}
versionId = 32 octets {
50 34 2d 32 2d 32 30 2d 33 36 28 4c 45 43 29 20 P4-2-20-36(LEC)
28 31 37 33 33 30 34 36 2f 30 78 30 37 45 36 29 (1733046/0x07E6)
}
}
gateway = {
}
mc = FALSE
undefinedNode = FALSE }
destinationAddress = 1 entries {
[0]=dialedDigits "441616522579"
}
activeMC = FALSE
conferenceID = 16 octets {
34 31 37 65 38 64 62 34 37 30 62 00 38 31 00 00 417e8db470b.81..
}
conferenceGoal = create <<null>>
callType = pointToPoint <<null>>
sourceCallSignalAddress = ipAddress {
ip = 4 octets {
d5 b9 71 ae ..q.
}
port = 1720
}
callIdentifier = {
guid = 16 octets {
34 31 37 65 38 64 62 63 37 30 63 00 00 00 00 00 417e8dbc70c.....
}
}
fastStart = 6 entries {
[0]= 19 octets {
00 10 b0 0e 04 01 01 80 0a 04 00 01 00 d5 b9 71 ...............q
ae 28 01 .(.
}
[1]= 30 octets {
40 10 b1 06 04 01 00 4e 04 01 01 80 11 14 00 01 @......N........
00 d5 b9 71 ae 28 00 00 d5 b9 71 ae 28 01 ...q.(....q.(.
}
[2]= 18 octets {
00 10 b2 0d 60 01 80 0a 04 00 01 00 d5 b9 71 ae ....`.........q.
28 01 (.
}
[3]= 29 octets {
40 10 b3 06 04 01 00 4d 60 01 80 11 14 00 01 00 @......M`.......
d5 b9 71 ae 28 00 00 d5 b9 71 ae 28 01 ..q.(....q.(.
}
[4]= 18 octets {
00 10 b4 0d 40 01 80 0a 04 00 01 00 d5 b9 71 ae ....@.........q.
28 01 (.
}
[5]= 29 octets {
40 10 b5 06 04 01 00 4d 40 01 80 11 14 00 01 00 @......M@.......
d5 b9 71 ae 28 00 00 d5 b9 71 ae 28 01 ..q.(....q.(.
}
}
mediaWaitForConnect = FALSE
canOverlapSend = FALSE
multipleCalls = FALSE
maintainConnection = FALSE
presentationIndicator = presentationAllowed <<null>>
screeningIndicator = userProvidedNotScreened
}
nonStandardData = {
nonStandardIdentifier = h221NonStandard {
t35CountryCode = 181
t35Extension = 0
manufacturerCode = 1831
}
data = 38 octets {
0c 01 03 18 02 28 00 0b 04 31 30 38 32 05 01 00 .....(...1082...
0f 0b 41 30 30 32 2d 30 30 38 34 35 41 00 01 00 ..A002-00845A...
01 01 00 02 01 02 ......
}
}
h245Tunneling = TRUE
}
}
}
2004/10/26 11:46:19.639 2 Toolkit.cxx(357) RewritePString: 441616522579 to 2346#441616522579
2004/10/26 11:46:19.640 2 Toolkit.cxx(357) RewritePString: 441616522579 to 2346#441616522579
2004/10/26 11:46:19.640 3 radauth.cxx(1863) RADAUTH RadAliasAuth Setup check failed - no calling station id found2004/10/26 11:46:19.640 3 gkauth.cxx(1286) GKAUTH RadAliasAuth Setup check failed
2004/10/26 11:46:19.640 3 ProxyChannel.cxx(1077) GKAUTH H.225 Setup authentication failed, cause: 21
------------------------------------------------------- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________________
List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/
