EAP-sim using freeradius

Matthew Newton mcn4 at leicester.ac.uk
Fri Aug 21 12:29:03 CEST 2015


On Thu, Aug 20, 2015 at 05:12:00PM -0700, Siddharth Katragadda via Freeradius-Users wrote:
> So far, most of the vendors we work with seem to be using
> rlm_sim_files on Freeradius 2.x

I don't do EAP-SIM, so these are only observations on things that
don't look quite right to me.

You've got 

passwd passwd {
...
  format = "*EAP-Sim-IMSI:EAP-Sim-RAND1:EAP-Sim-SRES1:EAP-Sim-KC1:EAP-Sim-RAND2:EAP-Sim-SRES2:EAP-Sim-KC2:EAP-Sim-RAND2:EAP-Sim-SRES2:EAP-Sim-KC2"
...
}

which has 10 fields, but your simtriplets file only has 4 fields.

The incoming request has

  User-Name = "1001010123456789 at wlan.mnc001.mcc001.3gppnetwork.org"

but does not have an EAP-Sim-IMSI attribute (I'm not sure if this
should be encoded within the EAP-Message), which is why you're
getting [passwd] = notfound.

Does, for example,

  format = "*User-Name:EAP-Sim-RAND1:EAP-Sim-SRES1:EAP-Sim-KC1"

work?

But, as I said - only things that look wrong to me, and I have no
knowledge of EAP-SIM at all. This might be the wrong thing to do.

Matthew



-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>


More information about the Freeradius-Users mailing list