Or the other alternative is to use [Gatekeeper::Main] Authenticators=MD5,H235.1,CAT This will change the priority and give preference to the MD5 method over H.235.1. This should resolve the issue for older openh323/h323plus clients. Another problem maybe the gatekeeper and client time (UCT) may be out. H.235.1 is sensitive to time being out between the client and the gatekeeper. Simon -----Original Message----- From: Jan Willamowius [mailto:jan@xxxxxxxxxxxxxx] Sent: 22 July 2013 16:58 To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: Xmeeting 0.3.4a registration fails: needs one of H235AnnexD_Procedure1<active>, CAT<disabled>, MD5<disabled> Hi Lawrence, from the log you can see that GnuGk accepts the registration from Xmeeting. Xmeeting is looking for a crypto token from GnuGk and I think thats a bug old OpenH323 versions had. Can you say which version of OpenH323/H323Plus Xmeeting was compiled with ? Alternatively, you can switch to another form of access control, eg. by IP, to bypass the issue. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan@xxxxxxxxxxxxxx Website: http://www.gnugk.org Support: http://www.willamowius.com/gnugk-support.html Lawrence Cockburn wrote: > Using GNU Gatekeeper 3.0.2 package on Debian Wheezy > (Ext(pthreads=1,radius=1,mysql=1,pgsql=1,firebird=1,odbc=0,sqlite=1,large_fd set=0,crypto/ssl=1,h46018=0,h46023=0,ldap=1,ssh=1,ipv6=1,h235media=0) H323Plus(1.24.0) PTLib(2.10.4) Build(Oct 1 2012, 03:39:11) Sys(Linux x86_64 3.2.0-4-amd64)) > and Xmeeting 0.3.4a on OSX 10.8.4, with gatekeeper.ini > > ---------------------------------- > [Gatekeeper::Main] > Fortytwo=42 > Name=GnuGk > TimeToLive=1200 > EnableTTLRestrictions=0 > ExternalIP=xxx.xxx.xxx.xxx > > [GkStatus::Auth] > rule=explicit > 127.0.0.1=allow > default=forbid > > [RoutedMode] > SupportNATedEndpoints=1 > > [Gatekeeper::Auth] > SQLPasswordAuth=required;RRQ > > [SQLPasswordAuth] > Driver=MySQL > Host=localhost > Database=xxxxx > Username=xxxxx > Password=xxxxx > Query=SELECT password FROM users WHERE username = '%1' > CacheTimeout=300 > MinPoolSize=5 > > [FileIPAuth] > any=allow > ---------------------------------- > > I get from the Xmeeting log when trying to register it to the gatekeeper: > ---------------------------------- > 0:00.903 Transactor...tor:ace5d0 h323trans.cxx(577) Trans Using credentials from request: H235AnnexD_Procedure1<active>,CAT<disabled>,MD5<disabled> > 0:00.903 Transactor...tor:ace5d0 h235auth.cxx(401) H235RAS Received unsecured RAS message (no crypto tokens), need one of: > H235AnnexD_Procedure1<active>,CAT<disabled>,MD5<disabled> > 0:00.903 XMeeting.app h323trans.cxx(656) Trans Response to seqnum=13301 had invalid crypto tokens. > 0:00.903 XMeeting.app gkclient.cxx(1053) RAS Failed registration of with GnuGk > ---------------------------------- > > Related to this may be this from the gatekeeper log: > 2013/07/22 08:28:05.237 2 h235auth.cxx(272) RAS Authenticator H.235.1<no-pwd> not active during SetCapability negotiation > > Gatekeeper itself does not complain, > (2013/07/22 08:29:26.418 3 gkauth.cxx(953) GKAUTH SQLPasswordAuth RRQ check ok) > it just closes the connection after some time, after successfully sending the registration confirm message > registrationConfirm {..}. > > What option do I need to use in the gatekeeper.ini, or do I need to compile the gatekeeper with some option enabled? > > Best Regards > > Lawrence ---------------------------------------------------------------------------- -- See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/ ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/
