Re: Help with Gnugk authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

you can look at the gnugk executable with ldd ("ldd /path/to/gnugk") and
if it is dynamically linked, you will see the PTLib version. If its
below 2.2.0, then your executable is probably ok.

Regards,
Jan


Natasa Radeka wrote:
> Hi Jan,
> 
> Thank you for your response.
> I installed Gnugk with Synaptic Package Manager. Wouldn't it install all
> necessary packages as well?
> About PTLib, I have previously installed PTLib-v1.12.0, to work with
> H323plus 1.19.7. Than I added openH323 from asterisk addons. This
> combination works well in any other case, except when it comes to this
> password. I don't know how to check if the problem is really in this
> library.
> 
> Regards,
> Natasa
> 
> 
> 2010/3/30 Jan Willamowius <jan@xxxxxxxxxxxxxx>
> 
> > Hi Natasa,
> >
> > all passwords in a GnuGk configs must be encrypted using addpasswd.
> >
> > Also, if you compile GnuGk yourself, please make sure your GnuGk is
> > compiled with a PTLib version that properly calculates the MD5 hashes
> > inside the crypto tokens.
> >
> > There are a few notes on this at
> > http://www.gnugk.org/compiling-gnugk.html
> >
> > Regards,
> > Jan
> >
> >
> > Natasa Radeka wrote:
> > > Hi,
> > >
> > > I am working with two Gnugks on two separate machines. The first Gnugk
> > > registers with a second (parent) Gnugk as a Gateway. When there is no
> > > authentication required, everything works fine.
> > > But now I am trying to implement user/password authentication and I can't
> > > seem to get it. I've tried with "SimplePasswordAuth" but for some reason
> > it
> > > doesn't work. I'm not even sure if the problem is on child or parent
> > side.
> > > I'm also not completely clear if use of "addpasswd" is required on
> > child's
> > > side.
> > > Here are my configurations.
> > >
> > > *Child Gnugk:*
> > >
> > > [Gatekeeper::Main]
> > >
> > > FortyTwo=42
> > >
> > > [GkStatus::Auth]
> > >
> > > rule=allow
> > >
> > >
> > > [RoutedMode]
> > >
> > > GKRouted=1
> > >
> > > H245Routed=1
> > >
> > > CallSignalPort=1720
> > >
> > > AcceptUnregisteredCalls=1
> > >
> > >
> > >
> > > [Endpoint]
> > >
> > > Gatekeeper=192.168.xxx.xxx
> > >
> > > Type=Gateway
> > >
> > > RRQRetryInterval=10
> > >
> > > Vendor=Generic
> > >
> > > H323ID=my_name
> > >
> > > E164=8
> > >
> > > TimeToLive=900
> > >
> > > *Password=my_password * * *        // Should this be added with
> > addpasswd?
> > >
> > >
> > > [RoutingPolicy]
> > >
> > > default=explicit,internal,parent,dns
> > >
> > >  *
> > > *
> > >
> > >
> > > *Parent Gnugk:*
> > >
> > >
> > >
> > > [Gatekeeper::Main]
> > >
> > > FortyTwo=42
> > >
> > > [GkStatus::Auth]
> > >
> > > rule=allow
> > >
> > >
> > >  [RoutedMode]
> > >
> > > GKRouted=1
> > >
> > > H245Routed=1
> > >
> > > CallSignalPort=1720
> > >
> > > AcceptUnregisteredCalls=1
> > >
> > >
> > >
> > > *[Gatekeeper::Auth]*
> > >
> > > *SimplePasswordAuth=required;RRQ*
> > >
> > >
> > >
> > > *[SimplePasswordAuth]*
> > >
> > > *my_name= xxxxxxxxxxxx  *       // Added with addpasswd
> > >
> > >
> > >
> > >  [RoutingPolicy]
> > >                    default=explicit,internal,parent,dns
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > *In child's log file I've found this:*
> > >
> > > registrationRequest {
> > >
> > >     requestSeqNum = 2
> > >
> > >     protocolIdentifier = 0.0.8.2250.0.2
> > >
> > >     discoveryComplete = TRUE
> > >
> > >     callSignalAddress = 1 entries {
> > >
> > >       [0]=ipAddress {
> > >
> > >         ip =  4 octets {
> > >
> > >           c0 a8 2c ca                                        ..,.
> > >
> > >         }
> > >
> > >         port = 1720
> > >
> > >       }
> > >
> > >     }
> > >
> > >     rasAddress = 1 entries {
> > >
> > >       [0]=ipAddress {
> > >
> > >         ip =  4 octets {
> > >
> > >           c0 a8 2c ca                                        ..,.
> > >
> > >         }
> > >
> > >         port = 1719
> > >
> > >       }
> > >
> > >     }
> > >
> > >     terminalType = {
> > >
> > >       gatekeeper = {
> > >
> > >       }
> > >
> > >       gateway = {
> > >
> > >       }
> > >
> > >       mc = FALSE
> > >
> > >       undefinedNode = FALSE
> > >
> > >     }
> > >
> > >     terminalAlias = 2 entries {
> > >
> > >       [0]=h323_ID  8 characters {
> > >
> > >         0054 0065 0073 0074 0062 006f 006f 006b   Testbook
> > >
> > >       }
> > >
> > >       [1]=dialedDigits "8"
> > >
> > >     }
> > >
> > >     gatekeeperIdentifier =  10 characters {
> > >
> > >       004f 0070 0065 006e 0048 0033 0032 0033   OpenH323
> > >
> > >       0047 004b                                 GK
> > >
> > >     }
> > >
> > >     endpointVendor = {
> > >
> > >       vendor = {
> > >
> > >         t35CountryCode = 0
> > >
> > >         t35Extension = 0
> > >
> > >         manufacturerCode = 0
> > >
> > >       }
> > >
> > >       productId =  68 octets {
> > >
> > >         47 4e 55 20 47 61 74 65  6b 65 65 70 65 72 20 6f   GNU Gatekeeper
> > o
> > >
> > >         6e 20 4c 69 6e 75 78 20  69 36 38 36 20 32 2e 36   n Linux i686
> > 2.6
> > >
> > >         2e 32 38 2d 31 31 2d 67  65 6e 65 72 69 63 2c 20
> > .28-11-generic,
> > >
> > >         4e 6f 76 20 20 36 20 32  30 30 38 20 30 34 3a 33   Nov  6 2008
> > 04:3
> > >
> > >         32 3a 33 35                                        2:35
> > >
> > >       }
> > >
> > >       versionId =  13 octets {
> > >
> > >         56 65 72 73 69 6f 6e 20  32 2e 32 2e 37            Version 2.2.7
> > >
> > >       }
> > >
> > >     }
> > >
> > >     timeToLive = 900
> > >
> > >     cryptoTokens = 2 entries {
> > >
> > >       [0]=nestedcryptoToken cryptoHashedToken {
> > >
> > >         tokenOID = 0.0.8.235.0.2.1
> > >
> > >         hashedVals = {
> > >
> > >           tokenOID = 0.0.8.235.0.2.5
> > >
> > >           timeStamp = 1269868485
> > >
> > >           random = 979417018
> > >
> > >           sendersID =  8 characters {
> > >
> > >             0054 0065 0073 0074 0062 006f 006f 006b   Testbook
> > >
> > >           }
> > >
> > >         }
> > >
> > >         token = {
> > >
> > >           algorithmOID = 0.0.8.235.0.2.6
> > >
> > >           paramS = {
> > >
> > >           }
> > >
> > >           hash = Hex:  74 57 65 6c 56 65 7e 62  79 74 65 53
> > >
> > >         }
> > >
> > >       }
> > >
> > >       [1]=nestedcryptoToken cryptoHashedToken {
> > >
> > >         tokenOID = 0.0.8.235.0.2.1
> > >
> > >         hashedVals = {
> > >
> > >           tokenOID = 0.0.8.235.0.2.5
> > >
> > >           timeStamp = 1269868485
> > >
> > >           random = 1667174368
> > >
> > >           sendersID =  8 characters {
> > >
> > >             0054 0065 0073 0074 0062 006f 006f 006b   Testbook
> > >
> > >           }
> > >
> > >         }
> > >
> > >         token = {
> > >
> > >           algorithmOID = 0.0.8.235.0.2.6
> > >
> > >           paramS = {
> > >
> > >           }
> > >
> > >           hash = Hex:  74 57 65 6c 56 65 7e 62  79 74 65 53
> > >
> > >         }
> > >
> > >       }
> > >
> > >     }
> > >
> > >     keepAlive = FALSE
> > >
> > >     willSupplyUUIEs = FALSE
> > >
> > >     maintainConnection = FALSE
> > >
> > >     supportsAltGK = <<null>>
> > >
> > >   }
> > >
> > > 2010/03/29 15:14:45.185        2                RasSrv.cxx(191)    RAS
> >   Read
> > > from 192.168.44.15:1719
> > >
> > > 2010/03/29 15:14:45.186        3                RasSrv.cxx(240)    RAS
> > >
> > >
> > >
> > >
> > > registrationReject {
> > >
> > >     requestSeqNum = 2
> > >
> > >     protocolIdentifier = 0.0.8.2250.0.2
> > >
> > >     rejectReason = securityDenial <<null>>
> > >
> > >     gatekeeperIdentifier =  10 characters {
> > >
> > >       004f 0070 0065 006e 0048 0033 0032 0033   OpenH323
> > >
> > >       0047 004b                                 GK
> > >
> > >     }
> > >
> > >   }
> > >
> > > 2010/03/29 15:14:45.186        2                RasSrv.cxx(1354)  RAS
> > >    Trapped
> > > RRJ
> > >
> > > 2010/03/29 15:14:45.186        1              GkClient.cxx(1097) GKC
> > >  Registration
> > > Rejected: securityDenial
> > >
> > > * *
> > >
> > >
> > >
> > >
> > > I am working on Ubuntu 9.04 and using Gnugk 2.2.7 from repository.
> > >
> > > I would be very grateful for any help you can provide.
> > >
> > > Best Regards,
> > > Natasha
> >
> >
> > --
> > Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/

-- 
Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux