Re: [Openh323gk-users]_Athentication_based_on_Alias/H323_Id

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Michal,
just some questions and I appreciate a lot your time to respond them:
- The only way to authenticate ALIAS is using rules such as IP address  and Port number? I mean, the IP address/Port rule is mandatory?
- Can I athenticate ALIAS (the one it comes inside the RRQ message) and compare it with the one included into the MySQL database only? In affirmative case, what kind of rules I have configure in the databe query?
Thank you very much




-- Mensaje Original --
Enviado por: Zygmuntowicz Michal <m.zygmuntowicz@xxxxxxx>
Fecha: 05/05/2006 09:47:25
Para: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>
Título:  Re:  Athentication based on Alias/H323_Id

The format for SQL rules has to be exactly the same as for AliasAuth module.
See the manual.

----- Original Message ----- 
From: <armando_lima@xxxxxxxxxxxxxxx>
To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>
Sent: Monday, May 01, 2006 6:30 AM
Subject:  Athentication based on Alias/H323_Id


Hi guys!
I have a problem when I try to authenticate my IP Phone according to its 
alias/h323_id.
I would appreciate any comment in advance.
The Gatekeeper configuration, trace monitoring and MySQL Database 
respectively are:
GK Config:

[GkStatus::Auth]
rule=allow
;Shutdown=1

[Gatekeeper::Auth]
SQLAliasAuth=required;RRQ

[SQLAliasAuth]
Driver=MySQL
Host=localhost
Database=billing
Username=root
Password=armando
CacheTimeout=300
Query=SELECT e164 FROM voipuser WHERE h323id like "%1"
---------------------------------------------------------------------------------

MONITORING

2006/05/01 01:19:04.029 5          job.cxx(352) JOB Worker threads: 6 
total - 6 busy, 0 idle
2006/05/01 01:19:04.030 5          job.cxx(180) JOB Starting Job RRQ at 
Worker thread 4071807920
2006/05/01 01:19:04.030 1       RasSrv.cxx(330) RAS RRQ Received
2006/05/01 01:19:04.031 5        gksql.cxx(376) SQLAliasAuth Executing 
query: SELECT e164 FROM voipuser WHERE h323id like "472"
2006/05/01 01:19:04.046 3      sqlauth.cxx(242) SQLAUTH SQLAliasAuth('472'): 
query returned no rows
2006/05/01 01:19:04.046 4       gkauth.cxx(1485) GKAUTH SQLAliasAuth auth 
condition not found for alias '472'
2006/05/01 01:19:04.046 5        gksql.cxx(376) SQLAliasAuth Executing 
query: SELECT e164 FROM voipuser WHERE h323id like "iptest"
2006/05/01 01:19:04.048 1       gkauth.cxx(1605) GKAUTH SQLAliasAuth found 
unknown auth rule '472'
2006/05/01 01:19:04.048 3       gkauth.cxx(1479) GKAUTH SQLAliasAuth auth 
condition '472' rejected RRQ from 'iptest'
2006/05/01 01:19:04.048 3       gkauth.cxx(969) GKAUTH SQLAliasAuth RRQ 
check failed
2006/05/01 01:19:04.049 2       RasSrv.cxx(375) 
RRJ|192.168.22.8|472:dialedDigits=iptest:h323_ID|terminal|securityDenial;
2006/05/01 01:19:04.049 3       RasSrv.cxx(221) RAS Send to 
200.126.22089:1720
registrationReject {
    requestSeqNum = 22908
    protocolIdentifier = 0.0.8.2250.0.4
    rejectReason = securityDenial <<null>>
    gatekeeperIdentifier =  10 characters {
      004f 0070 0065 006e 0048 0033 0032 0033   OpenH323
      0047 004b                                 GK
    }
  }
2006/05/01 01:19:04.049 5       RasSrv.cxx(235) RAS Sent Successful
2006/05/01 01:19:04.050 5          job.cxx(415) JOB Job RRQ deleted
2006/05/01 01:19:04.050 5          job.cxx(404) JOB Worker threads: 6 
total - 5 busy, 1 idle
-------------------------------------------------------------------------------------------

DATABASE:
----------+------------
 h323id   |    e164
-----------+-----------
ip470           470
 iptest          472



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

El mail recibido, fue verificado por el Servicio de Antivirus para mail de Fullzero
y se encuentra libre de virus

__________________________________________________

Internet gratis. Siempre.
http://www.fullzero.com.ar




-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id?49
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/


[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux