Re: Cryptotokens, CallUnregisteredEndpoints

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Lukasz

Sorry for the delay in replying. You are correct. There is a problem. The 
solution is not the easy. Unfortunately there is no standard way of using 
cryptoTokens to fix the problem.  The issue is quite complex as you need to 
put the support into GnuGk, the softphone and the MCU so a degree of design 
thought is required.

In the short term the simplest way is to edit the openmcu code and remove 
the default room support and force all callers to specify a room or of 
course force the signalling to be routed. There is a major problem with 
openMCU 2.2.1 not registering properly with the gatekeeper (uses some silly 
alias and does not support passwords). I have checked in a fix for that. I 
have also added MCU prefix support to GnuGk so openMCU can specify a E.164 
prefix. This gets around the need to specify the MCU as a permanent endpoint.

I will put the solution on the to-do list.

Simon


At 05:09 PM 16/08/2007, =?ISO-8859-2?Q?=A3ukasz_Czekierda?= wrote:

>Hi Simon,
>
>Below I attach two traces. When routed mode is enabled, ARJ is sent, but
>it is when disabled, GK sends ACF. The MCU' name is 'MCU_2.2.1:pink' and
>the unregistered endpoints' name is 'xxx'.
> >From the endpoint (openh323-based) I called 'callto 149.156.97.26:7314'
>which is the transport address (H.225.0) of MCU.
>
>
>The routed mode section configuration is:
>
>[RoutedMode]
>GKRouted=1
>H245Routed=0
>RemoveH245AddressOnTunneling=0
>AcceptNeighborsCalls=1
>AcceptUnregisteredCalls=0
>SupportNATedEndpoints=1
>DropCallsByReleaseComplete=1
>
>Is it a correct bahaviour of GK (I mean with no routed mode it should or
>should not reject calls from unregistered endpoints)?
>
>With best regards,
>Lukasz
>
>
>
>******* When routed mode is enabled I get:
>
>2007/08/16 10:47:49.140 3             RasSrv.cxx(238)   RAS
>admissionRequest {
>     requestSeqNum = 17218
>     callType = pointToPoint <<null>>
>     endpointIdentifier =  9 characters {
>       0033 0031 0038 0035 005f 0065 006e 0064   3185_end
>       0070                                      p
>     }
>     destinationInfo = 1 entries {
>       [0]=h323_ID  14 characters {
>         004d 0043 0055 005f 0032 002e 0032 002e   MCU_2.2.
>         0031 003a 0070 0069 006e 006b             1:pink
>       }
>     }
>     destCallSignalAddress = ipAddress {
>       ip =  4 octets {
>         95 9c 61 1a                                        ..a.
>       }
>       port = 7314
>     }
>     srcInfo = 1 entries {
>       [0]=h323_ID  28 characters {
>         006c 0075 006b 0065 0034 0034 0020 0028   luke44 (
>         0078 0078 0078 0029 0020 005b 0031 0034   xxx) [14
>         0039 002e 0031 0035 0036 002e 0039 0037   9.156.97
>         002e 0032 0036 005d                       .26]
>       }
>     }
>     srcCallSignalAddress = ipAddress {
>       ip =  4 octets {
>         95 9c 61 1a                                        ..a.
>       }
>       port = 5051
>     }
>     bandWidth = 100000
>     callReferenceValue = 22369
>     conferenceID =  16 octets {
>       6f 31 64 da 6a f9 18 10  8a e7 00 0c 6e 0a ee 4c   o1d.j.......n..L
>     }
>     activeMC = FALSE
>     answerCall = TRUE
>     canMapAlias = TRUE
>     callIdentifier = {
>       guid =  16 octets {
>         55 2b 64 da 6a f9 18 10  8a e7 00 0c 6e 0a ee 4c
>U+d.j.......n..L
>       }
>     }
>     gatekeeperIdentifier =  12 characters {
>       004d 0020 0047 0061 0074 0065 006b 0065   M Gateke
>       0065 0070 0065 0072                       eper
>     }
>     tokens = 1 entries {
>       [0]={
>         tokenOID = 1.2.840.113548.10.1.2.1
>         timeStamp = 1187254069
>         challenge =  16 octets {
>           a3 06 ca 2a 2d 46 71 16  10 b1 1e 06 0c 6a 5d ce
>...*-Fq......j].
>         }
>         random = 40
>         generalID =  15 characters {
>           004d 0043 0055 005f 0032 002e 0032 002e   MCU_2.2.
>           0031 003a 0070 0069 006e 006b 0000        1:pink
>         }
>       }
>     }
>     willSupplyUUIEs = TRUE
>     canMapSrcAlias = FALSE
>   }
>2007/08/16 10:47:49.234 5                job.cxx(180)   JOB     Starting
>Job ARQ at Worker thread 3720
>2007/08/16 10:47:49.234 5                job.cxx(354)   JOB     Worker
>threads: 10 total - 10 busy, 0 idle
>2007/08/16 10:47:49.234 1             RasSrv.cxx(368)   RAS     ARQ
>Received
>2007/08/16 10:47:49.234 4             gkauth.cxx(2153)  GKAUTH  PrefixAuth
>rule matched and  could not reject or accept destination prefix 'ALL' for
>alias
>'MCU_2.2.1:pink'
>2007/08/16 10:47:49.234 4             gkauth.cxx(2169)  GKAUTH  PrefixAuth
>could not reject or accept the request
>2007/08/16 10:47:49.234 5             gkauth.cxx(1191)  GKAUTH
>SimplePasswordAuth cached password found for 'MCU_2.2.1:pink'
>2007/08/16 10:47:49.250 5             gkauth.cxx(1241)  GKAUTH
>SimplePasswordAuth CAT password match for 'MCU_2.2.1:pink'
>2007/08/16 10:47:49.250 3             gkauth.cxx(964)   GKAUTH
>SimplePasswordAuth ARQ check ok
>2007/08/16 10:47:49.250 2             RasSrv.cxx(413)
>ARJ|149.156.97.26:7314|MCU_2.2.1:pink:h323_ID|luke44 (xxx)
>[149.156.97.26]:h323_ID|true|routeCallTo
>Gatekeeper;
>2007/08/16 10:47:49.265 3             RasSrv.cxx(250)   RAS     Send to
>149.156.97.26:5047
>admissionReject {
>     requestSeqNum = 17218
>     rejectReason = routeCallToGatekeeper <<null>>
>   }
>2007/08/16 10:47:49.281 5             RasSrv.cxx(264)   RAS     Sent
>Successful
>2007/08/16 10:47:49.281 5                job.cxx(417)   JOB     Job ARQ
>deleted
>
>
>**** When routed mode is disabled I get:
>
>
>2007/08/16 10:34:50.609 3             RasSrv.cxx(238)   RAS
>admissionRequest {
>     requestSeqNum = 17204
>     callType = pointToPoint <<null>>
>     endpointIdentifier =  9 characters {
>       0033 0031 0038 0035 005f 0065 006e 0064   3185_end
>       0070                                      p
>     }
>     destinationInfo = 1 entries {
>       [0]=h323_ID  14 characters {
>         004d 0043 0055 005f 0032 002e 0032 002e   MCU_2.2.
>         0031 003a 0070 0069 006e 006b             1:pink
>       }
>     }
>     destCallSignalAddress = ipAddress {
>       ip =  4 octets {
>         95 9c 61 1a                                        ..a.
>       }
>       port = 7314
>     }
>     srcInfo = 1 entries {
>       [0]=h323_ID  28 characters {
>         006c 0075 006b 0065 0034 0034 0020 0028   luke44 (
>         0078 0078 0078 0029 0020 005b 0031 0034   xxx) [14
>         0039 002e 0031 0035 0036 002e 0039 0037   9.156.97
>         002e 0032 0036 005d                       .26]
>       }
>     }
>     srcCallSignalAddress = ipAddress {
>       ip =  4 octets {
>         95 9c 61 1a                                        ..a.
>       }
>       port = 5049
>     }
>     bandWidth = 100000
>     callReferenceValue = 31026
>     conferenceID =  16 octets {
>       40 27 c0 d5 6a f9 18 10  96 6b 00 0c 6e 0a ee 4c   @'..j....k..n..L
>     }
>     activeMC = FALSE
>     answerCall = TRUE
>     canMapAlias = TRUE
>     callIdentifier = {
>       guid =  16 octets {
>         26 21 c0 d5 6a f9 18 10  96 6b 00 0c 6e 0a ee 4c
>&!..j....k..n..L
>       }
>     }
>     gatekeeperIdentifier =  12 characters {
>       004d 0020 0047 0061 0074 0065 006b 0065   M Gateke
>       0065 0070 0065 0072                       eper
>     }
>     tokens = 1 entries {
>       [0]={
>         tokenOID = 1.2.840.113548.10.1.2.1
>         timeStamp = 1187253290
>         challenge =  16 octets {
>           27 fd 87 1b bb 11 46 c4  e2 39 7e 0b 54 59 50 b5
>'.....F..9~.TYP.
>         }
>         random = 36
>         generalID =  15 characters {
>           004d 0043 0055 005f 0032 002e 0032 002e   MCU_2.2.
>           0031 003a 0070 0069 006e 006b 0000        1:pink
>         }
>       }
>     }
>     willSupplyUUIEs = TRUE
>     canMapSrcAlias = FALSE
>   }
>2007/08/16 10:34:50.734 5                job.cxx(354)   JOB     Worker
>threads: 4 total - 4 busy, 0 idle
>2007/08/16 10:34:50.734 5                job.cxx(180)   JOB     Starting
>Job ARQ at Worker thread 2892
>2007/08/16 10:34:50.734 1             RasSrv.cxx(368)   RAS     ARQ
>Received
>2007/08/16 10:34:50.734 4             gkauth.cxx(2153)  GKAUTH  PrefixAuth
>rule matched and  could not reject or accept destination prefix 'ALL' for
>alia
>'MCU_2.2.1:pink'
>2007/08/16 10:34:50.734 4             gkauth.cxx(2169)  GKAUTH  PrefixAuth
>could not reject or accept the request
>2007/08/16 10:34:50.750 5             gkauth.cxx(1191)  GKAUTH
>SimplePasswordAuth cached password found for 'MCU_2.2.1:pink'
>2007/08/16 10:34:50.750 5             gkauth.cxx(1241)  GKAUTH
>SimplePasswordAuth CAT password match for 'MCU_2.2.1:pink'
>2007/08/16 10:34:50.750 3             gkauth.cxx(964)   GKAUTH
>SimplePasswordAuth ARQ check ok
>2007/08/16 10:34:50.750 3             RasSrv.cxx(2137)  GK      ARQ will
>request bandwith of 100000
>2007/08/16 10:34:50.750 2             RasTbl.cxx(2291)
>CallTable::Insert(CALL) Call No. 1, total sessions : 1
>2007/08/16 10:34:50.750 2             RasSrv.cxx(413)
>ACF|149.156.97.26:7314|3185_endp|31026|MCU_2.2.1:pink:h323_ID|luke44 (xxx)
>[149.156.97.26]:h323_I
>true;
>2007/08/16 10:34:50.750 3             RasSrv.cxx(250)   RAS     Send to
>149.156.97.26:5047
>admissionConfirm {
>     requestSeqNum = 17204
>     bandWidth = 100000
>     callModel = direct <<null>>
>     destCallSignalAddress = ipAddress {
>       ip =  4 octets {
>         00 00 00 00                                        ....
>       }
>       port = 0
>     }
>     irrFrequency = 88
>     willRespondToIRR = FALSE
>     uuiesRequested = {
>       setup = FALSE
>       callProceeding = FALSE
>       connect = FALSE
>       alerting = FALSE
>       information = FALSE
>       releaseComplete = FALSE
>       facility = FALSE
>       progress = FALSE
>       empty = FALSE
>       status = FALSE
>       statusInquiry = FALSE
>       setupAcknowledge = FALSE
>       notify = FALSE
>     }
>     serviceControl = 1 entries {
>       [0]={
>         sessionId = 0
>         contents = callCreditServiceControl {
>           callStartingPoint = connect <<null>>
>         }
>         reason = refresh <<null>>
>       }
>     }
>   }
>2007/08/16 10:34:50.859 5             RasSrv.cxx(264)   RAS     Sent
>Successful
>2007/08/16 10:34:50.875 5                job.cxx(417)   JOB     Job ARQ
>deleted
>2007/08/16 10:34:50.875 5                job.cxx(406)   JOB     Worker
>threads: 4 total - 3 busy, 1 idle
>2007/08/16 10:34:51.109 5           yasocket.cxx(771)   RasSrv  1 sockets
>selected from 3, total 3/0
>2007/08/16 10:34:51.125 4             RasSrv.cxx(230)   RAS     Receiving
>on 149.156.97.26:1719(U)
>2007/08/16 10:34:51.125 2             RasSrv.cxx(189)   RAS     Read from
>149.156.97.26:5047
>2007/08/16 10:34:51.156 3             RasSrv.cxx(238)   RAS
>infoRequestResponse {
>     requestSeqNum = 17205
>     endpointType = {
>       vendor = {
>         vendor = {
>           t35CountryCode = 9
>           t35Extension = 0
>           manufacturerCode = 61
>         }
>         productId =  24 octets {
>           50 6f 73 74 20 49 6e 63  72 65 6d 65 6e 74 20 4f   Post
>Increment O
>           70 65 6e 4d 43 55 00 00                            penMCU..
>         }
>         versionId =  26 octets {
>           32 2e 32 2e 31 20 28 4f  70 65 6e 48 33 32 33 20   2.2.1
>(OpenH323
>           76 31 2e 31 39 2e 30 29  00 00                     v1.19.0)..
>         }
>       }
>       mcu = {
>       }
>       mc = TRUE
>       undefinedNode = FALSE
>     }
>     endpointIdentifier =  9 characters {
>       0033 0031 0038 0035 005f 0065 006e 0064   3185_end
>       0070                                      p
>     }
>     rasAddress = ipAddress {
>       ip =  4 octets {
>         95 9c 61 1a                                        ..a.
>       }
>       port = 5047
>     }
>     callSignalAddress = 2 entries {
>       [0]=ipAddress {
>         ip =  4 octets {
>           95 9c 61 1a                                        ..a.
>         }
>         port = 7314
>       }
>       [1]=ipAddress {
>         ip =  4 octets {
>           00 00 00 00                                        ....
>         }
>         port = 7314
>       }
>     }
>     endpointAlias = 1 entries {
>       [0]=h323_ID  14 characters {
>         004d 0043 0055 005f 0032 002e 0032 002e   MCU_2.2.
>         0031 003a 0070 0069 006e 006b             1:pink
>       }
>     }
>     perCallInfo = 1 entries {
>       [0]={
>         callReferenceValue = 31026
>         conferenceID =  16 octets {
>           40 27 c0 d5 6a f9 18 10  96 6b 00 0c 6e 0a ee 4c
>@'..j....k..n..L
>         }
>         originator = FALSE
>         audio = 1 entries {
>           [0]={
>             rtpAddress = {
>             }
>             rtcpAddress = {
>             }
>             cname = "SYSTEMpink"
>             ssrc = 2219868020
>             sessionId = 1
>             associatedSessionIds = 0 entries {
>             }
>           }
>         }
>         h245 = {
>         }
>         callSignaling = {
>         }
>         callType = pointToPoint <<null>>
>         bandWidth = 792
>         callModel = direct <<null>>
>         callIdentifier = {
>           guid =  16 octets {
>             26 21 c0 d5 6a f9 18 10  96 6b 00 0c 6e 0a ee 4c
>&!..j....k..n..L
>           }
>         }
>         substituteConfIDs = 0 entries {
>         }
>         usageInformation = {
>           nonStandardUsageFields = 0 entries {
>           }
>           connectTime = 1187253291
>         }
>       }
>     }
>     needResponse = FALSE
>     unsolicited = TRUE
>   }
>2007/08/16 10:34:51.406 5                job.cxx(180)   JOB     Starting
>Job IRR at Worker thread 2892
>2007/08/16 10:34:51.406 5                job.cxx(354)   JOB     Worker
>threads: 4 total - 4 busy, 0 idle
>2007/08/16 10:34:51.406 1             RasSrv.cxx(368)   RAS     IRR
>Received
>2007/08/16 10:34:51.406 5                job.cxx(417)   JOB     Job IRR
>deleted
>
>
>
> >Sorry for the delay in replying however I just tried using openMCU
> >registered with GnuGk and using an unregistered PacPhone (openH323 based)
> >calling the MCU. I get an ARJ from GnuGk with reason routetogatekeeper.
>
> >Can you post a level 5 Trace from GnuGk showing the problem?
>
>
>
>-------------------------------------------------------------------------
>This SF.net email is sponsored by: Splunk Inc.
>Still grepping through log files to find problems?  Stop.
>Now Search log events and configuration files using AJAX and a browser.
>Download your FREE copy of Splunk now >>  http://get.splunk.com/
>_______________________________________________________
>
>Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
>Archive: 
>http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
>Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
>Homepage: http://www.gnugk.org/



-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux