AW: two way authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



to simplify your implementation, here's my WORKING config file:

it uses MySQL Password and Alias Authentication and MySQL Logging, tell me if you might need the SQL script to build the database tables!

2 Authentication scenarios (definition at [Gatekeeper::Auth] section):

1. user sends password, password AND ip address have to be right
2. user sends no password, ip address has to be right

========================
[Gatekeeper::Main]
Fourtytwo=42
Name=myGK
Home=[ip-address]
TimeToLive=900
UseBroadcastListener=0
TimestampFormat=MySQL

[RoutedMode]
GKRouted=1
H245Routed=1
CallSignalPort=1720
SupportNATedEndpoints=1
DropCallsByReleaseComplete=1

[Proxy]
Enable=1
RTPPortRange=20001-30000

[GkStatus::Auth]
default=forbid
rule=password
[user]=[encrypted password generated using "addpasswd"]

[Gatekeeper::Acct]
SQLAcct=optional
FileAcct=required

[CallTable]
AcctUpdateInterval=10

[SQLAcct]
Driver=MySQL
Host=127.0.0.1
Database=gnugk
Username=gnugk
Password=gnugk
TimestampFormat=MySQL
StartQuery=INSERT INTO cdr (uniqueid,callnumber,gkname,gkip,h323callerid,callid,confid,setuptime,callerip,callerport,number) VALUES ('%s','%n','%g','%{gkip}','%u','%{CallId}','%{ConfId}','%{setup-time}','%{caller-ip}','%{caller-port}','%{Dialed-Number}')
UpdateQuery=UPDATE cdr SET duration=%d,connecttime='%{connect-time}' WHERE gkname='%g' AND uniqueid='%s'
StopQuery=UPDATE cdr SET connecttime='%{connect-time}',calleeip='%{callee-ip}',calleeport='%{callee-port}',srcinfo='%{src-info}',destinfo='%{dest-info}',callingstationid='%{Calling-Station-Id}',calledstationid='%{Called-Station-Id}', disconnecttime='%{disconnect-time}',duration=%d WHERE gkname='%g' AND uniqueid='%s'

[FileAcct]
DetailFile=/var/log/cdr_gk.log
TimestampFormat=MySQL

[Gatekeeper::Auth]
SQLPasswordAuth=optional;RRQ
SQLAliasAuth=required;RRQ

[SQLPasswordAuth]
Query=SELECT h235password FROM users WHERE username='%1' AND gk='%2'
Driver=MySQL
Host=127.0.0.1
Database=gnugk
Username=gnugk
Password=gnugk

[SQLAliasAuth]
Query=SELECT authcond FROM users WHERE username='%1' AND gk='%2'
Driver=MySQL
Host=127.0.0.1
Database=gnugk
Username=gnugk
Password=gnugk
======================== 
Hope this helps!

Regards, Roland


-----Ursprüngliche Nachricht-----
Von: openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx [mailto:openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx] Im Auftrag von Zygmuntowicz Michal
Gesendet: Mittwoch, 02. März 2005 16:33
An: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Betreff: Re:  two way authentication

Maybe you need to take a look at the manual
for the correct syntax and the list of supported modules.
1. Character case may be also important.
2. You should use = instead of :.
3. MySQLAuth is not supported.

----- Original Message ----- 
From: "Kamran Bukhari" <kamranbukhari@xxxxxxxxx>
Sent: Wednesday, March 02, 2005 10:01 AM


> Is there anyway that i can do authentication from two rules like one
> from RASSrv and other MYSQL.
> i tried this one in my authentication of GKauth
> [Gkauth]
> aliasauth:required;RRQ
> mysqlauth:required;ARQ
> 
> But my program just do the authentication of RRQ using RASSrv:RRQAuth
> but it doesnot do the authentication using mysql when ARQ arrives.Why
> is this happenig?



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click

_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&opÌk

_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id?49
Homepage: http://www.gnugk.org/


[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux