Thanks a lot, Authenticators flag worked like a charm. Now I can register all my clients! Best Regards Lawrence On 2013-07-22, at 9:55 , Simon Horne <s.horne@xxxxxxxxxxxxxx> wrote: > Or the other alternative is to use > [Gatekeeper::Main] > Authenticators=MD5,H235.1,CAT > > This will change the priority and give preference to the MD5 method over > H.235.1. This should resolve the issue for older openh323/h323plus clients. > Another problem maybe the gatekeeper and client time (UCT) may be out. > H.235.1 is sensitive to time being out between the client and the > gatekeeper. > > Simon > > -----Original Message----- > From: Jan Willamowius [mailto:jan@xxxxxxxxxxxxxx] > Sent: 22 July 2013 16:58 > To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > Subject: Re: Xmeeting 0.3.4a registration fails: needs > one of H235AnnexD_Procedure1<active>, CAT<disabled>, MD5<disabled> > > Hi Lawrence, > > from the log you can see that GnuGk accepts the registration from Xmeeting. > Xmeeting is looking for a crypto token from GnuGk and I think thats a bug > old OpenH323 versions had. Can you say which version of OpenH323/H323Plus > Xmeeting was compiled with ? > > Alternatively, you can switch to another form of access control, eg. by IP, > to bypass the issue. > > Regards, > Jan > > -- > Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : > jan@xxxxxxxxxxxxxx > Website: http://www.gnugk.org > Support: http://www.willamowius.com/gnugk-support.html > > > Lawrence Cockburn wrote: >> Using GNU Gatekeeper 3.0.2 package on Debian Wheezy >> > (Ext(pthreads=1,radius=1,mysql=1,pgsql=1,firebird=1,odbc=0,sqlite=1,large_fd > set=0,crypto/ssl=1,h46018=0,h46023=0,ldap=1,ssh=1,ipv6=1,h235media=0) > H323Plus(1.24.0) PTLib(2.10.4) Build(Oct 1 2012, 03:39:11) Sys(Linux x86_64 > 3.2.0-4-amd64)) >> and Xmeeting 0.3.4a on OSX 10.8.4, with gatekeeper.ini >> >> ---------------------------------- >> [Gatekeeper::Main] >> Fortytwo=42 >> Name=GnuGk >> TimeToLive=1200 >> EnableTTLRestrictions=0 >> ExternalIP=xxx.xxx.xxx.xxx >> >> [GkStatus::Auth] >> rule=explicit >> 127.0.0.1=allow >> default=forbid >> >> [RoutedMode] >> SupportNATedEndpoints=1 >> >> [Gatekeeper::Auth] >> SQLPasswordAuth=required;RRQ >> >> [SQLPasswordAuth] >> Driver=MySQL >> Host=localhost >> Database=xxxxx >> Username=xxxxx >> Password=xxxxx >> Query=SELECT password FROM users WHERE username = '%1' >> CacheTimeout=300 >> MinPoolSize=5 >> >> [FileIPAuth] >> any=allow >> ---------------------------------- >> >> I get from the Xmeeting log when trying to register it to the gatekeeper: >> ---------------------------------- >> 0:00.903 Transactor...tor:ace5d0 h323trans.cxx(577) Trans > Using credentials from request: > H235AnnexD_Procedure1<active>,CAT<disabled>,MD5<disabled> >> 0:00.903 Transactor...tor:ace5d0 h235auth.cxx(401) H235RAS > Received unsecured RAS message (no crypto tokens), need one of: >> H235AnnexD_Procedure1<active>,CAT<disabled>,MD5<disabled> >> 0:00.903 XMeeting.app h323trans.cxx(656) Trans Response to > seqnum=13301 had invalid crypto tokens. >> 0:00.903 XMeeting.app gkclient.cxx(1053) RAS Failed > registration of with GnuGk >> ---------------------------------- >> >> Related to this may be this from the gatekeeper log: >> 2013/07/22 08:28:05.237 2 h235auth.cxx(272) RAS > Authenticator H.235.1<no-pwd> not active during SetCapability negotiation >> >> Gatekeeper itself does not complain, >> (2013/07/22 08:29:26.418 3 gkauth.cxx(953) GKAUTH > SQLPasswordAuth RRQ check ok) >> it just closes the connection after some time, after successfully sending > the registration confirm message >> registrationConfirm {..}. >> >> What option do I need to use in the gatekeeper.ini, or do I need to > compile the gatekeeper with some option enabled? >> >> Best Regards >> >> Lawrence > > ---------------------------------------------------------------------------- > -- > See everything from the browser to the database with AppDynamics > Get end-to-end visibility with application monitoring from AppDynamics > Isolate bottlenecks and diagnose root cause in seconds. > Start your free trial of AppDynamics Pro today! > http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk > _______________________________________________________ > > Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > Archive: > http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users > Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users > Homepage: http://www.gnugk.org/ > > > ------------------------------------------------------------------------------ > See everything from the browser to the database with AppDynamics > Get end-to-end visibility with application monitoring from AppDynamics > Isolate bottlenecks and diagnose root cause in seconds. > Start your free trial of AppDynamics Pro today! > http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk > _______________________________________________________ > > Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users > Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users > Homepage: http://www.gnugk.org/ ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/
