installation.sgml

H.323网守实现

<sect>Compiling and Installing
<p>
<sect1>Compiling the Gatekeeper
<p>
To build the gatekeeper you need at least PWLib 1.5.0 and OpenH323 1.12.0 or later.
The development version of the gatekeeper usually needs the
most recent OpenH323 version available.
These libraries are available at
<url url="http://sourceforge.net/projects/openh323" name="OpenH323 Download Page">.
See the instructions on
<url url="http://www.openh323.org/build.html" name="how to compile the OpenH323 code">.

Order of compiling:
<enum>
<item>PWLib (release + debug version)
<item>OpenH323
<item>OpenH323 test application (not needed, just to make sure everything works so far)
<item>The Gatekeeper
</enum>

On Unix do a <tt/configure/ and <tt/make debug/ or <tt/make opt/
in the gatekeeper directory to build debug or release version, respectively.
Use <tt/make both/ to build both versions.
Note you have to use GCC 3.3.x or later. The older version may not work.
Good practice is to do a <tt/make debugdepend/ or <tt/make optdepend/
in the gatekeeper directory before starting actual compilation (make debug or
make opt) - these commands build approtiate dependency lists, so after
you will update your sources from CVS, all affected files will get recompiled.
Otherwise you can finish with the Gatekeeper partially compiled with the older
headers and partially with the updated headers - a very bad thing.<newline>

On Windows just open and compile the provided solution (<tt/gk.sln/) for
Microsoft Visual Studio .NET 2003 or the workspace (<tt/gk.dsw/) for Microsoft
Visual Studio 6.0 SP6. Of course, you need to have PWLib
and OpenH323 already compiled and approtiate include/library paths set up.
If you want to get MySQL or PostgreSQL support, install/compile approtiate
client libraries and add HAS_MYSQL=1 and/or HAS_PGSQL=1 to preprocessor
macros of the gatekeeper project. You also need to tell the compiler
where to find include files/libraries and instruct the linker to link
with these client libraries.
<newline>

Type <tt/configure --help/ to see a detailed list of all compile time
options. You can use them to enable or disable some features of the gatekeeper.
For example, if you do not need RADIUS just type: <tt/configure --disable-radius/.<newline>

The recommended PWLib/OpenH323 versions are these from the Pandora release
(1.7.5.2/1.14.4.2) or newer. Older versions are not supported anymore and are not
guaranteed to work with the gatekeeper.

To build the gatekeeper that is statically linked with system and OpenH323 libraries,
<tt/make optnoshared/ or <tt/make debugnoshared/ has to be used.

In order to use the gatekeeper under heavy load, enabling LARGE_FDSET feature
(ONLY FOR UNIX VERSION) is recommended (configure --with-large-fdset=4096). Some systems
also need to use ulimit in order to allow more than 1024 sockets to be allocated for 
a single process. Note that the PWLib library starting from version 1.5.3 supports a similar feature too, so you can choose between
LARGE_FDSET GnuGk and PWLib implementation. GnuGk native implementation gives
better performance results. Maximum LARGE_FDSET value should be calculated 
based upon predicted maximum sockets usage. A rule of thumb may be:
<tscreen><verb>
MAX_NUMBER_OF_CONCURRENT_CALLS * 10 * 120%

Where:
10 = 2 sockets for Q.931 + 2 sockets for H.245 + 6 sockets for RTP and other stuff
</verb></tscreen>
So for 100 concurrent calls you don't need more than ca. 1024 sockets in the
LARGE_FDSET.

<sect1>The addpasswd Utility
<p>
Status line access authentication and SimplePasswordAuth module require
encrypted passwords to be stored in the gatekeeper configuration file.
Also since 2.2.2 version, the gatekeeper supports encryption of all passwords
in the config. <tt/addpasswd/ utility is required to generate and store 
these encrypted passwords. This utility is included with the gatekeeper 
and can be compiled using:
<tscreen><verb>
$ make addpasswd
</verb></tscreen>

The usage is as follows:
<tscreen><verb>
$ addpasswd CONFIG SECTION KEYNAME PASSWORD
</verb></tscreen>

Example 1: 'gkadmin' user with 'secret' password has to be added 
to [GkStatus::Auth] config section to enable status line interface 
authentication:
<tscreen><verb>
$ addpasswd gnugk.ini GkStatus::Auth gkadmin secret
</verb></tscreen>

Example 2: 'joe' user with 'secret' password has to be added to [Password]
config section to enable endpoint authentication:
<tscreen><verb>
$ addpasswd gnugk.ini Password joe secret
</verb></tscreen>

Example 3: An encrypted shared secret is added to a RadAuth config section:
<tscreen><verb>
$ addpasswd gnugk.ini RadAuth SharedSecret VerySecretPassword
</verb></tscreen>

IMPORTANT: <tt/KeyFilled/ variable defines a default initializer for password
encryption keys. It can be ommited in the config (it is defined to 0 then),
but if it is specified, each time it changes, encrypted passwords have to be
regenerated (encrypted again using the <tt/addpasswd/ utility).
</sect1>

<sect1>Installing the Gatekeeper
<p>
There is no special installation procedure needed.
Just copy the executable to the directory you like
and create a config file for it.
There are several config examples in the <tt>etc/</tt> subdirectory
of source tree. See section <ref id="config" name="Configuration File">
for detailed explanations.

For example, in Linux x86 platform, the optimized executable <tt/gnugk/
is produced in <tt>obj_linux_x86_r/</tt> subdirectory.
You may copy it to <tt>/usr/sbin/</tt>, create a config in
<tt>/etc/gnugk.ini</tt> and start it by
<tscreen><verb>
$ /usr/sbin/gnugk -c /etc/gnugk.ini -o /var/log/gnugk.log -ttt
</verb></tscreen>
See section <ref id="commandline" name="Command Line Options"> for details.

<sect1>Pre-Built Binaries
<p>
If you do not wish to compile the gatekeeper from source,
there are several pre-built `packages' available from
<url url="http://sourceforge.net/project/showfiles.php?group_id=4797" name="SourceForge">.
Not all versions will be made available as binaries - check what is avilable.

<bf/Tar packages (.tgz or .tar.gz)/<p>
Download the tar file and enter the following command as <tt/root/,
substitute in the name of the file you downloaded.
<tscreen><verb>
$ tar xvzf gnugk-x.x.x.tar
</verb></tscreen>

<bf/Debian packages (.deb)/<p>
Debian includes the gatekeeper as openh323gk package.
You can install it by using the following command as <tt/root/:
<tscreen><verb>
$ apt-get install openh323gk
</verb></tscreen>