Re: Can't get nocat auth working properly

Thanks Ian for your reply.

I've now added a user to a group using the admintool and then added that
group to the nocat.conf on the gateway. Unfortunetly the authenication
process still gets stuck at the same point. So here are the new log
messages, maybe someone has an idea what I'm doing wrong.

[2005-05-03 13:53:00] Gateway running on port 5280.
[2005-05-03 13:53:18] Spawning child process 919.
[2005-05-03 13:53:18] Connection to 10.10.10.1 from 10.10.10.102
[2005-05-03 13:53:18] Capturing  10.10.10.102  for
http://www.google.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
[2005-05-03 13:53:18] Notifying parent of Capture on peer 00:04:23:60:0B:97
[2005-05-03 13:53:18] Got notification Capture of peer 00:04:23:60:0B:97
[2005-05-03 13:53:18] Child process returned 1
[2005-05-03 13:53:34] Spawning child process 920.
[2005-05-03 13:53:34] Connection to 10.10.10.1 from 10.10.10.254
[2005-05-03 13:53:34] Received notify from 10.10.10.254
[2005-05-03 13:53:34] gpg --decrypt --homedir=/usr/local/nocat/pgp
--keyring trustedkeys.gpg --no-tty -o- returned error message:
gpg: Signature made Tue May  3 13:53:28 2005 UTC using RSA key ID A0130867
gpg: Good signature from "PicoGeyer <[email protected]>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the
owner.
Primary key fingerprint: 7375 2047 4CF9 F007 6724  7349 C72D CB76 A013 0867
[2005-05-03 13:53:34] Got auth msg:
Member    airhive
Mac    00:04:23:60:0B:97
User    willie
Token    $1$71081796$5TY7Bou9Hf6yfjxgpJDGO0
Redirect
http://www.google.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
Action    Permit
Mode    login
Timeout    600
[2005-05-03 13:53:34] Unknown ID notify from 00:12:17:C7:3A:C3!
[2005-05-03 13:53:34] Capturing  10.10.10.254  for
http://10.10.10.1:5280/?ticket=owGbwMvMwMR4XPd02QJhjnTG0wdkkhicypsifFNzk1KLOBMzizIyy1K5fBOTOQ0MrAxMrIyMrcyADCcrS3Ou0GKgkvLMnJzMVK6Q%2fOzUPE4VQxVzQwMLQ3NLMxXTkEhzp%2fxSS480s8q0rIr0Ai8Xd38DrqDUlMyi1OQSzoySkgIrff3y8nK99Pz89JxUveT8XP00oGRafoV9MtDQvBJbKFc3Ua0op9g2vyhdLze%2fCmhjolVqnm5osFV%2bWlpmcmZiDpdjcklmfh5nQGpRbmYJl29%2bSipnTn56Zh5XSGZuan5pCaeZgQFXJ6MoMyvYf3AfM30yZf%2fv5%2feIJ3Kh3KRXDJ4PJ5lrrhRp3fQzJvjawh0P84tVDhdLcORMqGquKdp7dzu7zR6TqNyd8pyLLn5JWqQQ3pw57XUe5xUz9fY%2fW475zA90YDl9c0KWzXWtFU%2ffqIbebZ3%2f%2fnOR09d5WZNX%2fWmeEnHhrqVrwBbe5qNnxJZOCy%2bVr%2fdO%2fF6V3V%2bzwNX%2b%2b6kfYgXyTi%2b3mDt0X5m4JyTB2Ktg0VuO57OTuNJ7z3FseFF26d78bbYtJh9fbz41yULqwvQn%2f6R85BiEnE%2fFXxLUyC2%2f81Mw9dvxaXPepmt1LPj22txt6uMdhaY933dkLRBfJGQ2JzyWI%2f63OsdVg8PdlTsmrP5a57Aknb8hcKFnv9k2AA%3d%3d%3deTem
[2005-05-03 13:53:34] Notifying parent of Capture on peer 00:12:17:C7:3A:C3
[2005-05-03 13:53:34] Got notification Capture of peer 00:12:17:C7:3A:C3
[2005-05-03 13:53:34] Child process returned 1
[2005-05-03 14:03:04] Expiring inactive connection from  10.10.10.254 .
[2005-05-03 14:03:04] Denying peer 00:12:17:C7:3A:C3 without prior permit.
[2005-05-03 14:03:04] Expiring inactive connection from  10.10.10.102 .
[2005-05-03 14:03:04] Denying peer 00:04:23:60:0B:97 without prior permit.

Again if anyone has had success with a specific version of nocat please
tell me what version.
Thanks in advance for any ideas.
Pico

Ian Miller wrote:

> <snip>
>
>> The [email protected] is a new user that I've registered. I get exactly 
>> the same errors for users that I've added manually with the admintool.
>> If anyone has any ideas please help. Also If others have a working 
>> gateway/auth-server could you please tell me what versions you are 
>> using.
>
>
>
> I had a bit of trouble understanding the users/groups/classes that 
> NoCat uses. My understanding is that you need to ensure that the users 
> are members of a nocat group, and that group is listed in the 
> TrustedGroups setting in your gateway's nocat.conf file. If you don't 
> have this set up correctly, you get the behaviour you experienced.
>
> Hope this helps (and is correct!),
>
> Ian M