Hello
I compiled last CVS version yesterday (Version(2.2.2) Build(Jan 24
2005, 18:05:01)) because I´m using gnugk in rtp proxy mode, it works
perfect for me but now I am trying to run todays CVS version to avoid
problems with the port range bug and I have a securityDenial message
for my endpoints with this error log: RadAuth auth failed: CAT
m_generalID is not a valid alias
Version(2.2.2) Build(Jan 25 2005, 09:24:40) Sys(Linux i686 2.6.6)
...
2005/01/25 12:22:13.546 3 radauth.cxx(1156) RADAUTH
RadAuth auth failed: CAT m_generalID is not a valid alias
2005/01/25 12:22:13.546 3 gkauth.cxx(984) GKAUTH
RadAuth RRQ check failed
complete log:
2005/01/25 12:22:11.267 5 RasSrv.cxx(233) RAS Sent Successful
2005/01/25 12:22:11.267 5 job.cxx(423) JOB Job RRQ deleted
2005/01/25 12:22:11.267 5 job.cxx(412) JOB Worker
threads: 23 total - 5 busy, 18 idle
2005/01/25 12:22:13.538 5 yasocket.cxx(699) RasServer 1
sockets selected from 3, total 3/0
2005/01/25 12:22:13.538 4 RasSrv.cxx(199) RAS
Receiving on 200.110.2.130:1719(U)
2005/01/25 12:22:13.539 2 RasSrv.cxx(168) RAS Read
from 172.21.0.10:22000
2005/01/25 12:22:13.540 3 RasSrv.cxx(207) RAS
registrationRequest {
requestSeqNum = 1
protocolIdentifier = 0.0.8.2250.0.2
discoveryComplete = FALSE
callSignalAddress = 1 entries {
[0]=ipAddress {
ip = 4 octets {
ac 15 00 0a ....
}
port = 1720
}
}
rasAddress = 1 entries {
[0]=ipAddress {
ip = 4 octets {
ac 15 00 0a ....
}
port = 22000
}
}
terminalType = {
terminal = {
}
mc = FALSE
undefinedNode = FALSE
}
terminalAlias = 3 entries {
[0]=h323_ID 8 characters {
0074 0072 0075 006a 0069 006c 006c 006f trujillo
}
[1]=dialedDigits "6601011"
[2]=dialedDigits "6601012"
}
endpointVendor = {
vendor = {
t35CountryCode = 97
t35Extension = 0
manufacturerCode = 22
}
productId = 11 octets {
41 64 64 50 61 63 20 56 6f 49 50 AddPac VoIP
}
versionId = 4 octets {
38 2e 31 32 8.12
}
}
timeToLive = 60
tokens = 1 entries {
[0]={
tokenOID = 1.2.840.113548.10.1.2.1
timeStamp = 536870911
challenge = 16 octets {
e3 8c 32 68 f4 c5 a1 7d 46 85 35 a1 b7 d7 19 9f ..2h...}F.5.....
}
random = 206
generalID = 8 characters {
0074 0072 0075 006a 0069 006c 006c 006f trujillo
}
}
}
cryptoTokens = 1 entries {
[0]=cryptoEPPwdHash {
alias = h323_ID 8 characters {
0074 0072 0075 006a 0069 006c 006c 006f trujillo
}
timeStamp = 536870911
token = {
algorithmOID = 1.2.840.113549.2.5
paramS = {
}
hash = Hex: 34 07 de f0 40 3b 6d 36 88 a6 a9 3a 37 c4 9d b0
}
}
}
keepAlive = FALSE
willSupplyUUIEs = FALSE
}
2005/01/25 12:22:13.544 5 job.cxx(360) JOB Worker
threads: 23 total - 6 busy, 17 idle
2005/01/25 12:22:13.545 5 job.cxx(188) JOB
Starting Job RRQ at Worker thread 393241
2005/01/25 12:22:13.545 1 RasSrv.cxx(328) RAS RRQ Received
2005/01/25 12:22:13.546 3 radauth.cxx(1156) RADAUTH
RadAuth auth failed: CAT m_generalID is not a valid alias
2005/01/25 12:22:13.546 3 gkauth.cxx(984) GKAUTH
RadAuth RRQ check failed
2005/01/25 12:22:13.546 2 RasSrv.cxx(373)
RRJ|172.21.0.10|trujillo:h323_ID=6601011:dialedDigits=6601012:dialedDigits|terminal|securityDenial;
2005/01/25 12:22:13.547 6 yasocket.cxx(610) 10.0.1.26:1272
101 bytes sent
2005/01/25 12:22:13.547 3 RasSrv.cxx(219) RAS Send
to 172.21.0.10:22000
registrationReject {
requestSeqNum = 1
protocolIdentifier = 0.0.8.2250.0.2
rejectReason = securityDenial <<null>>
gatekeeperIdentifier = 6 characters {
0047 004b 004d 0061 0069 006e GKMain
}
}
2005/01/25 12:22:13.548 5 RasSrv.cxx(233) RAS Sent Successful
2005/01/25 12:22:13.548 5 job.cxx(423) JOB Job RRQ deleted
2005/01/25 12:22:13.548 5 job.cxx(412) JOB Worker
threads: 23 total - 5 busy, 18 idle
On Tue, 25 Jan 2005 01:15:06 +0100, Zygmuntowicz Michal
<m.zygmuntowicz@xxxxxxx> wrote:
> I just discovered another long living bug with port ranges.
> In case when the port range ends with 65535, a wraparound
> happens and subsequent socket allocation fails. As this bug
> is not so critical (one can adjust the port range to avoid it),
> a next release will fix it (of course, the fix is already in the cvs:).
>
> ----- Original Message -----
> From: "Jan Willamowius" <jan@xxxxxxxxxxxxxx>
> Sent: Monday, January 24, 2005 11:44 PM
>
> > unfortunately 2.2.1 introduced a bug in the RTP port handling in proxy
> > mode. We have updated the Source, Linux and Windows downloads on
> > gnugk.org to 2.2.1-2 that fixes this issue. Solaris and FreeBSD will
> > follow.
> >
> > There is no need to download the fixed package if you are not using
> > proxy mode.
> >
> > Regards,
> > Jan
> >
> >
> > Jan Willamowius wrote:
> >> GNU Gatekeeper 2.2.1 released
> >> =============================
> >>
> >> A new stable version of the GNU Gatekeeper has been released.
> >> In addition to a number of new features, this release contains a
> >> _security_fix_, so please update your version.
> >>
> >> We would also like to encourage all users who still use 2.0.x version
> >> to upgrade to the 2.2.x line, to reduce our maintenance overhead.
> >>
> >> Source code and executables for Linux and Windows can be downloaded
> >> from http://www.gnugk.org/h323download.html
> >> (The SourceForge download system had a few problems over the last few
> >> days. If your download fails try another mirror or wait a while.)
> >>
> >> Most important changes in this version:
> >> - security fix and better error checking in socket handling
> >> - RouteToGateway command for virtual queue routing (out-of-zone
> >> routing)- race condition in config reload fixed
> >> - changed default for RTPPortRange in proxy mode
> >> - for flexible rewrite rules and prefix matching with '.' and '%'
> >> wildcards
> >> - per call proxy control
> >> - new TcpKeepAlive option to remove problem with network errors
> >> and hanging calls
> >> - additional accounting variable for original destination number
> >>
> >> For a complete list of changes see the file changes.txt in the
> >> download archive.
> >>
> >> For information on compiling the source code, please see
> >> http://www.gnugk.org/compiling-gnugk.html
> >>
> >> Regards,
> >> Jan
> >>
> >> --
> >> Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.willamowius.de/
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
> Tool for open source databases. Create drag-&-drop reports. Save time
> by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
> Download a FREE copy at http://www.intelliview.com/go/osdn_nl
>
> _______________________________________________________
>
> List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> Homepage: http://www.gnugk.org/
>
--
rrgv
-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________________
List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id?49
Homepage: http://www.gnugk.org/
