<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type"/>
<style type="text/css">.mceResizeHandle {position: absolute;border: 1px solid black;background: #FFF;width: 5px;height: 5px;z-index: 10000}.mceResizeHandle:hover {background: #000}img[data-mce-selected] {outline: 1px solid black}img.mceClonedResizable, table.mceClonedResizable {position: absolute;outline: 1px dashed black;opacity: .5;z-index: 10000}
</style></head><body style="">
<div>
Fantastic and thanks. On it now :)
</div>
<div>
<br/>On 27 August 2013 at 08:54 Iliya Peregoudov <iperegudov@cboss.ru> wrote:
<br/>> On 27.08.2013 10:57, ken.farrington wrote:
<br/>> > Many thanks indeed. Are you saying I can just take out sim_files from
<br/>> > the authorise in the default file and it should work anyway?
<br/>> > If so, fantastic :)
<br/>>
<br/>> My raddb/sites-enabled/default:
<br/>>
<br/>> authorize {
<br/>> preprocess
<br/>> auth_log
<br/>> chap
<br/>> mschap
<br/>> suffix
<br/>> eap {
<br/>> ok = return
<br/>> }
<br/>> files
<br/>> pap
<br/>> }
<br/>>
<br/>> My raddb/users:
<br/>>
<br/>> 1250016490216808@wlan.mnc001.mcc250.3gppnetwork.org
<br/>> EAP-Sim-RAND1 = 0x09844aff4ccf66cdb95e59dba8ec291c,
<br/>> EAP-Sim-RAND2 = 0x100446e9e8f553a9d87d0444a44b6cf5,
<br/>> EAP-Sim-RAND3 = 0x753fdfc2d7e834002557a069462a1fa5,
<br/>> EAP-Sim-SRES1 = 0x5dc9a406,
<br/>> EAP-Sim-SRES2 = 0x3b3f8ea3,
<br/>> EAP-Sim-SRES3 = 0x85bb8aeb,
<br/>> EAP-Sim-KC1 = 0x75e85aff085e917b,
<br/>> EAP-Sim-KC2 = 0x3055d76de12f1772,
<br/>> EAP-Sim-KC3 = 0x81806503efeebec1
<br/>>
<br/>> 1250016490216808@wlan.mnc001.mcc250.3gppnetwork.org is a decorated
<br/>> permanent identity for IMSI 250016490216808.
<br/>>
<br/>> (EA-Sim-RAND1, EAP-Sim-SRES1, EAP-Sim-KC1) is an authentication vector
<br/>> (aka GSM triplet). rlm_eap_sim requires three GSM triplets to be available.
<br/>>
<br/>> You can extract IMSI and GSM triplets from the SIM card using smart card
<br/>> reader and agsm2 program (http://agsm.sourceforge.net).
<br/>>
<br/>> Note this will always use same GSM triplets for authentication and
<br/>> consequently same master session key (MSK) for encryption. You need to
<br/>> integrate with HLR to retrieve truly random GSM triplets. Usually this
<br/>> is done by some sort of RADIUS-to-MAP gateway, like Cisco ITP.
<br/>> -
<br/>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
</div>
<div id="ox-signature">
Ken Farrington
<br/>Director
<br/>CCIE #12651
<br/>
<br/>802 Limited
<br/>International House, 221 Bow Road, London, E3 2SJ, United Kingdom
<br/>Direct: +44 (0)7500 802802
<br/>ken.farrington@802.co.uk
<br/>http://www.802.co.uk
<br/>
<br/>
<br/>Disclaimer
<br/>This e-mail may contain information that is confidential, privileged or otherwise protected from disclosure. If you are not an intended recipient of this e-mail, do not duplicate or redistribute it by any means. Please delete it and any attachments and notify the sender that you have received it in error. Any views or opinions presented are solely those of the author and do not necessarily represent those of 802 Limited or any subsidiary company of 802 Limited. This email may relate to or be sent from other members of the 802 Group. All rights reserved. 802 Limited. Registered in the UK. Company Number. 7962864.
</div>
</body></html>