Hi Jan,
Sorry about the delay, been playing doctors & nurses with some medical problems.
Here is a registrationRequest and registrationReject:
2010/03/16 12:11:01.886 2 RasSrv.cxx(175) RAS Read
from xxx.xxx.177.12:20001
2010/03/16 12:11:01.886 3 RasSrv.cxx(224) RAS
registrationRequest {
requestSeqNum = 39804
protocolIdentifier = 0.0.8.2250.0.3
discoveryComplete = false
callSignalAddress = 1 entries {
[0]=ipAddress {
ip = 4 octets {
xx xx xx xx ....
}
port = 1720
}
}
rasAddress = 1 entries {
[0]=ipAddress {
ip = 4 octets {
xx xx xx xx ....
}
port = 20001
}
}
terminalType = {
gateway = {
protocol = 1 entries {
[0]=h323 {
supportedPrefixes = 1 entries {
[0]={
nonStandardData = {
nonStandardIdentifier = h221NonStandard {
t35CountryCode = 181
t35Extension = 0
manufacturerCode = 1831
}
data = 12 octets {
00 01 00 01 01 00 02 01 02 1b 01 00
............
}
}
prefix = dialedDigits "617xxxxxxxx"
}
}
}
}
}
mc = false
undefinedNode = false
}
terminalAlias = 1 entries {
[0]=h323_ID 14 characters {
00xx 00xx 00xx 00xx 00xx 00xx 00xx 002e xxx.xxx.
0031 0037 0037 002e 0031 0032 177.12
}
}
endpointVendor = {
vendor = {
t35CountryCode = 181
t35Extension = 0
manufacturerCode = 1831
}
productId = 41 octets {
54 65 6e 6f 72 20 41 53 4d 34 30 30 20 41 53 4d Tenor
ASM400 ASM
34 30 30 20 56 6f 49 50 20 4d 75 6c 74 69 50 61 400 VoIP
MultiPa
74 68 20 53 77 69 74 63 68 th Switch
}
versionId = 5 octets {
33 2e 31 2e 31 3.1.1
}
}
keepAlive = false
endpointIdentifier = 10 characters {
0030 0030 003a 0030 0030 003a 0032 0034 00:00:24
002e 0031 .1
}
willSupplyUUIEs = false
maintainConnection = false
alternateTransportAddresses = {
}
}
2010/03/16 12:11:01.886 1 RasSrv.cxx(354) RAS RRQ
Received from xxx.xxx.177.12:20001
2010/03/16 12:11:01.887 2 RasSrv.cxx(394)
RRJ|xxx.xxx.177.12|xxx.xxx.177.12:h323_ID|gateway|securityDenial;
2010/03/16 12:11:01.887 3 RasSrv.cxx(236) RAS Send
to xxx.xxx.177.12:20001
registrationReject {
requestSeqNum = 39804
protocolIdentifier = 0.0.8.2250.0.3
rejectReason = securityDenial <<null>>
gatekeeperIdentifier = 5 characters {
0047 006e 0075 0047 006b GnuGk
}
}
I now also have the problem of the gatekeeper running at 100% cpu.
Runs fine for a while then the cpu load goes up, a reload fixes it
mostly for a while. I can start another thread for this if you like.
Thanks.
Ian.
On Fri, Feb 12, 2010 at 6:48 PM, Jan Willamowius <jan@xxxxxxxxxxxxxx> wrote:
> Hi,
>
> the security denial usually happens when authentication fails. But you
> don't have any authentication set up, so it could be that a gateway
> sends H.235 credentials when GnuGk doesn't expect any. (You cut away
> the actual registrationRequest from the trace, so we can't see this.)
>
> The other cause for a security denial can be when GnuGk looks up the
> endpoint ID from the registration and finds it already has one from
> a different call signalling address. This can happen for example if a
> gateway sends broken endpoint IDs.
>
> Regards,
> Jan
>
>
> Ian wrote:
>> Hi Jan,
>>
>> Thanks for the quick response.
>>
>> > there is definitely no limit on the number of registrations in GnuGk.
>>
>> It is what I assumed.
>>
>> I can now see I have more than one problem.
>>
>>
>> The Quintum ASM400 gateway below will register to my secondary GnuGk,
>> which is the same config as the primary, except for some IPs.
>>
>> Primary:
>> 2010/02/12 12:27:37.159 1 RasSrv.cxx(354) RAS RRQ Received from
>> xxx.xxx.177.20:20001
>> 2010/02/12 12:27:37.159 2 RasSrv.cxx(394)
>> RRJ|xxx.xxx.177.20|xxx.xxx.177.20:h323_ID|gateway|securityDenial;
>> 2010/02/12 12:27:37.160 3 RasSrv.cxx(236) RAS Send to xxx.xxx.177.20:20001
>> registrationReject {
>> requestSeqNum = 10681
>> protocolIdentifier = 0.0.8.2250.0.3
>> rejectReason = securityDenial <<null>>
>> gatekeeperIdentifier = 5 characters {
>> 0047 006e 0075 0047 006b GnuGk
>> }
>> }
>>
>> Secondary:
>> 2010/02/12 14:06:40.621 1 RasSrv.cxx(354) RAS RRQ Received from
>> xxx.xxx.177.20:20001
>> 2010/02/12 14:06:40.622 3 RasSrv.cxx(236) RAS Send to xxx.xxx.177.20:20001
>> registrationConfirm {
>> requestSeqNum = 10876
>> protocolIdentifier = 0.0.8.2250.0.3
>> callSignalAddress = 1 entries {
>> [0]=ipAddress {
>> ip = 4 octets {
>> xx xx 22 59 .."Y
>> }
>> port = 0
>> }
>> }
>>
>> I'm not sure what to look for with the "securityDenial" in the gateway config.
>>
>>
>> Also, I have a Quintum AXM1600 gateway that logs as:
>>
>> 2010/02/12 14:11:45.610 1 RasSrv.cxx(178) RAS Could
>> not decode message from xxx.xxx.55.9:20001
>> 2010/02/12 14:11:48.622 2 RasSrv.cxx(175) RAS Read
>> from xxx.xxx.55.9:20001
>>
>>
>> I have more gateways that don't seem to appear in the logs, yet.
>>
>>
>> Thanks.
>>
>> Ian.
>
> --
> Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/
>
> ------------------------------------------------------------------------------
> SOLARIS 10 is the OS for Data Centers - provides features such as DTrace,
> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
> http://p.sf.net/sfu/solaris-dev2dev
> _______________________________________________________
>
> Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
> Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
> Homepage: http://www.gnugk.org/
>
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________________
Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/
