<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Hi guys,<br><br>i'm still looking for a solution for the eapsim authentication. Now i use the Freeradius 3.0.0 and i made some changes in the <span class="js-selectable-text css-truncate css-truncate-target">'eapsimlib.c' regarding AT_IDENTITY</span> (commit cfd61d24b99022eb613054bbf7e0da4fa3af1bde). I still have the same problem, the client is able to send two Acces-Request but unable to send the third Access-Request to close the authentication.<br>I use a Nokia E52 as supplicant, did anybody realize the test successfully with another mobile phone (except android phones)?<br>Does anyone know how i can debug the mobile phone?<br>any helpfull ideas?<br><br>here my debug<br><br><br>radiusd: FreeRADIUS Version 3.0.0 (git #d3c7336), for host i586-pc-linux-gnu, built on Nov 7 2012 at 14:54:31<br> .<br> .<br>Listening on authentication address * port 1812<br>Listening on accounting address * port 1813<br>Listening on command file /var/run/radiusd/radiusd.sock<br>Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel<br>Opening new proxy address * port 1814<br>Listening on proxy address * port 1814<br>Ready to process requests.<br>rad_recv: Access-Request packet from host 192.168.10.212 port 48077, id=19, length=308<br> Service-Type = Framed-User<br> Framed-MTU = 1400<br> User-Name = "1901700000000653@wlan.mnc070.mcc901.3gppnetwork.org"<br> NAS-Port-Id = "ap_hotspot"<br> NAS-Port-Type = Wireless-802.11<br> Acct-Session-Id = "82500003"<br> Acct-Multi-Session-Id = "00-0C-42-64-41-9D-A8-7E-33-3E-9C-5B-82-50-00-00-00-00-00-03"<br> Calling-Station-Id = "A8-7E-33-3E-9C-5B"<br> Called-Station-Id = "00-0C-42-64-41-9D:YANN"<br> EAP-Message = 0x02010038013139303137303030303030303036353340776c616e2e6d6e633037302e6d63633930312e336770706e6574776f726b2e6f7267<br> Message-Authenticator = 0x429b263e5293fadbae0a13f28dad2775<br> NAS-Identifier = "MT_Yann"<br> NAS-IP-Address = 192.168.10.212<br>(0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default<br>(0) group authorize {<br>(0) - entering group authorize {...}<br>(0) [preprocess] = ok<br>(0) [chap] = noop<br>(0) auth_log : expand: %{Packet-Src-IP-Address} -> 192.168.10.212<br>(0) auth_log : expand: /var/log/radiusd/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d -> /var/log/radiusd/radacct/192.168.10.212/auth-detail-20121108<br>(0) auth_log : /var/log/radiusd/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /var/log/radiusd/radacct/192.168.10.212/auth-detail-20121108<br>(0) auth_log : expand: %t -> Thu Nov 8 14:20:05 2012<br>(0) [auth_log] = ok<br>(0) [mschap] = noop<br>(0) [digest] = noop<br>(0) suffix : Looking up realm "wlan.mnc070.mcc901.3gppnetwork.org" for User-Name = "1901700000000653@wlan.mnc070.mcc901.3gppnetwork.org"<br>(0) suffix : Found realm "~.*.3gppnetwork.org$"<br>(0) suffix : Adding Stripped-User-Name = "1901700000000653"<br>(0) suffix : Adding Realm = "wlan.mnc070.mcc901.3gppnetwork.org"<br>(0) suffix : Authentication realm is LOCAL.<br>(0) [suffix] = ok<br>rlm_sim_files: authorized user/imsi 1901700000000653 <br>rlm_sim_files: Adding EAP-Type: eap-sim<br>(0) [sim_files] = ok<br>(0) eap : EAP packet type response id 1 length 56<br>(0) eap : EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize<br>(0) [eap] = ok<br>(0) Found Auth-Type = EAP<br>(0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default<br>(0) group authenticate {<br>(0) - entering group authenticate {...}<br>(0) eap : EAP Identity<br>(0) eap : processing type sim<br>(0) eap : Underlying EAP-Type set EAP ID to 133<br>(0) [eap] = handled<br>Sending Access-Challenge of id 19 to 192.168.10.212 port 48077<br> EAP-Message = 0x01850014120a00000f0200020001000011010100<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0x077b668807fe746db0e5f555c7ca40d2<br>(0) Finished request 0.<br>Waking up in 0.3 seconds.<br>rad_recv: Access-Request packet from host 192.168.10.212 port 41383, id=20, length=358<br> Service-Type = Framed-User<br> Framed-MTU = 1400<br> User-Name = "1901700000000653@wlan.mnc070.mcc901.3gppnetwork.org"<br> State = 0x077b668807fe746db0e5f555c7ca40d2<br> NAS-Port-Id = "ap_hotspot"<br> NAS-Port-Type = Wireless-802.11<br> Acct-Session-Id = "82500003"<br> Acct-Multi-Session-Id = "00-0C-42-64-41-9D-A8-7E-33-3E-9C-5B-82-50-00-00-00-00-00-03"<br> Calling-Station-Id = "A8-7E-33-3E-9C-5B"<br> Called-Station-Id = "00-0C-42-64-41-9D:YANN"<br> EAP-Message = 0x02850058120a000007050000be65a474dc99300354fdd97e5176bbc5100100010e0e00333139303137303030303030303036353340776c616e2e6d6e633037302e6d63633930312e336770706e6574776f726b2e6f726700<br> Message-Authenticator = 0x07c87b76cd6232ca08dc4529913d5cac<br> NAS-Identifier = "MT_Yann"<br> NAS-IP-Address = 192.168.10.212<br>(1) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default<br>(1) group authorize {<br>(1) - entering group authorize {...}<br>(1) [preprocess] = ok<br>(1) [chap] = noop<br>(1) auth_log : expand: %{Packet-Src-IP-Address} -> 192.168.10.212<br>(1) auth_log : expand: /var/log/radiusd/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d -> /var/log/radiusd/radacct/192.168.10.212/auth-detail-20121108<br>(1) auth_log : /var/log/radiusd/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /var/log/radiusd/radacct/192.168.10.212/auth-detail-20121108<br>(1) auth_log : expand: %t -> Thu Nov 8 14:20:05 2012<br>(1) [auth_log] = ok<br>(1) [mschap] = noop<br>(1) [digest] = noop<br>(1) suffix : Looking up realm "wlan.mnc070.mcc901.3gppnetwork.org" for User-Name = "1901700000000653@wlan.mnc070.mcc901.3gppnetwork.org"<br>(1) suffix : Found realm "~.*.3gppnetwork.org$"<br>(1) suffix : Adding Stripped-User-Name = "1901700000000653"<br>(1) suffix : Adding Realm = "wlan.mnc070.mcc901.3gppnetwork.org"<br>(1) suffix : Authentication realm is LOCAL.<br>(1) [suffix] = ok<br>rlm_sim_files: authorized user/imsi 1901700000000653 <br>rlm_sim_files: Adding EAP-Type: eap-sim<br>(1) [sim_files] = ok<br>(1) eap : EAP packet type response id 133 length 88<br>(1) eap : No EAP Start, assuming it's an on-going EAP conversation<br>(1) [eap] = updated<br>(1) [files] = noop<br>(1) [expiration] = noop<br>(1) [logintime] = noop<br>(1) pap : WARNING! No "known good" password found for the user. Authentication may fail because of this.<br>(1) [pap] = noop<br>(1) Found Auth-Type = EAP<br>(1) # Executing group from file /usr/local/etc/raddb/sites-enabled/default<br>(1) group authenticate {<br>(1) - entering group authenticate {...}<br>(1) eap : Request found, released from the list<br>(1) eap : EAP/sim<br>(1) eap : processing type sim<br>+++> EAP-sim decoded packet:<br> Service-Type = Framed-User<br> Framed-MTU = 1400<br> User-Name = "1901700000000653@wlan.mnc070.mcc901.3gppnetwork.org"<br> State = 0x077b668807fe746db0e5f555c7ca40d2<br> NAS-Port-Id = "ap_hotspot"<br> NAS-Port-Type = Wireless-802.11<br> Acct-Session-Id = "82500003"<br> Acct-Multi-Session-Id = "00-0C-42-64-41-9D-A8-7E-33-3E-9C-5B-82-50-00-00-00-00-00-03"<br> Calling-Station-Id = "A8-7E-33-3E-9C-5B"<br> Called-Station-Id = "00-0C-42-64-41-9D:YANN"<br> EAP-Message = 0x02850058120a000007050000be65a474dc99300354fdd97e5176bbc5100100010e0e00333139303137303030303030303036353340776c616e2e6d6e633037302e6d63633930312e336770706e6574776f726b2e6f726700<br> Message-Authenticator = 0x07c87b76cd6232ca08dc4529913d5cac<br> NAS-Identifier = "MT_Yann"<br> NAS-IP-Address = 192.168.10.212<br> Stripped-User-Name = "1901700000000653"<br> Realm = "wlan.mnc070.mcc901.3gppnetwork.org"<br> EAP-Type = SIM<br> EAP-Sim-Subtype = Start<br> EAP-Sim-NONCE_MT = 0x0000be65a474dc99300354fdd97e5176bbc5<br> EAP-Sim-SELECTED_VERSION = 0x0001<br> EAP-Sim-IDENTITY = 0x3139303137303030303030303036353340776c616e2e6d6e633037302e6d63633930312e336770706e6574776f726b2e6f7267<br>(1) eap : Underlying EAP-Type set EAP ID to 134<br>(1) [eap] = handled<br>Sending Access-Challenge of id 20 to 192.168.10.212 port 41383<br> EAP-Message = 0x01860050120b0000010d00000123456789abcdef0123456789abcdef658719018376aab4d2a5ccde7a21b6510123456789abcdef0123456789abcdff0b050000217a0ab3b008a413f570885bca13bbe8<br> Message-Authenticator = 0x00000000000000000000000000000000<br> State = 0x077b668806fd746db0e5f555c7ca40d2<br>(1) Finished request 1.<br>Waking up in 0.3 seconds.<br>Waking up in 4.6 seconds.<br>(0) Cleaning up request packet ID 19 with timestamp +14<br>(1) Cleaning up request packet ID 20 with timestamp +14<br>Ready to process requests.<br><br><br>Best regards<br><br>Yann<br><br><div><br></div> </div></body>
</html>