authentication with radius, mysql backend

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I have this machine doing authentication/routing for sip users with ser+freeradius-mysql.
Now I need to do also h323 authentication/routing over the same backend.
(h323 are older customers wich will switch to sip over time)

I've installed openh323gnugk on the same machine and configured RadAliasAuth, it doesn't work, trying to authenticate with :

ohphone -g [gatekeeper ip] -u login -p pwd -l

gives this error on freeradius -X :

rad_recv: Access-Request packet from host [gatekeeper ip]:10351, id=217, length=145
       User-Name = "login"
       NAS-IP-Address = [gatekeeper ip]
       NAS-Identifier = "GNU Gatekeeper"
       NAS-Port-Type = Virtual
       Service-Type = Login-User
       Framed-IP-Address = [ohphone machine ip]
       Cisco-AVPair = "h323-ivr-out=terminal-alias:login;"
       User-Password = "login"   <--- ? what ?
[bla bla, I'm doing these and those queries ...]
auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user
auth: Failed to validate the user.

and on gnugk -tt :


2005/08/17 08:03:59.343 2 RasSrv.cxx(168) RAS Read from [ohphone machine ip]:1060
2005/08/17 08:03:59.350 2             RasSrv.cxx(209)   RAS     Received GRQ
2005/08/17 08:03:59.355 1             RasSrv.cxx(328)   RAS     GRQ Received
2005/08/17 08:03:59.360 2 RasSrv.cxx(373) GCF|[ohphone machine ip]|login:h323_ID|terminal; 2005/08/17 08:03:59.367 2 RasSrv.cxx(221) RAS Send GCF to [ohphone machine ip]:1060 2005/08/17 08:03:59.376 2 RasSrv.cxx(168) RAS Read from [ohphone machine ip]:1060
2005/08/17 08:03:59.378 2             RasSrv.cxx(209)   RAS     Received RRQ
2005/08/17 08:03:59.380 1             RasSrv.cxx(328)   RAS     RRQ Received
2005/08/17 08:04:01.389 2 RasSrv.cxx(373) RRJ|[ohphone machine ip]|login:h323_ID|terminal|securityDenial; 2005/08/17 08:04:01.398 2 RasSrv.cxx(221) RAS Send RRJ to [ohphone machine ip]:1060


The Service-Type for ser is "Sip-Session", and Auth-Type "Digest", so I understand I need some different configuration for authenticating "gnugk style", but I can't find indications to do it, can someone give me some hints or point me to the right direction ?

Thanks






-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux