eap sim authorization problem

Iliya Peregoudov iperegudov at cboss.ru
Fri Jun 21 13:31:13 CEST 2013


On 20.06.2013 17:56, raptor raptor wrote:
> my users format
>
> 1510019760806391 at wlan.mnc001.mcc510.3gppnetwork.org EAP-Type := SIM
> EAP-Sim-Rand1 = 0x 326258E6F77C40f3866DB25DEA60AE4D,
> EAP-Sim-SRES1 = 0x DD287535,
> EAP-Sim-KC1 = 0x 7F743521EBabb000,
> EAP-Sim-Rand2 = 0x FD9989BD90AD4a03962E6C08C000C14B,
> EAP-Sim-SRES2 = 0x BFf89ad2,
> EAP-Sim-KC2 = 0x 1C7098005Fea8c00,
> EAP-Sim-Rand3 = 0x 26CC8DB02C9848c7BBCC2790E3F0913B,
> EAP-Sim-SRES3 = 0x 17172cc6,
> EAP-Sim-KC3 = 0x BF34bf34D4ca4c00,

Syntax error here. There should be no comma at the end of stanza. Due to 
comma next non-blank line is also considered to be part of this stanza. 
So next stanza (1510080325656501) will not be parsed correctly.

> rad_recv: Access-Request packet from host 192.168.2.1 port 2048, id=2, length=215
> User-Name = "1510080325656501 at wlan.mnc008.mcc510.3gppnetwork.org"
> NAS-IP-Address = 192.168.2.1
> Called-Station-Id = "48f8b315461a"
> Calling-Station-Id = "001adc019b98"
> NAS-Identifier = "48f8b315461a"
> NAS-Port = 2
> Framed-MTU = 1400
> NAS-Port-Type = Wireless-802.11
> EAP-Message = 0x02000038013135313030383033323536353635303140776c616e2e6d6e633030382e6d63633531302e336770706e6574776f726b2e6f7267
> Message-Authenticator = 0x1e6d83334fd94f359c5fda46d916ce7e

[skipped]

> ++[files] returns noop

rlm_files was unable to find stanza for 1510080325656501 due to before 
mentioned syntax error.

> [eap] processing type sim
> can not initiate sim, no RAND1 attribute

EAP-Sim-Rand1 attribute is not found in reply list. I don't know why. 
rlm_sim_files earlier said that it successfully found auth vectors. 
Definitely rlm_sim_files not working as expected.

Try to fix syntax error in users file.


More information about the Freeradius-Users mailing list