FreeRadius + EAP-AKA support
Hi, We are trying to use FreeRadius1.1.4 as authentication server for EAP-AKA implementation with our product toolkit. As per the RFC 4187 AT_RES The value field of this attribute begins with the 2-byte RES Length, which identifies the exact length of the RES in bits. The RES length is followed by the AKA RES parameter. According to [TS33.105], the length of the AKA RES can vary between 32 and 128 bits. Because the length of the AT_RES attribute must be a multiple of 4 bytes, the sender pads the RES with zero bits where necessary. In the freeradius1.1.4 implementation, for EAP-AKA the value of RES length is always considered as constant EAPSIM_RES_SIZE (16). It doesn't take care of the values other than 16 bytes. We in our toolkit needs to support all the variable length of RES values from 32 bits (4 bytes) to 128 bits (16 bytes). So I have modified the FreeRadius implementation for the same support. The intention of writing such mail is to get the information that if somebody has already noticed and fixed this issue in the latest releases, so please share that information as well. In case it's not been fixed as yet, then may be I could contribute my patch for freeradius 1.1.4 version to support all variable length RES value varying from 32 bits to 128 bits. Thanks. Warm regards. Sunil Kumar The information contained in this electronic mail transmission may be privileged and confidential, and therefore, protected from disclosure. If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer without copying or disclosing it.
Kumar, Sunil wrote:
We are trying to use FreeRadius1.1.4 as authentication server for EAP-AKA implementation with our product toolkit.
Hm... if you've applied the EAP-AKA patch, could you send a copy to me? bugs.freeradius.org has gone down, and I'm not sure I have a copy of the patch anywhere.
We in our toolkit needs to support all the variable length of RES values from 32 bits (4 bytes) to 128 bits (16 bytes). So I have modified the FreeRadius implementation for the same support.
Nice. Please send us the patch!
The intention of writing such mail is to get the information that if somebody has already noticed and fixed this issue in the latest releases, so please share that information as well.
No one else has seen this issue.
In case it's not been fixed as yet, then may be I could contribute my patch for freeradius 1.1.4 version to support all variable length RES value varying from 32 bits to 128 bits.
Please send the patch for EAP-AKA! Or even the entire rlm_eap directory that you're using, and we'll work out the patch. Alan DeKok.
Hi Alan Please find the attached patch to fix the variable length issue for AT_RES with EAP-AKA support. I have created this patch on top of FreeRadius 1.1.4 release version. Please provide your valuable comments or feedback for the same. Thanks. Warm regards. Sunil Kumar
-----Original Message----- From: Alan DeKok [mailto:aland@deployingradius.com] Sent: Thursday, February 26, 2009 1:53 PM To: FreeRadius developers mailing list Cc: Kumar, Sunil Subject: Re: FreeRadius + EAP-AKA support
Kumar, Sunil wrote:
We are trying to use FreeRadius1.1.4 as authentication server for EAP-AKA implementation with our product toolkit.
Hm... if you've applied the EAP-AKA patch, could you send a copy to me? bugs.freeradius.org has gone down, and I'm not sure I have a copy of the patch anywhere.
We in our toolkit needs to support all the variable length of RES values from 32 bits (4 bytes) to 128 bits (16 bytes). So I have modified the FreeRadius implementation for the same support.
Nice. Please send us the patch!
The intention of writing such mail is to get the information that if somebody has already noticed and fixed this issue in the latest releases, so please share that information as well.
No one else has seen this issue.
In case it's not been fixed as yet, then may be I could contribute my patch for freeradius 1.1.4 version to support all variable length RES value varying from 32 bits to 128 bits.
Please send the patch for EAP-AKA! Or even the entire rlm_eap directory that you're using, and we'll work out the patch.
Alan DeKok.
The information contained in this electronic mail transmission may be privileged and confidential, and therefore, protected from disclosure. If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer without copying or disclosing it.
Kumar, Sunil wrote:
Hi Alan
Please find the attached patch to fix the variable length issue for AT_RES with EAP-AKA support.
I have created this patch on top of FreeRadius 1.1.4 release version. Please provide your valuable comments or feedback for the same.
Please send the *entire* rlm_eap directory. That module is *not* in the default FreeRADIUS release 1.1.4. So sending a patch doesn't help... because there are no rlm_eap_aka files to patch. IIRC, the EAP-AKA patch changed a number of files outside of the rlm_eap_aka directory, too. Alan DeKok.
Hi Kumar, Would you please also send me a copy of the patch? Thank you very much. cht.maillist@gmail.com BillGets 2009.11.06 -- Kumar, Sunil wrote : Hi Alan Please find the attached patch to fix the variable length issue for AT_RES with EAP-AKA support. I have created this patch on top of FreeRadius 1.1.4 release version. Please provide your valuable comments or feedback for the same. Thanks. Warm regards. Sunil Kumar
-----Original Message----- From: Alan DeKok [mailto:aland@depl...] Sent: Thursday, February 26, 2009 1:53 PM To: FreeRadius developers mailing list Cc: Kumar, Sunil Subject: Re: FreeRadius + EAP-AKA support
Kumar, Sunil wrote:
We are trying to use FreeRadius1.1.4 as authentication server for EAP-AKA implementation with our product toolkit.
Hm... if you've applied the EAP-AKA patch, could you send a copy to me? bugs.freeradius.org has gone down, and I'm not sure I have a copy of the patch anywhere.
We in our toolkit needs to support all the variable length of RES values from 32 bits (4 bytes) to 128 bits (16 bytes). So I have modified the FreeRadius implementation for the same support.
Nice. Please send us the patch!
The intention of writing such mail is to get the information that if somebody has already noticed and fixed this issue in the latest releases, so please share that information as well.
No one else has seen this issue.
In case it's not been fixed as yet, then may be I could contribute my patch for freeradius 1.1.4 version to support all variable length RES value varying from 32 bits to 128 bits.
Please send the patch for EAP-AKA! Or even the entire rlm_eap directory that you're using, and we'll work out the patch.
Alan DeKok.
The information contained in this electronic mail transmission may be privileged and confidential, and therefore, protected from disclosure. If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer without copying or disclosing it. -- This message was sent on behalf of cht.maillist@gmail.com at openSubscriber.com http://www.opensubscriber.com/message/freeradius-devel@lists.freeradius.org/...
Hi Kumar, do you have this patch (variable length of RES key) ? Kind Thanks, Sakthi On Fri, Nov 6, 2009 at 2:41 PM, <cht.maillist@gmail.com> wrote:
Hi Kumar, Would you please also send me a copy of the patch? Thank you very much.
cht.maillist@gmail.com
BillGets 2009.11.06
-- Kumar, Sunil wrote : Hi Alan
Please find the attached patch to fix the variable length issue for AT_RES with EAP-AKA support.
I have created this patch on top of FreeRadius 1.1.4 release version. Please provide your valuable comments or feedback for the same.
Thanks.
Warm regards. Sunil Kumar
-----Original Message----- From: Alan DeKok [mailto:aland@depl...] Sent: Thursday, February 26, 2009 1:53 PM To: FreeRadius developers mailing list Cc: Kumar, Sunil Subject: Re: FreeRadius + EAP-AKA support
Kumar, Sunil wrote:
We are trying to use FreeRadius1.1.4 as authentication server for EAP-AKA implementation with our product toolkit.
Hm... if you've applied the EAP-AKA patch, could you send a copy to me? bugs.freeradius.org has gone down, and I'm not sure I have a copy of the patch anywhere.
We in our toolkit needs to support all the variable length of RES values from 32 bits (4 bytes) to 128 bits (16 bytes). So I have modified the FreeRadius implementation for the same support.
Nice. Please send us the patch!
The intention of writing such mail is to get the information that if somebody has already noticed and fixed this issue in the latest releases, so please share that information as well.
No one else has seen this issue.
In case it's not been fixed as yet, then may be I could contribute my patch for freeradius 1.1.4 version to support all variable length RES value varying from 32 bits to 128 bits.
Please send the patch for EAP-AKA! Or even the entire rlm_eap directory that you're using, and we'll work out the patch.
Alan DeKok.
The information contained in this electronic mail transmission may be privileged and confidential, and therefore, protected from disclosure. If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer without copying or disclosing it.
-- This message was sent on behalf of cht.maillist@gmail.com at openSubscriber.com
http://www.opensubscriber.com/message/freeradius-devel@lists.freeradius.org/... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
participants (4)
-
Alan DeKok -
cht.maillist＠gmail.com -
Kumar, Sunil -
sakthi krishnan