Re: Help with Gnugk authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Natasa,

all passwords in a GnuGk configs must be encrypted using addpasswd.

Also, if you compile GnuGk yourself, please make sure your GnuGk is
compiled with a PTLib version that properly calculates the MD5 hashes
inside the crypto tokens.

There are a few notes on this at
http://www.gnugk.org/compiling-gnugk.html

Regards,
Jan


Natasa Radeka wrote:
> Hi,
> 
> I am working with two Gnugks on two separate machines. The first Gnugk
> registers with a second (parent) Gnugk as a Gateway. When there is no
> authentication required, everything works fine.
> But now I am trying to implement user/password authentication and I can't
> seem to get it. I've tried with "SimplePasswordAuth" but for some reason it
> doesn't work. I'm not even sure if the problem is on child or parent side.
> I'm also not completely clear if use of "addpasswd" is required on child's
> side.
> Here are my configurations.
> 
> *Child Gnugk:*
> 
> [Gatekeeper::Main]
> 
> FortyTwo=42
> 
> [GkStatus::Auth]
> 
> rule=allow
> 
> 
> [RoutedMode]
> 
> GKRouted=1
> 
> H245Routed=1
> 
> CallSignalPort=1720
> 
> AcceptUnregisteredCalls=1
> 
> 
> 
> [Endpoint]
> 
> Gatekeeper=192.168.xxx.xxx
> 
> Type=Gateway
> 
> RRQRetryInterval=10
> 
> Vendor=Generic
> 
> H323ID=my_name
> 
> E164=8
> 
> TimeToLive=900
> 
> *Password=my_password * * *        // Should this be added with addpasswd?
> 
> 
> [RoutingPolicy]
> 
> default=explicit,internal,parent,dns
> 
>  *
> *
> 
> 
> *Parent Gnugk:*
> 
> 
> 
> [Gatekeeper::Main]
> 
> FortyTwo=42
> 
> [GkStatus::Auth]
> 
> rule=allow
> 
> 
>  [RoutedMode]
> 
> GKRouted=1
> 
> H245Routed=1
> 
> CallSignalPort=1720
> 
> AcceptUnregisteredCalls=1
> 
> 
> 
> *[Gatekeeper::Auth]*
> 
> *SimplePasswordAuth=required;RRQ*
> 
> 
> 
> *[SimplePasswordAuth]*
> 
> *my_name= xxxxxxxxxxxx  *       // Added with addpasswd
> 
> 
> 
>  [RoutingPolicy]
>                    default=explicit,internal,parent,dns
> 
> 
> 
> 
> 
> 
> 
> *In child's log file I've found this:*
> 
> registrationRequest {
> 
>     requestSeqNum = 2
> 
>     protocolIdentifier = 0.0.8.2250.0.2
> 
>     discoveryComplete = TRUE
> 
>     callSignalAddress = 1 entries {
> 
>       [0]=ipAddress {
> 
>         ip =  4 octets {
> 
>           c0 a8 2c ca                                        ..,.
> 
>         }
> 
>         port = 1720
> 
>       }
> 
>     }
> 
>     rasAddress = 1 entries {
> 
>       [0]=ipAddress {
> 
>         ip =  4 octets {
> 
>           c0 a8 2c ca                                        ..,.
> 
>         }
> 
>         port = 1719
> 
>       }
> 
>     }
> 
>     terminalType = {
> 
>       gatekeeper = {
> 
>       }
> 
>       gateway = {
> 
>       }
> 
>       mc = FALSE
> 
>       undefinedNode = FALSE
> 
>     }
> 
>     terminalAlias = 2 entries {
> 
>       [0]=h323_ID  8 characters {
> 
>         0054 0065 0073 0074 0062 006f 006f 006b   Testbook
> 
>       }
> 
>       [1]=dialedDigits "8"
> 
>     }
> 
>     gatekeeperIdentifier =  10 characters {
> 
>       004f 0070 0065 006e 0048 0033 0032 0033   OpenH323
> 
>       0047 004b                                 GK
> 
>     }
> 
>     endpointVendor = {
> 
>       vendor = {
> 
>         t35CountryCode = 0
> 
>         t35Extension = 0
> 
>         manufacturerCode = 0
> 
>       }
> 
>       productId =  68 octets {
> 
>         47 4e 55 20 47 61 74 65  6b 65 65 70 65 72 20 6f   GNU Gatekeeper o
> 
>         6e 20 4c 69 6e 75 78 20  69 36 38 36 20 32 2e 36   n Linux i686 2.6
> 
>         2e 32 38 2d 31 31 2d 67  65 6e 65 72 69 63 2c 20   .28-11-generic,
> 
>         4e 6f 76 20 20 36 20 32  30 30 38 20 30 34 3a 33   Nov  6 2008 04:3
> 
>         32 3a 33 35                                        2:35
> 
>       }
> 
>       versionId =  13 octets {
> 
>         56 65 72 73 69 6f 6e 20  32 2e 32 2e 37            Version 2.2.7
> 
>       }
> 
>     }
> 
>     timeToLive = 900
> 
>     cryptoTokens = 2 entries {
> 
>       [0]=nestedcryptoToken cryptoHashedToken {
> 
>         tokenOID = 0.0.8.235.0.2.1
> 
>         hashedVals = {
> 
>           tokenOID = 0.0.8.235.0.2.5
> 
>           timeStamp = 1269868485
> 
>           random = 979417018
> 
>           sendersID =  8 characters {
> 
>             0054 0065 0073 0074 0062 006f 006f 006b   Testbook
> 
>           }
> 
>         }
> 
>         token = {
> 
>           algorithmOID = 0.0.8.235.0.2.6
> 
>           paramS = {
> 
>           }
> 
>           hash = Hex:  74 57 65 6c 56 65 7e 62  79 74 65 53
> 
>         }
> 
>       }
> 
>       [1]=nestedcryptoToken cryptoHashedToken {
> 
>         tokenOID = 0.0.8.235.0.2.1
> 
>         hashedVals = {
> 
>           tokenOID = 0.0.8.235.0.2.5
> 
>           timeStamp = 1269868485
> 
>           random = 1667174368
> 
>           sendersID =  8 characters {
> 
>             0054 0065 0073 0074 0062 006f 006f 006b   Testbook
> 
>           }
> 
>         }
> 
>         token = {
> 
>           algorithmOID = 0.0.8.235.0.2.6
> 
>           paramS = {
> 
>           }
> 
>           hash = Hex:  74 57 65 6c 56 65 7e 62  79 74 65 53
> 
>         }
> 
>       }
> 
>     }
> 
>     keepAlive = FALSE
> 
>     willSupplyUUIEs = FALSE
> 
>     maintainConnection = FALSE
> 
>     supportsAltGK = <<null>>
> 
>   }
> 
> 2010/03/29 15:14:45.185        2                RasSrv.cxx(191)    RAS     Read
> from 192.168.44.15:1719
> 
> 2010/03/29 15:14:45.186        3                RasSrv.cxx(240)    RAS
> 
> 
> 
> 
> registrationReject {
> 
>     requestSeqNum = 2
> 
>     protocolIdentifier = 0.0.8.2250.0.2
> 
>     rejectReason = securityDenial <<null>>
> 
>     gatekeeperIdentifier =  10 characters {
> 
>       004f 0070 0065 006e 0048 0033 0032 0033   OpenH323
> 
>       0047 004b                                 GK
> 
>     }
> 
>   }
> 
> 2010/03/29 15:14:45.186        2                RasSrv.cxx(1354)  RAS
>    Trapped
> RRJ
> 
> 2010/03/29 15:14:45.186        1              GkClient.cxx(1097) GKC
>  Registration
> Rejected: securityDenial
> 
> * *
> 
> 
> 
> 
> I am working on Ubuntu 9.04 and using Gnugk 2.2.7 from repository.
> 
> I would be very grateful for any help you can provide.
> 
> Best Regards,
> Natasha


-- 
Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux