Bohák András wrote:
I am working on a modified rlm_sim_files which uses an SQLite database instead of the text file.
See dictionary.freeradius.internal. The SIM triplets can be obtained as normal attributes from ANY database. You would be better off writing an SQLite plugin for rlm_sql, I think.
It works, but within one run of the EAP-SIM protocol, the module runs 3 times (once for every incoming EAP message) and searches the database/file 3 times. This consumes valuable time and if I delete the triplet in the first run (I want to use a triplet only once), it won't even succeed to authenticate.
Yes. It's inefficient, but it works.
Is there a way to solve this, I mean to tell the sim_files authorize module that it already provided the necessary auth info, and should just say OK without any search? Is the eap_sim module capable of rememering the RAND-SRES-Kc values?
No. The simplest solution is to look at the recent 2.0.0-pre2 release. You should be able to simplify the configuration so that the keys are only looked up when needed. Alan DeKok.