RadAliasAuth Strange Problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi All

I have gnugk 2.2.1 and sql bill, encountered a strange
problem when testing with a client.
When client's gw sends the Setup, gnugk does NOT send
the usual PDU to the Radius server, and authentication
fails.

gnugk works normal for setup messages sent by other
gateways.

All entries in DB are correct. Can someone help

I have attached the GNUlog and the config

Thanks
Steve Smith





============
gnugk Config:


[Gatekeeper::Main]
Fourtytwo=42
Name=gk3
UnicastRasPort=1719
EndpointSignalPort=1720


[LogFile]
Rotate=Hourly
RotateTime=59


[RoutedMode]
GKRouted=1
H245Routed=0
DropCallsByReleaseComplete=1
SendReleaseCompleteOnDRQ=1
ForwardOnFacility=0

CallSignalPort=1720
CallSignalHandlerNumber=1
RemoveH245AddressOnTunneling=1
AcceptNeighborsCalls=1
AcceptUnregisteredCalls=1



[Proxy]
Enable=0

[RasSrv::RRQFeatures]
OverwriteEPOnSameAddress=1
AcceptEndpointIdentifier=0

[RasSrv::ARQFeatures]
ArjReasonRouteCallToSCN=0
ArjReasonRouteCallToGatekeeper=1
;CallUnregisteredEndpoints=1
;RemoveTrailingChar=#
;RoundRobinGateways=1




[GkStatus::Auth]
rule=allow
Shutdown=0

[RasSrv::RewriteE164]
;Fastmatch=
;0190703100=052418088663
;01903142=0521178260
;5241908601903142=521178260
4556254=254
04194=94




[RasSrv::LRQFeatures]
CiscoGKCompatible=1



[RasSrv::PermanentEndpoints]

2.2.2.2=gk2;99,9988
#
[Gatekeeper::Auth]
;RadAuth=optional;RRQ,ARQ
RadAliasAuth=required;RRQ,ARQ,Setup,SetupUnreg
;SQLPasswordAuth=optional;RRQ
;SQLAliasAuth=required;RRQ
default=allow

[Gatekeeper::Acct]
FileAcct=optional;start,stop
RadAcct=required;start,update,stop,on,off
;SQLAcct=required;start,update,stop


[FileAcct]
;DetailFile=/var/log/gnulogs/gnucdr.log
DetailFile=/var/log/gnulogs/gnucdr-new.log
;#StandardCDRFormat=0
;#CDRString=%s|%{ConfId}|%u|%{Calling-Station-Id}|%{Called-Station-Id}|%d|%c
CDRString=%s|%g|%u|%{Calling-Station-Id}|%{Called-Station-Id}|%{caller-ip}|%{callee-ip}|%{connect-time}|%{disconnect-time}|%d|%c|
Rotate=daily
RotateTime=23:59


[RadAuth]
Servers=127.0.0.1
SharedSecret=testing
AppendCiscoAttributes=1
IncludeTerminalAliases=1
IncludeEndpointIP=1


[RadAliasAuth]
Servers=127.0.0.1
SharedSecret=testing
AppendCiscoAttributes=1
FixedPassword=gkcom


[RadAcct]
Servers=127.0.0.1
SharedSecret=testing
AppendCiscoAttributes=1
IncludeEndpointIP=1

[SQLPasswordAuth]
Driver=PostgreSQL
Host=localhost
Database=voipdb
Username=gkradius
Password=gkradius
Query=SELECT u.chappassword FROM voipuser u JOIN
voipaccount a ON u.accountid = a.id WHERE u.h323id =
'%1' AND NOT u.disabled AND NOT a.disabled AND
a.closed IS NULL

[SQLAliasAuth]
Driver=PostgreSQL
Host=localhost
Database=voipdb
Username=gkradius
Password=gkradius
Query=SELECT CASE WHEN u.framedip IS NULL THEN 'allow'
ELSE 'sigip:' || host(u.framedip) END FROM voipuser u
JOIN voipaccount a ON u.accountid = a.id WHERE
u.h323id = '%1' AND NOT u.disabled AND NOT a.disabled
AND a.closed IS NULL

[SQLAcct]
Driver=PostgreSQL
Host=localhost
Database=voipdb
Username=gkradius
Password=gkradius
StartQuery=INSERT INTO voipcall (id, h323id,
acctsessionid, h323confid, gkip, gkid,
callingstationip, callingstationid, calledstationip,
calledstationid, setuptime, acctstarttime,
acctstartdelay, acctupdatetime) VALUES (DEFAULT, '%u',
'%s', '%{ConfId}', '%{gkip}', '%g',
NULLIF('%{caller-ip}', '')::INET,
'%{Calling-Station-Id}', NULLIF('%{callee-ip}',
'')::INET, '%{Called-Station-Id}',
NULLIF('%{setup-time}', '')::TIMESTAMP(0) WITH TIME
ZONE, now(), 0, now())
UpdateQuery=UPDATE voipcall SET duration = '%d',
connecttime =
NULLIF('%{connect-time}','')::TIMESTAMP(0) WITH TIME
ZONE, acctupdatetime = now() WHERE acctsessionid =
'%s' AND gkid = '%g' AND acctstoptime IS NULL
StopQuery=UPDATE voipcall SET acctstoptime = now(),
duration = '%d', terminatecause = '%c', acctstopdelay
= 0, setuptime = NULLIF('%{setup-time}',
'')::TIMESTAMP(0) WITH TIME ZONE, connecttime =
NULLIF('%{connect-time}', '')::TIMESTAMP(0) WITH TIME
ZONE, disconnecttime = NULLIF('%{disconnect-time}',
'')::TIMESTAMP(0) WITH TIME ZONE WHERE acctsessionid =
'%s' AND gkid = '%g' AND acctstoptime IS NULL
StopQueryAlt=INSERT INTO voipcall (id, h323id,
acctsessionid, h323confid, gkip, gkid,
callingstationip, callingstationid, calledstationip,
calledstationid, setuptime, connecttime,
disconnecttime, terminatecause, duration,
acctstarttime, acctstartdelay, acctupdatetime,
acctstoptime, acctstopdelay) VALUES (DEFAULT,'%u',
'%s', '%{ConfId}', '%{gkip}', '%g',
NULLIF('%{caller-ip}', '')::INET,
'%{Calling-Station-Id}', NULLIF('%{callee-ip}',
'')::INET, '%{Called-Station-Id}',
NULLIF('%{setup-time}','')::TIMESTAMP(0) WITH TIME
ZONE, NULLIF('%{connect-time}','')::TIMESTAMP(0) WITH
TIME ZONE,
NULLIF('%{disconnect-time}','')::TIMESTAMP(0) WITH
TIME ZONE, '%c', '%d', (now() - '%d'::INTERVAL), 0,
now(), now(), 0)




=====================================

Gnugk log:

2005/04/03 15:29:46.883	3	ProxyChannel.cxx(722)	Q931s
Received: Setup CRV=14552 from 1.1.1.1:2762
2005/04/03 15:29:46.944	4	ProxyChannel.cxx(669)	Q931
Received: {
  q931pdu = {
    protocolDiscriminator = 8
    callReference = 14552
    from = originator
    messageType = Setup
    IE: Bearer-Capability = {
      80 90 a5                                        
  ...
    }
    IE: Display = {
      56 6f 69 70 53 77 69 74  63 68 20 32 2e 30 00   
  VoipSwitch 2.0.
    }
    IE: Called-Party-Number = {
      81 39 34 37 32 32 36 36  30 37 31 34            
  .444444444444
    }
    IE: User-User = {
      20 b8 06 00 08 91 4a 00  04 01 40 08 00 75 00 73
   .....J...@..u.s
      00 65 00 72 00 40 00 70  00 61 00 73 00 73 28 c0
  .e.r.@.p.a.s.s(.
      b5 00 07 d3 0b 56 6f 69  70 53 77 69 74 63 68 00
  .....VoipSwitch.
      00 06 31 2e 30 2e 31 00  00 00 01 05 00 c7 a5 59
  ..1.0.1........Y
      93 a4 70 cb 8f 35 63 06  b8 00 02 b2 1e 44 c2 d8
  ..p..5c......D..
      18 fe 3d 46 00 01 a8 01  aa 96 00 59 1d 80 11 00
  ..=F.......Y....
      02 b2 1e 44 c2 d8 18 fe  3d 45 00 01 a8 01 aa 96
  ...D....=E......
      35 02 14 00 00 00 0d 00  01 40 00 0b 0d 00 01 00
  5........@......
      42 3b e3 b7 21 93 00 1e  40 00 01 06 04 00 4d 00
  B;..!...@.....M.
      01 40 00 12 15 00 01 00  42 3b e3 b7 21 92 00 42
  .@......B;..!..B
      3b e3 b7 21 93 00 01 00  01 00 01 00 01 00 02 80
  ;..!............
      01 00                                           
  ..
    }
  }
  h225pdu = {
    h323_uu_pdu = {
      h323_message_body = setup {
        protocolIdentifier = 0.0.8.2250.0.4
        sourceAddress = 1 entries {
          [0]=h323_ID  9 characters {
            0075 0073 0065 0072 0040 0070 0061 0073  
user@pas
            0073                                     
s
          }
        }
        sourceInfo = {
          vendor = {
            vendor = {
              t35CountryCode = 181
              t35Extension = 0
              manufacturerCode = 2003
            }
            productId =  12 octets {
              56 6f 69 70 53 77 69 74  63 68 00 00    
          VoipSwitch..
            }
            versionId =  7 octets {
              31 2e 30 2e 31 00 00                    
          1.0.1..
            }
          }
          gateway = {
          }
          mc = FALSE
          undefinedNode = FALSE
        }
        destinationAddress = 1 entries {
          [0]=dialedDigits 444444444"
        }
        destCallSignalAddress = ipAddress {
          ip =  4 octets {
            cb 8f 35 63                               
        ..5c
          }
          port = 1720
        }
        activeMC = FALSE
        conferenceID =  16 octets {
          02 b2 1e 44 c2 d8 18 fe  3d 46 00 01 a8 01
aa 96   ...D....=F......
        }
        conferenceGoal = create <<null>>
        callType = pointToPoint <<null>>
        callIdentifier = {
          guid =  16 octets {
            02 b2 1e 44 c2 d8 18 fe  3d 45 00 01 a8 01
aa 96   ...D....=E......
          }
        }
        fastStart = 2 entries {
          [0]= 20 octets {
            00 00 00 0d 00 01 40 00  0b 0d 00 01 00 42
3b e3   ......@......B;.
            b7 21 93 00                               
        .!..
          }
          [1]= 30 octets {
            40 00 01 06 04 00 4d 00  01 40 00 12 15 00
01 00   @.....M..@......
            42 3b e3 b7 21 92 00 42  3b e3 b7 21 93 00
        B;..!..B;..!..
          }
        }
        mediaWaitForConnect = FALSE
        canOverlapSend = FALSE
        multipleCalls = FALSE
        maintainConnection = FALSE
      }
      h245Tunneling = FALSE
    }
  }
}
2005/04/03 15:29:46.964	4	ProxyChannel.cxx(1317)	
GWRewrite source: setup H323 ID or E164
2005/04/03 15:29:46.964	2	     radauth.cxx(840)
RADAUTH	RadAliasAuth Setup auth failed: could not
setup Framed-IP-Address
2005/04/03 15:29:46.965	3	      gkauth.cxx(1070)
GKAUTH	RadAliasAuth Setup check failed
2005/04/03 15:29:46.965	4	ProxyChannel.cxx(1440)	Q931
Dropping call from 66.59.227.183:2762 due to Setup
authentication failure
2005/04/03 15:29:46.973	2	      RasTbl.cxx(1969)
CallTable::Insert(CALL) Call No. 1, total sessions : 1
2005/04/03 15:29:46.974	3	    radproto.cxx(2098)
RADIUS	Sending PDU to RADIUS server 127.0.0.1
(127.0.0.1:1813) from port:5691[active requests: 0, ID
space: 158-159], PDU: Accounting-Request, id 158
2005/04/03 15:29:48.340	3	    radproto.cxx(2137)
RADIUS	Received PDU from RADIUS server 127.0.0.1
(127.0.0.1:1813) by socket port:5691[active requests:
0, ID space: 158-159], PDU: Accounting-Response, id
158
2005/04/03 15:29:48.340	3	      gkacct.cxx(918)	GKACCT
RadAcct logged event 1 for call no. 1
2005/04/03 15:29:48.341	2	      gkacct.cxx(958)	GKACCT
Successfully logged event 1 for call no. 1
2005/04/03 15:29:48.341	2	      RasTbl.cxx(2140)	CDR
ignore not connected call
2005/04/03 15:29:48.368	3	      gkacct.cxx(918)	GKACCT
FileAcct logged event 2 for call no. 1
2005/04/03 15:29:48.368	3	    radproto.cxx(2098)
RADIUS	Sending PDU to RADIUS server 127.0.0.1
(127.0.0.1:1813) from port:5691[active requests: 0, ID
space: 158-160], PDU: Accounting-Request, id 159
2005/04/03 15:29:48.475	3	    radproto.cxx(2137)
RADIUS	Received PDU from RADIUS server 127.0.0.1
(127.0.0.1:1813) by socket port:5691[active requests:
0, ID space: 158-160], PDU: Accounting-Response, id
159
2005/04/03 15:29:48.475	3	      gkacct.cxx(918)	GKACCT
RadAcct logged event 2 for call no. 1
2005/04/03 15:29:48.475	2	      gkacct.cxx(958)	GKACCT
Successfully logged event 2 for call no. 1
2005/04/03 15:29:48.482	3	    yasocket.cxx(528)	Q931s
Delete socket 1.1.1.1:2762
2005/04/03 15:29:49.273	3	      RasTbl.cxx(1393)	Gk
Delete Call No. 1








		
__________________________________ 
Do you Yahoo!? 
Make Yahoo! your home page 
http://www.yahoo.com/r/hs


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click

_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux