Hello All!I have a problem with using sqlbill.GnuGK : 2.2.3-2I also download the sqlbill module from CVS ( as mentioned in maillists )The calls are made in this scheme:
gateway X ( ip: X.X.X.X ) --> gateway Y ( ip: Y.Y.Y.Y ) --> gateway Z( ip: Z.Z.Z.Z )
All calls are made by FastStart procedure ( without RAS ).
So I need to authenticate them ONLY by IP addresses. In this caseaccording to the manual I'm using 'RadAliasAuth' and'framedip' field in table voipuser.
The config file gnugk.ini:
[Gatekeeper::Main]Fourtytwo=42Name=OpenH323GKStatusTraceLevel=3Home=Y.Y.Y.YUseBroadcastListener=0
[RoutedMode]GKRouted=1H245Routed=0CallSignalPort=1720DropCallsByReleaseComplete=1SendReleaseCompleteOnDRQ=1ForwardOnFacility=0SupportNATedEndpoints=1Q931PortRange=30000-39999H245PortRange=40000-49999
[Proxy]Enable=0
[RasSrv::RRQFeatures]OverwriteEPOnSameAddress=1AcceptEndpointIdentifier=0
[RasSrv::ARQFeatures]ArjReasonRouteCallToSCN=0ArjReasonRouteCallToGatekeeper=1
[RasSrv::PermanentEndpoints]X.X.X.X:1720=addpack;Z.Z.Z.Z:1720=test;000
[GkStatus::Auth]rule=allowShutdown=1
[Gatekeeper::Auth]RadAliasAuth=required;RRQ,ARQ,Setupdefault=allow
[Gatekeeper::Acct]RadAcct=required;start,update,stop,on,off
[RadAliasAuth]Servers=localhostSharedSecret=testingAppendCiscoAttributes=0IncludeTerminalAliases=0IncludeEndpointIP=1
[RadAcct]Servers=localhostSharedSecret=testingAppendCiscoAttributes=0IncludeEndpointIP=1
[SQLPasswordAuth]Driver=PostgreSQLHost=localhostDatabase=voipdbUsername=gkradiusPassword=gkradiusQuery=SELECT u.chappassword FROM voipuser u JOIN voipaccount a ONu.accountid = a.id WHERE u.h323id = '%1' AND NOT u.disabled AND NOTa.disabled AND a.closed IS NULL
[SQLAliasAuth]Driver=PostgreSQLHost=localhostDatabase=voipdbUsername=gkradiusPassword=gkradiusQuery=SELECT CASE WHEN u.framedip IS NULL THEN 'allow' ELSE 'sigip:'|| host(u.framedip) END FROM voipuser u JOIN voipaccount a ONu.accountid = a.id WHERE u.h323id = '%1' AND NOT u.disabled AND NOTa.disabled AND a.closed IS NULL
[SQLAcct]Driver=PostgreSQLHost=localhostDatabase=voipdbUsername=gkradiusPassword=gkradiusStartQuery=INSERT INTO voipcall (id, h323id, acctsessionid,h323confid, gkip, gkid, callingstationip, callingstationid,calledstationip, calledstationid, setuptime, acctstarttime,acctstartdelay, acctupdatetime) VALUES (DEFAULT, '%u', '%s','%{ConfId}', '%{gkip}', '%g', NULLIF('%{caller-ip}', '')::INET,'%{Calling-Station-Id}', NULLIF('%{callee-ip}', '')::INET,'%{Called-Station-Id}', NULLIF('%{setup-time}', '')::TIMESTAMP(0) WITHTIME ZONE, now(), 0, now())UpdateQuery=UPDATE voipcall SET duration = '%d', connecttime =NULLIF('%{connect-time}','')::TIMESTAMP(0) WITH TIME ZONE,acctupdatetime = now() WHERE acctsessionid = '%s' AND gkid = '%g' ANDacctstoptime IS NULLStopQuery=UPDATE voipcall SET acctstoptime = now(), duration = '%d',terminatecause = '%c', acctstopdelay = 0, setuptime =NULLIF('%{setup-time}', '')::TIMESTAMP(0) WITH TIME ZONE, connecttime= NULLIF('%{connect-time}', '')::TIMESTAMP(0) WITH TIME ZONE,disconnecttime = NULLIF('%{disconnect-time}', '')::TIMESTAMP(0) WITHTIME ZONE WHERE acctsessionid = '%s' AND gkid = '%g' AND acctstoptimeIS NULLStopQueryAlt=INSERT INTO voipcall (id, h323id, acctsessionid,h323confid, gkip, gkid, callingstationip, callingstationid,calledstationip, calledstationid, setuptime, connecttime,disconnecttime, terminatecause, duration, acctstarttime,acctstartdelay, acctupdatetime, acctstoptime, acctstopdelay) VALUES(DEFAULT,'%u', '%s', '%{ConfId}', '%{gkip}', '%g',NULLIF('%{caller-ip}', '')::INET, '%{Calling-Station-Id}',NULLIF('%{callee-ip}', '')::INET, '%{Called-Station-Id}',NULLIF('%{setup-time}','')::TIMESTAMP(0) WITH TIME ZONE,NULLIF('%{connect-time}','')::TIMESTAMP(0) WITH TIME ZONE,NULLIF('%{disconnect-time}','')::TIMESTAMP(0) WITH TIME ZONE, '%c','%d', (now() - '%d'::INTERVAL), 0, now(), now(), 0)
EOF
All calls are terminated by cause # 10.I prevent to use the h323 ID of originating gateways ( in our exampleis X.X.X.X ) by setting to 'false' value of field in table voipuser:voipdb=> select * from voipuser;id|h323id|accountid|disabled|checkh323id|chappassword|allowedaliases|assignaliases|framedip|terminating|nasaddress2|addpack|2|f|f|addpack|^$||X.X.X.X|f|Y.Y.Y.Y
Is it necessary to set the aliases in fields'allowedaliases','assignaliases' or I can set them inRasSrv::PermanentEndpoints section of config?
GnuGK log:
2005/11/09 23:34:58.670 3 radproto.cxx(2141) RADIUS Sending PDU to RADIUS server localhost (127.0.0.1:1812) fromport:47743[active requests: 0, ID space: 115-116], PDU: { code = 1 (Access-Request) id = 115 length = 124 octets authenticator = 16 octets { db 5e e9 fd 97 95 53 75 a0 61 8f 8f ff 9c 9b c6 .^....Su.a...... } attributes = 9 elements { [0]= { type = 1 (User-Name) length = 19 octets value = 17 octets { 76 6f 69 70 2e 31 39 32 2e 31 36 38 2e 30 2e 34 voip.192.168.0.4 30 0 } } [1]= { type = 4 (NAS-IP-Address) length = 6 octets value = 4 octets { е1 41 06 d9 Q... } } [2]= { type = 32 (NAS-Identifier) length = 12 octets value = 10 octets { 4f 70 65 6e 48 33 32 33 47 4b OpenH323GK } } [3]= { type = 61 (NAS-Port-Type) length = 6 octets value = 4 octets { 00 00 00 05 .... } } [4]= { type = 6 (Service-Type) length = 6 octets value = 4 octets { 00 00 00 01 .... } } [5]= { type = 8 (Framed-IP-Address) length = 6 octets value = 4 octets { d2 11 35 92 .U8. } } [6]= { type = 31 (Calling-Station-Id) length = 5 octets value = 3 octets { 32 30 30 200 } } [7]= { type = 30 (Called-Station-Id) length = 10 octets value = 8 octets { 30 30 30 30 35 36 35 35 00005655 } } [8]= { type = 2 (User-Password) length = 34 octets value = 32 octets { 76 f0 43 f2 0a f7 19 4c e1 24 47 43 0a b9 21 c3 v.C....L.$GC..!. 74 44 89 44 f3 1c 52 ee 0c df 88 6c 63 a6 22 3b tD.D..R....lc."; } } } }
2005/11/09 23:34:58.689 3 radproto.cxx(2180) RADIUS Received PDU from RADIUS server localhost (127.0.0.1:1812) by socketport:47743[active requests: 0, ID space: 115-116], PDU: { code = 3 (Access-Reject) id = 115 length = 20 octets authenticator = 16 octets { eb f9 5a d3 0e 21 e5 9c 70 f7 55 a0 46 a1 44 ce ..Z..!..p.U.F.D. } attributes = <<null>> }
2005/11/09 23:34:58.689 3 gkauth.cxx(1051) GKAUTH RadAliasAuth Setup check failed2005/11/09 23:34:58.689 3 ProxyChannel.cxx(1496) Q931s Dropping call CRV=1386 from X.X.X.X:14103 due to Setup authenticationfailure
Thanks./FaridЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪрС^╣И ┼X╛╡ '╡┼чu╪ЪM╘·й▀╚uКч√┼fz{\┘╘ezx Ё╜└ZrЪ╟g╚╒x╕═iIЙОz©цё Е║╖b╣З+~╥·ЪЖ╖u╥··в╚yшhб)зЦoИ∙╚&jшХ╞*.╝В╚й▄'J┴РЧыЪ=#ЪX°▓╚zз)∙╛Ъ├шiЪЪЛ╒ЙэyЗ+│ОГzъЮz╨'┼jЪ╕ЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪЪСХ╡ь╖┐Ы ┼[hЭЙ^· Жч Ъ╨г╚ЁЫb╡шЪ╡▀╚qГХ╝Ъ²К@╜хb╫ОА╤зЪЪШ(╨╥ ~┼Ю{Ыч╥Ы ┼V╚r╞{ВХ╝ИЪ╕Ъ~┼Н⌡Ь²УIЛ╧╩ ╝&чЧm╖ЪЪ√+-ЁШ(╨╥ ~┼Ю{Ыч╥Ыb╡ш?√+-┼wХЧ┼^· Жч Ъ╨г╚╟z&z√═{Ьm╤÷ЪЪ 0Ч Н┌OХ
