Re: Help with Gnugk authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Jan,

Thank you for your response.
I installed Gnugk with Synaptic Package Manager. Wouldn't it install all necessary packages as well?
About PTLib, I have previously installed PTLib-v1.12.0, to work with H323plus 1.19.7. Than I added openH323 from asterisk addons. This combination works well in any other case, except when it comes to this password. I don't know how to check if the problem is really in this library.

Regards,
Natasa


2010/3/30 Jan Willamowius <jan@xxxxxxxxxxxxxx>
Hi Natasa,

all passwords in a GnuGk configs must be encrypted using addpasswd.

Also, if you compile GnuGk yourself, please make sure your GnuGk is
compiled with a PTLib version that properly calculates the MD5 hashes
inside the crypto tokens.

There are a few notes on this at
http://www.gnugk.org/compiling-gnugk.html

Regards,
Jan


Natasa Radeka wrote:
> Hi,
>
> I am working with two Gnugks on two separate machines. The first Gnugk
> registers with a second (parent) Gnugk as a Gateway. When there is no
> authentication required, everything works fine.
> But now I am trying to implement user/password authentication and I can't
> seem to get it. I've tried with "SimplePasswordAuth" but for some reason it
> doesn't work. I'm not even sure if the problem is on child or parent side.
> I'm also not completely clear if use of "addpasswd" is required on child's
> side.
> Here are my configurations.
>
> *Child Gnugk:*
>
> [Gatekeeper::Main]
>
> FortyTwo=42
>
> [GkStatus::Auth]
>
> rule=allow
>
>
> [RoutedMode]
>
> GKRouted=1
>
> H245Routed=1
>
> CallSignalPort=1720
>
> AcceptUnregisteredCalls=1
>
>
>
> [Endpoint]
>
> Gatekeeper=192.168.xxx.xxx
>
> Type=Gateway
>
> RRQRetryInterval=10
>
> Vendor=Generic
>
> H323ID=my_name
>
> E164=8
>
> TimeToLive=900
>
> *Password=my_password * * *        // Should this be added with addpasswd?
>
>
> [RoutingPolicy]
>
> default=explicit,internal,parent,dns
>
>  *
> *
>
>
> *Parent Gnugk:*
>
>
>
> [Gatekeeper::Main]
>
> FortyTwo=42
>
> [GkStatus::Auth]
>
> rule=allow
>
>
>  [RoutedMode]
>
> GKRouted=1
>
> H245Routed=1
>
> CallSignalPort=1720
>
> AcceptUnregisteredCalls=1
>
>
>
> *[Gatekeeper::Auth]*
>
> *SimplePasswordAuth=required;RRQ*
>
>
>
> *[SimplePasswordAuth]*
>
> *my_name= xxxxxxxxxxxx  *       // Added with addpasswd
>
>
>
>  [RoutingPolicy]
>                    default=explicit,internal,parent,dns
>
>
>
>
>
>
>
> *In child's log file I've found this:*
>
> registrationRequest {
>
>     requestSeqNum = 2
>
>     protocolIdentifier = 0.0.8.2250.0.2
>
>     discoveryComplete = TRUE
>
>     callSignalAddress = 1 entries {
>
>       [0]=ipAddress {
>
>         ip =  4 octets {
>
>           c0 a8 2c ca                                        ..,.
>
>         }
>
>         port = 1720
>
>       }
>
>     }
>
>     rasAddress = 1 entries {
>
>       [0]=ipAddress {
>
>         ip =  4 octets {
>
>           c0 a8 2c ca                                        ..,.
>
>         }
>
>         port = 1719
>
>       }
>
>     }
>
>     terminalType = {
>
>       gatekeeper = {
>
>       }
>
>       gateway = {
>
>       }
>
>       mc = FALSE
>
>       undefinedNode = FALSE
>
>     }
>
>     terminalAlias = 2 entries {
>
>       [0]=h323_ID  8 characters {
>
>         0054 0065 0073 0074 0062 006f 006f 006b   Testbook
>
>       }
>
>       [1]=dialedDigits "8"
>
>     }
>
>     gatekeeperIdentifier =  10 characters {
>
>       004f 0070 0065 006e 0048 0033 0032 0033   OpenH323
>
>       0047 004b                                 GK
>
>     }
>
>     endpointVendor = {
>
>       vendor = {
>
>         t35CountryCode = 0
>
>         t35Extension = 0
>
>         manufacturerCode = 0
>
>       }
>
>       productId =  68 octets {
>
>         47 4e 55 20 47 61 74 65  6b 65 65 70 65 72 20 6f   GNU Gatekeeper o
>
>         6e 20 4c 69 6e 75 78 20  69 36 38 36 20 32 2e 36   n Linux i686 2.6
>
>         2e 32 38 2d 31 31 2d 67  65 6e 65 72 69 63 2c 20   .28-11-generic,
>
>         4e 6f 76 20 20 36 20 32  30 30 38 20 30 34 3a 33   Nov  6 2008 04:3
>
>         32 3a 33 35                                        2:35
>
>       }
>
>       versionId =  13 octets {
>
>         56 65 72 73 69 6f 6e 20  32 2e 32 2e 37            Version 2.2.7
>
>       }
>
>     }
>
>     timeToLive = 900
>
>     cryptoTokens = 2 entries {
>
>       [0]=nestedcryptoToken cryptoHashedToken {
>
>         tokenOID = 0.0.8.235.0.2.1
>
>         hashedVals = {
>
>           tokenOID = 0.0.8.235.0.2.5
>
>           timeStamp = 1269868485
>
>           random = 979417018
>
>           sendersID =  8 characters {
>
>             0054 0065 0073 0074 0062 006f 006f 006b   Testbook
>
>           }
>
>         }
>
>         token = {
>
>           algorithmOID = 0.0.8.235.0.2.6
>
>           paramS = {
>
>           }
>
>           hash = Hex:  74 57 65 6c 56 65 7e 62  79 74 65 53
>
>         }
>
>       }
>
>       [1]=nestedcryptoToken cryptoHashedToken {
>
>         tokenOID = 0.0.8.235.0.2.1
>
>         hashedVals = {
>
>           tokenOID = 0.0.8.235.0.2.5
>
>           timeStamp = 1269868485
>
>           random = 1667174368
>
>           sendersID =  8 characters {
>
>             0054 0065 0073 0074 0062 006f 006f 006b   Testbook
>
>           }
>
>         }
>
>         token = {
>
>           algorithmOID = 0.0.8.235.0.2.6
>
>           paramS = {
>
>           }
>
>           hash = Hex:  74 57 65 6c 56 65 7e 62  79 74 65 53
>
>         }
>
>       }
>
>     }
>
>     keepAlive = FALSE
>
>     willSupplyUUIEs = FALSE
>
>     maintainConnection = FALSE
>
>     supportsAltGK = <<null>>
>
>   }
>
> 2010/03/29 15:14:45.185        2                RasSrv.cxx(191)    RAS     Read
> from 192.168.44.15:1719
>
> 2010/03/29 15:14:45.186        3                RasSrv.cxx(240)    RAS
>
>
>
>
> registrationReject {
>
>     requestSeqNum = 2
>
>     protocolIdentifier = 0.0.8.2250.0.2
>
>     rejectReason = securityDenial <<null>>
>
>     gatekeeperIdentifier =  10 characters {
>
>       004f 0070 0065 006e 0048 0033 0032 0033   OpenH323
>
>       0047 004b                                 GK
>
>     }
>
>   }
>
> 2010/03/29 15:14:45.186        2                RasSrv.cxx(1354)  RAS
>    Trapped
> RRJ
>
> 2010/03/29 15:14:45.186        1              GkClient.cxx(1097) GKC
>  Registration
> Rejected: securityDenial
>
> * *
>
>
>
>
> I am working on Ubuntu 9.04 and using Gnugk 2.2.7 from repository.
>
> I would be very grateful for any help you can provide.
>
> Best Regards,
> Natasha


--
Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux