Re: Xmeeting 0.3.4a registration fails: needs one of H235AnnexD_Procedure1<active>, CAT<disabled>, MD5<disabled>

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Or the other alternative is to use
[Gatekeeper::Main]
Authenticators=MD5,H235.1,CAT

This will change the priority and give preference to the MD5 method over
H.235.1. This should resolve the issue for older openh323/h323plus clients. 
Another problem maybe the gatekeeper and client time (UCT) may be out.
H.235.1 is sensitive to time being out between the client and the
gatekeeper.

Simon

-----Original Message-----
From: Jan Willamowius [mailto:jan@xxxxxxxxxxxxxx] 
Sent: 22 July 2013 16:58
To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Subject: Re:  Xmeeting 0.3.4a registration fails: needs
one of H235AnnexD_Procedure1<active>, CAT<disabled>, MD5<disabled>

Hi Lawrence,

from the log you can see that GnuGk accepts the registration from Xmeeting.
Xmeeting is looking for a crypto token from GnuGk and I think thats a bug
old OpenH323 versions had. Can you say which version of OpenH323/H323Plus
Xmeeting was compiled with ?

Alternatively, you can switch to another form of access control, eg. by IP,
to bypass the issue.

Regards,
Jan

--
Jan Willamowius, Founder of the GNU Gatekeeper Project EMail  :
jan@xxxxxxxxxxxxxx
Website: http://www.gnugk.org
Support: http://www.willamowius.com/gnugk-support.html


Lawrence Cockburn wrote:
> Using GNU Gatekeeper 3.0.2 package on Debian Wheezy
>
(Ext(pthreads=1,radius=1,mysql=1,pgsql=1,firebird=1,odbc=0,sqlite=1,large_fd
set=0,crypto/ssl=1,h46018=0,h46023=0,ldap=1,ssh=1,ipv6=1,h235media=0)
H323Plus(1.24.0) PTLib(2.10.4) Build(Oct  1 2012, 03:39:11) Sys(Linux x86_64
3.2.0-4-amd64))
> and Xmeeting 0.3.4a on OSX 10.8.4, with gatekeeper.ini
> 
> ----------------------------------
> [Gatekeeper::Main]
> Fortytwo=42
> Name=GnuGk
> TimeToLive=1200
> EnableTTLRestrictions=0
> ExternalIP=xxx.xxx.xxx.xxx
> 
> [GkStatus::Auth]
> rule=explicit
> 127.0.0.1=allow
> default=forbid
> 
> [RoutedMode]
> SupportNATedEndpoints=1
> 
> [Gatekeeper::Auth]
> SQLPasswordAuth=required;RRQ
> 
> [SQLPasswordAuth]
> Driver=MySQL
> Host=localhost
> Database=xxxxx
> Username=xxxxx
> Password=xxxxx
> Query=SELECT password FROM users WHERE username = '%1'
> CacheTimeout=300
> MinPoolSize=5
> 
> [FileIPAuth]
> any=allow
> ----------------------------------
> 
> I get from the Xmeeting log when trying to register it to the gatekeeper:
> ----------------------------------
>   0:00.903	Transactor...tor:ace5d0	   h323trans.cxx(577)	Trans
Using credentials from request:
H235AnnexD_Procedure1<active>,CAT<disabled>,MD5<disabled>
>   0:00.903	Transactor...tor:ace5d0	    h235auth.cxx(401)	H235RAS
Received unsecured RAS message (no crypto tokens), need one of:
> H235AnnexD_Procedure1<active>,CAT<disabled>,MD5<disabled>
>   0:00.903	XMeeting.app	   h323trans.cxx(656)	Trans	Response to
seqnum=13301 had invalid crypto tokens.
>   0:00.903	XMeeting.app	    gkclient.cxx(1053)	RAS	Failed
registration of  with GnuGk
> ----------------------------------
> 
> Related to this may be this from the gatekeeper log:
> 2013/07/22 08:28:05.237	2	    h235auth.cxx(272)	RAS
Authenticator H.235.1<no-pwd> not active during SetCapability negotiation
> 
> Gatekeeper itself does not complain, 
> (2013/07/22 08:29:26.418	3	      gkauth.cxx(953)	GKAUTH
SQLPasswordAuth RRQ check ok)
> it just closes the connection after some time, after successfully sending
the registration confirm message
> registrationConfirm {..}.
> 
> What option do I need to use in the gatekeeper.ini, or do I need to
compile the gatekeeper with some option enabled?
> 
> Best Regards
> 
> Lawrence

----------------------------------------------------------------------------
--
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/


------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/




[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux