EAP-AKA support for Freeradius-1.1.4
Hi, Finally, I have created a patch for FreeRadius to support EAP-AKA implementation. Please find the attached patch (freeradius-1.1.4_eap_aka_support.diff) in the rar file for freeradius-1.1.4 version release. I hope with small effort that can also be applied on the latest version releases as well. Apart from adding EAP-AKA support changes in patch, I have also added some fixes for EAP-Aka to handle variable RES length support. As far as configuration is concerned, there are very small changes required in "eap.conf" and "users" files to make it working and those changes are as follows 1. eap.conf a) Remove the default eap type from md5 in EAP configuration b) Add the EAP types of sim and aka along with md5 2. Users Add the user domain along with EAP types and their respective parameters for validation. I have created a patch (freeradius-1.1.4_eap_aka_support_conf.diff) for the configuration changes. Please find attached freeradius-1.1.4_eap_aka_support_conf.diff patch file in the attached rar file for the reference. Feel free to revert, in case there are some clarifications required. Thanks. Warm regards. Sunil Kumar The information contained in this electronic mail transmission may be privileged and confidential, and therefore, protected from disclosure. If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer without copying or disclosing it.
Kumar, Sunil wrote:
Finally, I have created a patch for FreeRadius to support EAP-AKA implementation. Please find the attached patch (freeradius-1.1.4_eap_aka_support.diff) in the rar file for freeradius-1.1.4 version release. I hope with small effort that can also be applied on the latest version releases as well.
I've taken a quick look. The effort involved isn't complex, but it isn't trivial. The easiest way to get the patch in is to ensure it applies to 2.1.x. See git.freeradius.org, and github for instructions on forking the freeradius-server repository. I would suggest trying to checkout release_1_1_4 via git, creating a branch, and pplying the AKA patch. Then, merge the changes up to a more recent version of the server.
1. eap.conf
a) Remove the default eap type from md5 in EAP configuration
That is unnecessary.
b) Add the EAP types of sim and aka along with md5
That's fine.
Feel free to revert, in case there are some clarifications required.
1.1.4 is *years* out of date. No patches or changes will be done to it every again.. Alan DeKok.
Just to let you know that I could not apply this patch as it is to 2.1.3 (the version I was running on my machine), but could merge the changes to version 2.1.3 and got it compiled and even working. So, I have the changes merged to 2.1.3 now. Preethi Preethi Narayanan Motorola Work: 8475233906 Cell: 8473348012 Text: 8473348012@txt.att.net -----Original Message----- From: freeradius-devel-bounces+preethi.narayanan=motorola.com@lists.freeradius .org [mailto:freeradius-devel-bounces+preethi.narayanan=motorola.com@lists.fr eeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, May 12, 2009 9:34 AM To: FreeRadius developers mailing list Subject: Re: EAP-AKA support for Freeradius-1.1.4 Kumar, Sunil wrote:
Finally, I have created a patch for FreeRadius to support EAP-AKA implementation. Please find the attached patch (freeradius-1.1.4_eap_aka_support.diff) in the rar file for freeradius-1.1.4 version release. I hope with small effort that can also be applied on the latest version releases as well.
I've taken a quick look. The effort involved isn't complex, but it isn't trivial. The easiest way to get the patch in is to ensure it applies to 2.1.x. See git.freeradius.org, and github for instructions on forking the freeradius-server repository. I would suggest trying to checkout release_1_1_4 via git, creating a branch, and pplying the AKA patch. Then, merge the changes up to a more recent version of the server.
1. eap.conf
a) Remove the default eap type from md5 in EAP configuration
That is unnecessary.
b) Add the EAP types of sim and aka along with md5
That's fine.
Feel free to revert, in case there are some clarifications required.
1.1.4 is *years* out of date. No patches or changes will be done to it every again.. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
Narayanan Preethi-A12713 wrote:
Just to let you know that I could not apply this patch as it is to 2.1.3 (the version I was running on my machine), but could merge the changes to version 2.1.3 and got it compiled and even working. So, I have the changes merged to 2.1.3 now.
OK, thanks. I've taken another look at it, and will see if I can do something similar. The main issue is that it patches the SIM code, which is unnecessary. Alan DeKok.
participants (3)
-
Alan DeKok -
Kumar, Sunil -
Narayanan Preethi-A12713