<div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif;font-size:small">Okay Ilya,</div><div class="gmail_default" style="font-family:georgia,serif;font-size:small"><br></div><div class="gmail_default" style="font-family:georgia,serif;font-size:small">
your explanation help me a lot to understand for my problem,</div><div class="gmail_default" style="font-family:georgia,serif;font-size:small">I really appreciated for that</div><div class="gmail_default" style="font-family:georgia,serif;font-size:small">
<br></div><div class="gmail_default" style="font-family:georgia,serif;font-size:small">thank you</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Jun 27, 2014 at 1:08 PM, Iliya Peregoudov <span dir="ltr"><<a href="mailto:iperegudov@cboss.ru" target="_blank">iperegudov@cboss.ru</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">There should be support for EAP in both SIP user agent and SIP proxy. There is long ago outdated draft <<a href="http://tools.ietf.org/html/draft-torvinen-http-eap-01" target="_blank">http://tools.ietf.org/html/<u></u>draft-torvinen-http-eap-01</a>> that specify how to encapsulate EAP inside WWW-Authentication and Authorization HTTP headers.<br>
<br>
Moreover SIP proxy should support forwarding EAP messages between SIP protocol and RADIUS protocol.<br>
<br>
Moreover SIP user agent should have an access to SIM card. If you talk about PC-based SIP user agent (e.g. X-Lite), SIM card should be accessible ether via PC/SC API (if SIM card connected to PC through smart card reader), or via modem AT command set specified in 3GPP TS 27.007 (if SIM card connected to GPRS modem that is connected to PC).<br>
<br>
All this is definitely off-topic for this mailing list.<div class=""><br>
<br>
<br>
On <a href="tel:26.06.2014%2021" value="+12606201421" target="_blank">26.06.2014 21</a>:35, Muhammad Hasan wrote:<br>
</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">
so basically it's still possible to implement eap-sim based voip<br>
authentication, but the problem is in voip client (like x-lite, etc)<br>
that does not support for eap-sim?<br>
<br>
<br>
On Wed, Jun 25, 2014 at 8:33 PM, Iliya Peregoudov <<a href="mailto:iperegudov@cboss.ru" target="_blank">iperegudov@cboss.ru</a><br></div><div class="">
<mailto:<a href="mailto:iperegudov@cboss.ru" target="_blank">iperegudov@cboss.ru</a>>> wrote:<br>
<br>
It is not quite clear how to transport EAP inside SIP messages. This<br>
is not specified in RFCs and I doubt have implemented in any SIP client.<br>
<br>
SIP protocol uses HTTP Digest authentication. SIP proxy can<br>
transport HTTP Digest authentication to RADIUS server according to<br></div>
<<a href="https://tools.ietf.org/html/__draft-sterman-aaa-sip-01" target="_blank">https://tools.ietf.org/html/_<u></u>_draft-sterman-aaa-sip-01</a><div class=""><br>
<<a href="https://tools.ietf.org/html/draft-sterman-aaa-sip-01" target="_blank">https://tools.ietf.org/html/<u></u>draft-sterman-aaa-sip-01</a>>>. FreeRADIUS<br>
rlm_digest module supports draft-sterman-aaa-sip-01 authentication<br>
method.<br>
<br>
<br>
<br></div><div class="">
On <a href="tel:25.06.2014%2016" value="+12506201416" target="_blank">25.06.2014 16</a> <tel:25.06.2014%2016>:01, Muhammad Hasan wrote:<br>
<br>
Hi all,<br>
<br>
I want to make initial VoIP authentication process from asterisk<br>
server<br>
to be based on EAP-SIM authentication of Freeradius server (so<br>
it will<br>
be not necessary to insert account datas in the asterisk<br>
database). Is<br>
there any way of doing that from Freeradius? Or at least, is<br>
there any<br>
way to sync the EAP-SIM data on Freeradius to asterisk server?<br>
<br>
thank you<br>
<br>
--<br>
Best Regards,<br>
<br>
<br>
<br>
<br>
<br>
-<br>
List info/subscribe/unsubscribe? See<br></div>
<a href="http://www.freeradius.org/__list/users.html" target="_blank">http://www.freeradius.org/__<u></u>list/users.html</a><div class=""><br>
<<a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a>><br>
<br>
<br>
-<br>
List info/subscribe/unsubscribe? See<br></div>
<a href="http://www.freeradius.org/__list/users.html" target="_blank">http://www.freeradius.org/__<u></u>list/users.html</a><div class=""><br>
<<a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a>><br>
<br>
<br>
<br>
<br>
<br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a><br>
<br>
</div></blockquote><div class="HOEnZb"><div class="h5">
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr">Best Regards,<br><br><img src="http://i61.tinypic.com/zu5e87.png"><br><br>Email : <a href="mailto:muhhasan.1311@gmail.com" target="_blank">muhhasan.1311@gmail.com</a><br>
CP : 085694394257</div>
</div>