<div dir="ltr"><div><div><div><div><div><div>Hi, IIiya<br></div>i'm sorry my posting above is about one client<br><br></div></div>first, i connect with one client and it's success <br></div>(until "Finished request 2" in debug log)<br>
<br></div>and then in next request, i try with different supplicant/client to authenticate and i have input identitiy (IMSI, RAND, SRES,KC) in to simtriplets.dat and users also<br></div><div><br></div><div>my simtriplets.dat format<br>
1510019760806391,326258E6F77C40f3866DB25DEA60AE4D,DD287535,7F743521EBabb000<br>1510019760806391,FD9989BD90AD4a03962E6C08C000C14B,BFf89ad2,1C7098005Fea8c00<br>1510019760806391,26CC8DB02C9848c7BBCC2790E3F0913B,17172cc6,BF34bf34D4ca4c00<br>
<br>1510080325656501,5A8F4C0677DE4930B47825B55534CC79,94d66001,AC85d79439b564c0<br>1510080325656501,8E29A03F8E13466fBF84D12F6A9D4734,E284e39e,13a524d040094ef4<br>1510080325656501,BC5D3CEB1EAC4164AA463E289222C450,AE8bdfc6,B0354bf3402e42ed<br>
</div><div><br></div><div>my users format<br>
<p class=""><span style="font-family:"Courier New""><a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a><span style> </span><span style> </span>EAP-Type := SIM<br>
<span style> </span><span style> </span>EAP-Sim-Rand1 = 0x</span> <span style="font-family:"Courier New"">326258E6F77C40f3866DB25DEA60AE4D,<br>
<span style> </span>EAP-Sim-SRES1 = 0x</span> <span style="font-family:"Courier New"">DD287535,<br>
<span style> </span>EAP-Sim-KC1 = 0x</span> <span style="font-family:"Courier New"">7F743521EBabb000,<br>
<span style> </span>EAP-Sim-Rand2 = 0x</span> <span style="font-family:"Courier New"">FD9989BD90AD4a03962E6C08C000C14B,<br>
<span style> </span>EAP-Sim-SRES2 = 0x</span> <span style="font-family:"Courier New"">BFf89ad2,<br>
<span style> </span>EAP-Sim-KC2 = 0x</span> <span style="font-family:"Courier New"">1C7098005Fea8c00,<br>
<span style> </span>EAP-Sim-Rand3 = 0x</span> <span style="font-family:"Courier New"">26CC8DB02C9848c7BBCC2790E3F0913B,<br>
<span style> </span>EAP-Sim-SRES3 = 0x</span> <span style="font-family:"Courier New"">17172cc6,<br>
<span style> </span>EAP-Sim-KC3 = 0x</span> <span style="font-family:"Courier New"">BF34bf34D4ca4c00,</span></p>
<p class=""><span style="font-family:"Courier New""><a href="mailto:1510080325656501@wlan.mnc008.mcc510.3gppnetwork.org">1510080325656501@wlan.mnc008.mcc510.3gppnetwork.org</a><span style> </span><span style> </span>EAP-Type := SIM<br>
<span style> </span><span style> </span>EAP-Sim-Rand1 = 0x</span> <span style="font-family:"Courier New"">5A8F4C0677DE4930B47825B55534CC79,<br>
<span style> </span>EAP-Sim-SRES1 = 0x</span> <span style="font-family:"Courier New"">94d66001,<br>
<span style> </span>EAP-Sim-KC1 = 0x</span> <span style="font-family:"Courier New"">AC85d79439b564c0,<br>
<span style> </span>EAP-Sim-Rand2 = 0x</span> <span style="font-family:"Courier New"">8E29A03F8E13466fBF84D12F6A9D4734,<br>
<span style> </span>EAP-Sim-SRES2 = 0x</span> <span style="font-family:"Courier New"">E284e39e,<br>
<span style> </span>EAP-Sim-KC2 = 0x</span> <span style="font-family:"Courier New"">13a524d040094ef4,<br>
<span style> </span>EAP-Sim-Rand3 = 0x</span> <span style="font-family:"Courier New"">BC5D3CEB1EAC4164AA463E289222C450,<br>
<span style> </span>EAP-Sim-SRES3 = 0x</span> <span style="font-family:"Courier New"">AE8bdfc6,<br>
<span style> </span>EAP-Sim-KC3 = 0x</span> <span style="font-family:"Courier New"">B0354bf3402e42ed</span></p>
<p class=""><span style="font-family:"Courier New""> </span></p>
</div><div>here is my debug log:<br></div><div>
<p class=""><span lang="IN">rad_recv: Access-Request packet from host
192.168.2.1 port 2048, id=1, length=215</span></p>
<p class=""><span lang="IN"><span style> </span>User-Name
= "<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-IP-Address
= 192.168.2.1</span></p>
<p class=""><span lang="IN"><span style> </span>Called-Station-Id
= "48f8b315461a"</span></p>
<p class=""><span lang="IN"><span style> </span>Calling-Station-Id
= "1814563e5189"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Identifier
= "48f8b315461a"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Port
= 38</span></p>
<p class=""><span lang="IN"><span style> </span>Framed-MTU
= 1400</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Port-Type
= Wireless-802.11</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Message
=
0x02000038013135313030313937363038303633393140776c616e2e6d6e633030312e6d63633531302e336770706e6574776f726b2e6f7267</span></p>
<p class=""><span lang="IN"><span style> </span>Message-Authenticator
= 0x509abafbd92ee8417dcb22095d89059d</span></p>
<p class=""><span lang="IN"># Executing section authorize from file /etc/freeradius/sites-enabled/default</span></p>
<p class=""><span lang="IN">+- entering group authorize {...}</span></p>
<p class=""><span lang="IN">++[preprocess] returns ok</span></p>
<p class=""><span lang="IN">++[chap] returns noop</span></p>
<p class=""><span lang="IN">++[mschap] returns noop</span></p>
<p class=""><span lang="IN">++[digest] returns noop</span></p>
<p class=""><span lang="IN">[suffix] Looking up realm
"<a href="http://wlan.mnc001.mcc510.3gppnetwork.org">wlan.mnc001.mcc510.3gppnetwork.org</a>" for User-Name = "<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN">[suffix] No such realm
"<a href="http://wlan.mnc001.mcc510.3gppnetwork.org">wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN">++[suffix] returns noop</span></p>
<p class=""><span lang="IN">rlm_sim_files: authorized user/imsi
<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a></span></p>
<p class=""><span lang="IN">rlm_sim_files: Adding EAP-Type: eap-sim</span></p>
<p class=""><span lang="IN">++[sim_files] returns ok</span></p>
<p class=""><span lang="IN">[eap] EAP packet type response id 0 length 56</span></p>
<p class=""><span lang="IN">[eap] No EAP Start, assuming it's an on-going
EAP conversation</span></p>
<p class=""><span lang="IN">++[eap] returns updated</span></p>
<p class=""><span lang="IN">[files] users: Matched entry
<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a> at line 1</span></p>
<p class=""><span lang="IN">++[files] returns ok</span><span style></span></p>
<p class=""><span lang="IN">++[expiration] returns noop</span></p>
<p class=""><span lang="IN">++[logintime] returns noop</span></p>
<p class=""><span lang="IN">[pap] WARNING! No "known good"
password found for the user.<span style>
</span>Authentication may fail because of this.</span></p>
<p class=""><span lang="IN">++[pap] returns noop</span></p>
<p class=""><span lang="IN">Found Auth-Type = EAP</span></p>
<p class=""><span lang="IN"># Executing group from file
/etc/freeradius/sites-enabled/default</span></p>
<p class=""><span lang="IN">+- entering group authenticate {...}</span></p>
<p class=""><span lang="IN">[eap] EAP Identity</span></p>
<p class=""><span lang="IN">[eap] processing type sim</span></p>
<p class=""><span lang="IN">[eap] Underlying EAP-Type set EAP ID to 161</span></p>
<p class=""><span lang="IN">++[eap] returns handled</span></p>
<p class=""><span lang="IN">Sending Access-Challenge of id 1 to 192.168.2.1
port 2048</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Message
= 0x01a10014120a00000f0200020001000011010100</span></p>
<p class=""><span lang="IN"><span style> </span>Message-Authenticator
= 0x00000000000000000000000000000000</span></p>
<p class=""><span lang="IN"><span style> </span>State
= 0x86406e6686e17cf5f398cb77ce20781c</span></p>
<p class=""><span lang="IN">Finished request 0.</span></p>
<p class=""><span lang="IN">Going to the next request</span></p>
<p class=""><span lang="IN">Waking up in 4.9 seconds.</span></p>
<p class=""><span lang="IN">rad_recv: Access-Request packet from host
192.168.2.1 port 2048, id=1, length=265</span></p>
<p class=""><span lang="IN">Cleaning up request 0 ID 1 with timestamp +25</span></p>
<p class=""><span lang="IN"><span style> </span>User-Name
= "<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-IP-Address
= 192.168.2.1</span></p>
<p class=""><span lang="IN"><span style> </span>Called-Station-Id
= "48f8b315461a"</span></p>
<p class=""><span lang="IN"><span style> </span>Calling-Station-Id
= "1814563e5189"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Identifier
= "48f8b315461a"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Port
= 38</span></p>
<p class=""><span lang="IN"><span style> </span>Framed-MTU
= 1400</span></p>
<p class=""><span lang="IN"><span style> </span>State
= 0x86406e6686e17cf5f398cb77ce20781c</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Port-Type
= Wireless-802.11</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Message
=
0x02a10058120a0000070500005004b19c6e3aacce33e95d1f3c10c481100100010e0e00333135313030313937363038303633393140776c616e2e6d6e633030312e6d63633531302e336770706e6574776f726b2e6f726700</span></p>
<p class=""><span lang="IN"><span style> </span>Message-Authenticator
= 0xc9bbe2c285ff35377724d62bb118966b</span></p>
<p class=""><span lang="IN"># Executing section authorize from file
/etc/freeradius/sites-enabled/default</span></p>
<p class=""><span lang="IN">+- entering group authorize {...}</span></p>
<p class=""><span lang="IN">++[preprocess] returns ok</span></p>
<p class=""><span lang="IN">++[chap] returns noop</span></p>
<p class=""><span lang="IN">++[mschap] returns noop</span></p>
<p class=""><span lang="IN">++[digest] returns noop</span></p>
<p class=""><span lang="IN">[suffix] Looking up realm
"<a href="http://wlan.mnc001.mcc510.3gppnetwork.org">wlan.mnc001.mcc510.3gppnetwork.org</a>" for User-Name =
"<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN">[suffix] No such realm
"<a href="http://wlan.mnc001.mcc510.3gppnetwork.org">wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN">++[suffix] returns noop</span></p>
<p class=""><span lang="IN">rlm_sim_files: authorized user/imsi
<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a></span></p>
<p class=""><span lang="IN">rlm_sim_files: Adding EAP-Type: eap-sim</span></p>
<p class=""><span lang="IN">++[sim_files] returns ok</span></p>
<p class=""><span lang="IN">[eap] EAP packet type response id 161 length 88</span></p>
<p class=""><span lang="IN">[eap] No EAP Start, assuming it's an on-going
EAP conversation</span></p>
<p class=""><span lang="IN">++[eap] returns updated</span></p>
<p class=""><span lang="IN">[files] users: Matched entry
<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a> at line 1</span></p>
<p class=""><span lang="IN">++[files] returns ok</span></p>
<p class=""><span lang="IN"><span style> </span>[sql]
User <a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a> not found</span></p>
<p class=""><span lang="IN">++[sql] returns notfound</span></p>
<p class=""><span lang="IN">++[expiration] returns noop</span></p>
<p class=""><span lang="IN">++[logintime] returns noop</span></p>
<p class=""><span lang="IN">[pap] WARNING! No "known good"
password found for the user.<span style>
</span>Authentication may fail because of this.</span></p>
<p class=""><span lang="IN">++[pap] returns noop</span></p>
<p class=""><span lang="IN">Found Auth-Type = EAP</span></p>
<p class=""><span lang="IN"># Executing group from file
/etc/freeradius/sites-enabled/default</span></p>
<p class=""><span lang="IN">+- entering group authenticate {...}</span></p>
<p class=""><span lang="IN">[eap] Request found, released from the list</span></p>
<p class=""><span lang="IN">[eap] EAP/sim</span></p>
<p class=""><span lang="IN">[eap] processing type sim</span></p>
<p class=""><span lang="IN">+++> EAP-sim decoded packet:</span></p>
<p class=""><span lang="IN"><span style> </span>User-Name
= "<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-IP-Address
= 192.168.2.1</span></p>
<p class=""><span lang="IN"><span style> </span>Called-Station-Id
= "48f8b315461a"</span></p>
<p class=""><span lang="IN"><span style> </span>Calling-Station-Id
= "1814563e5189"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Identifier
= "48f8b315461a"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Port
= 38</span></p>
<p class=""><span lang="IN"><span style> </span>Framed-MTU
= 1400</span></p>
<p class=""><span lang="IN"><span style> </span>State
= 0x86406e6686e17cf5f398cb77ce20781c</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Port-Type
= Wireless-802.11</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Message
=
0x02a10058120a0000070500005004b19c6e3aacce33e95d1f3c10c481100100010e0e00333135313030313937363038303633393140776c616e2e6d6e633030312e6d63633531302e336770706e6574776f726b2e6f726700</span></p>
<p class=""><span lang="IN"><span style> </span>Message-Authenticator
= 0xc9bbe2c285ff35377724d62bb118966b</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Type
= SIM</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Sim-Subtype
= Start</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Sim-NONCE_MT
= 0x00005004b19c6e3aacce33e95d1f3c10c481</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Sim-SELECTED_VERSION
= 0x0001</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Sim-IDENTITY
=
0x3135313030313937363038303633393140776c616e2e6d6e633030312e6d63633531302e336770706e6574776f726b2e6f7267</span></p>
<p class=""><span lang="IN">[eap] Underlying EAP-Type set EAP ID to 162</span></p>
<p class=""><span lang="IN">++[eap] returns handled</span></p>
<p class=""><span lang="IN">Sending Access-Challenge of id 1 to 192.168.2.1
port 2048</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Message
= 0x01a20050120b0000010d0000326258e6f77c40f3866db25dea60ae4dfd9989bd90ad4a03962e6c08c000c14b26cc8db02c9848c7bbcc2790e3f0913b0b050000dec6228540e79bb78b2b1a497cba928e</span></p>
<p class=""><span lang="IN"><span style> </span>Message-Authenticator
= 0x00000000000000000000000000000000</span></p>
<p class=""><span lang="IN"><span style> </span>State
= 0x86406e6687e27cf5f398cb77ce20781c</span></p>
<p class=""><span lang="IN">Finished request 1.</span></p>
<p class=""><span lang="IN">Going to the next request</span></p>
<p class=""><span lang="IN">Waking up in 4.9 seconds.</span></p>
<p class=""><span lang="IN">rad_recv: Access-Request packet from host
192.168.2.1 port 2048, id=1, length=205</span></p>
<p class=""><span lang="IN">Cleaning up request 1 ID 1 with timestamp +25</span></p>
<p class=""><span lang="IN"><span style> </span>User-Name
= "<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-IP-Address
= 192.168.2.1</span></p>
<p class=""><span lang="IN"><span style> </span>Called-Station-Id
= "48f8b315461a"</span></p>
<p class=""><span lang="IN"><span style> </span>Calling-Station-Id
= "1814563e5189"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Identifier
= "48f8b315461a"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Port
= 38</span></p>
<p class=""><span lang="IN"><span style> </span>Framed-MTU
= 1400</span></p>
<p class=""><span lang="IN"><span style> </span>State
= 0x86406e6687e27cf5f398cb77ce20781c</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Port-Type
= Wireless-802.11</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Message
= 0x02a2001c120b00000b050000f2d858a5a86f03c2be282e6cde78c7e1</span></p>
<p class=""><span lang="IN"><span style> </span>Message-Authenticator
= 0x2ca89c665a9f9e46895e8098aac382ee</span></p>
<p class=""><span lang="IN"># Executing section authorize from file
/etc/freeradius/sites-enabled/default</span></p>
<p class=""><span lang="IN">+- entering group authorize {...}</span></p>
<p class=""><span lang="IN">++[preprocess] returns ok</span></p>
<p class=""><span lang="IN">++[chap] returns noop</span></p>
<p class=""><span lang="IN">++[mschap] returns noop</span></p>
<p class=""><span lang="IN">++[digest] returns noop</span></p>
<p class=""><span lang="IN">[suffix] Looking up realm
"<a href="http://wlan.mnc001.mcc510.3gppnetwork.org">wlan.mnc001.mcc510.3gppnetwork.org</a>" for User-Name =
"<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN">[suffix] No such realm
"<a href="http://wlan.mnc001.mcc510.3gppnetwork.org">wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN">++[suffix] returns noop</span></p>
<p class=""><span lang="IN">rlm_sim_files: authorized user/imsi
<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a></span></p>
<p class=""><span lang="IN">rlm_sim_files: Adding EAP-Type: eap-sim</span></p>
<p class=""><span lang="IN">++[sim_files] returns ok</span></p>
<p class=""><span lang="IN">[eap] EAP packet type response id 162 length 28</span></p>
<p class=""><span lang="IN">[eap] No EAP Start, assuming it's an on-going
EAP conversation</span></p>
<p class=""><span lang="IN">++[eap] returns updated</span></p>
<p class=""><span lang="IN">[files] users: Matched entry
<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a> at line 1</span></p>
<p class=""><span lang="IN">++[files] returns ok</span></p>
<p class=""><span lang="IN"><span style> </span>[sql]
User <a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a> not found</span></p>
<p class=""><span lang="IN">++[sql] returns notfound</span></p>
<p class=""><span lang="IN">++[expiration] returns noop</span></p>
<p class=""><span lang="IN">++[logintime] returns noop</span></p>
<p class=""><span lang="IN">[pap] WARNING! No "known good"
password found for the user.<span style>
</span>Authentication may fail because of this.</span></p>
<p class=""><span lang="IN">++[pap] returns noop</span></p>
<p class=""><span lang="IN">Found Auth-Type = EAP</span></p>
<p class=""><span lang="IN"># Executing group from file
/etc/freeradius/sites-enabled/default</span></p>
<p class=""><span lang="IN">+- entering group authenticate {...}</span></p>
<p class=""><span lang="IN">[eap] Request found, released from the list</span></p>
<p class=""><span lang="IN">[eap] EAP/sim</span></p>
<p class=""><span lang="IN">[eap] processing type sim</span></p>
<p class=""><span lang="IN">MAC check succeed</span></p>
<p class=""><span lang="IN">[eap] Underlying EAP-Type set EAP ID to 163</span></p>
<p class=""><span lang="IN">[eap] Freeing handler</span></p>
<p class=""><span lang="IN">++[eap] returns ok</span></p>
<p class=""><span lang="IN"># Executing section post-auth from file
/etc/freeradius/sites-enabled/default</span></p>
<p class=""><span lang="IN">+- entering group post-auth {...}</span></p>
<p class=""><span lang="IN">++[sql] returns ok</span></p>
<p class=""><span lang="IN">++[exec] returns noop</span></p>
<p class=""><span lang="IN">Sending Access-Accept of id 1 to 192.168.2.1
port 2048</span></p>
<p class=""><span lang="IN"><span style> </span>MS-MPPE-Recv-Key
= 0x1493962f20dce781f0e363ecdac45c203fe566abf333ec6e3d6f11398159f97b</span></p>
<p class=""><span lang="IN"><span style> </span>MS-MPPE-Send-Key
= 0x976c0332286aac5b7fabc037a7ef34de9f7879861e3412582892bc0f9f06a0f0</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Message
= 0x03a30004</span></p>
<p class=""><span lang="IN"><span style> </span>Message-Authenticator
= 0x00000000000000000000000000000000</span></p>
<p class=""><span lang="IN"><span style> </span>User-Name
= "<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org">1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN">Finished request 2.</span></p>
<p class=""><span lang="IN">Going to the next request</span></p>
<p class=""><span lang="IN">Waking up in 4.9 seconds.</span></p>
<p class=""><span lang="IN">Cleaning up request 2 ID 1 with timestamp +26</span></p>
<p class=""><span lang="IN">Ready to process requests.</span></p>
<p class=""><span lang="IN">rad_recv: Access-Request packet from host
192.168.2.1 port 2048, id=2, length=215</span></p>
<p class=""><span lang="IN"><span style> </span>User-Name
= "<a href="mailto:1510080325656501@wlan.mnc008.mcc510.3gppnetwork.org">1510080325656501@wlan.mnc008.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-IP-Address
= 192.168.2.1</span></p>
<p class=""><span lang="IN"><span style> </span>Called-Station-Id
= "48f8b315461a"</span></p>
<p class=""><span lang="IN"><span style> </span>Calling-Station-Id
= "001adc019b98"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Identifier
= "48f8b315461a"</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Port
= 2</span></p>
<p class=""><span lang="IN"><span style> </span>Framed-MTU
= 1400</span></p>
<p class=""><span lang="IN"><span style> </span>NAS-Port-Type
= Wireless-802.11</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Message
=
0x02000038013135313030383033323536353635303140776c616e2e6d6e633030382e6d63633531302e336770706e6574776f726b2e6f7267</span></p>
<p class=""><span lang="IN"><span style> </span>Message-Authenticator
= 0x1e6d83334fd94f359c5fda46d916ce7e</span></p>
<p class=""><span lang="IN"># Executing section authorize from file
/etc/freeradius/sites-enabled/default</span></p>
<p class=""><span lang="IN">+- entering group authorize {...}</span></p>
<p class=""><span lang="IN">++[preprocess] returns ok</span></p>
<p class=""><span lang="IN">++[chap] returns noop</span></p>
<p class=""><span lang="IN">++[mschap] returns noop</span></p>
<p class=""><span lang="IN">++[digest] returns noop</span></p>
<p class=""><span lang="IN">[suffix] Looking up realm
"<a href="http://wlan.mnc008.mcc510.3gppnetwork.org">wlan.mnc008.mcc510.3gppnetwork.org</a>" for User-Name =
"<a href="mailto:1510080325656501@wlan.mnc008.mcc510.3gppnetwork.org">1510080325656501@wlan.mnc008.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN">[suffix] No such realm
"<a href="http://wlan.mnc008.mcc510.3gppnetwork.org">wlan.mnc008.mcc510.3gppnetwork.org</a>"</span></p>
<p class=""><span lang="IN">++[suffix] returns noop</span></p>
<p class=""><span lang="IN">rlm_sim_files: authorized user/imsi
<a href="mailto:1510080325656501@wlan.mnc008.mcc510.3gppnetwork.org">1510080325656501@wlan.mnc008.mcc510.3gppnetwork.org</a></span></p>
<p class=""><span lang="IN">rlm_sim_files: Adding EAP-Type: eap-sim</span></p>
<p class=""><span lang="IN">++[sim_files] returns ok</span></p>
<p class=""><span lang="IN">[eap] EAP packet type response id 0 length 56</span></p>
<p class=""><span lang="IN">[eap] No EAP Start, assuming it's an on-going
EAP conversation</span></p>
<p class=""><span lang="IN">++[eap] returns updated</span></p>
<p class=""><span lang="IN">++[files] returns noop</span></p>
<p class=""><span lang="IN">++[sql] returns notfound</span></p>
<p class=""><span lang="IN">++[expiration] returns noop</span></p>
<p class=""><span lang="IN">++[logintime] returns noop</span></p>
<p class=""><span lang="IN">[pap] WARNING! No "known good"
password found for the user.<span style>
</span>Authentication may fail because of this.</span></p>
<p class=""><span lang="IN">++[pap] returns noop</span></p>
<p class=""><span lang="IN">Found Auth-Type = EAP</span></p>
<p class=""><span lang="IN"># Executing group from file /etc/freeradius/sites-enabled/default</span></p>
<p class=""><span lang="IN">+- entering group authenticate {...}</span></p>
<p class=""><span lang="IN">[eap] EAP Identity</span></p>
<p class=""><span lang="IN">[eap] processing type sim</span></p>
<p class=""><span lang="IN"><span style> </span>can
not initiate sim, no RAND1 attribute</span></p>
<p class=""><span lang="IN">[eap] Default EAP type sim failed in initiate</span></p>
<p class=""><span lang="IN">[eap] Failed in EAP select</span></p>
<p class=""><span lang="IN">++[eap] returns invalid</span></p>
<p class=""><span lang="IN">Failed to authenticate the user.</span></p>
<p class=""><span lang="IN">Using Post-Auth-Type REJECT</span></p>
<p class=""><span lang="IN"># Executing group from file
/etc/freeradius/sites-enabled/default</span></p>
<p class=""><span lang="IN">+- entering group REJECT {...}</span></p>
<p class=""><span lang="IN">[attr_filter.access_reject] <span style> </span>expand: %{User-Name} ->
<a href="mailto:1510080325656501@wlan.mnc008.mcc510.3gppnetwork.org">1510080325656501@wlan.mnc008.mcc510.3gppnetwork.org</a></span></p>
<p class=""><span lang="IN">attr_filter: Matched entry DEFAULT at line 11</span></p>
<p class=""><span lang="IN">++[attr_filter.access_reject] returns updated</span></p>
<p class=""><span lang="IN">Delaying reject of request 3 for 1 seconds</span></p>
<p class=""><span lang="IN">Going to the next request</span></p>
<p class=""><span lang="IN">Waking up in 0.9 seconds.</span></p>
<p class=""><span lang="IN">Sending delayed reject for request 3</span></p>
<p class=""><span lang="IN">Sending Access-Reject of id 2 to 192.168.2.1
port 2048</span></p>
<p class=""><span lang="IN"><span style> </span>EAP-Message
= 0x04000004</span></p>
<p class=""><span lang="IN"><span style> </span>Message-Authenticator
= 0x00000000000000000000000000000000</span></p>
<p class=""><span lang="IN">Waking up in 4.9 seconds.</span></p>
<p class=""><span lang="IN">Cleaning up request 3 ID 2 with timestamp +135</span></p>
<p class=""><span lang="IN">Ready to process requests.</span></p><p class=""><br><span lang="IN"></span></p><p class=""><span lang="IN">thank you very much for your help,time and your advice</span></p><p class=""><span lang="IN">best regards<br>
</span></p>
</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Jun 20, 2013 at 4:49 PM, Iliya Peregoudov <span dir="ltr"><<a href="mailto:iperegudov@cboss.ru" target="_blank">iperegudov@cboss.ru</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 20.06.2013 13:38, raptor raptor wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Sending Access-Accept of id 0 to 192.168.2.1 port 2048<br>
MS-MPPE-Recv-Key = 0x9d0b6b0a9151822473399a9fed44<u></u>e8f0d74df083532a7d437e436f6086<u></u>6252d8<br>
MS-MPPE-Send-Key = 0xebf07da25ca3cd97267d1fc6a1ce<u></u>18d68ad2737902f610284bdb45c6ee<u></u>d0cb7f<br>
EAP-Message = 0x03760004<br>
Message-Authenticator = 0x0000000000000000000000000000<u></u>0000<br>
User-Name = "<a href="mailto:1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org" target="_blank">1510019760806391@wlan.mnc001.<u></u>mcc510.3gppnetwork.org</a>"<br>
Finished request 2.<br>
</blockquote>
<br></div>
I cannot see authentication failure in this debug log.<div class="HOEnZb"><div class="h5"><br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a><br>
</div></div></blockquote></div><br></div>