How the Wimax-Msk be encrypted?
hi all, I has installed freeradius-server 2.1.3,but I encounter a problem. I add MSK information in the raddb/usrs as follow: youler Cleartext-Password := "123456" Service-Type = Callback-Login-User, Login-IP-Host = 127.0.0.1, Wimax-MSK += 0x00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff Run the commend ,radiusd -X. I see the results in the server as follow: Sending Access-Accept of id 111 to 127.0.0.1 port 35987 Service-Type = Callback-Login-User Login-IP-Host = 127.0.0.1 WiMAX-MSK += 0x00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff Finally, I parse the radius packet,and get that the lenth of Wimax-MSK is 82. Now, I don't kown it is right or wrong. Besides,I kown the "encrypt=2" in the dictionary stands for tunnel password,but I don't kown freeradius-server how to encode the Wimax-msk. Thanks for your help. -- View this message in context: http://www.nabble.com/How-the-Wimax-Msk-be-encrypted--tp23558787p23558787.ht... Sent from the FreeRadius - Dev mailing list archive at Nabble.com.
youler wrote:
hi all, I has installed freeradius-server 2.1.3,but I encounter a problem. I add MSK information in the raddb/usrs as follow: ... Wimax-MSK += 0x00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff
Run the commend ,radiusd -X. I see the results in the server as follow:
Sending Access-Accept of id 111 to 127.0.0.1 port 35987 ... WiMAX-MSK += 0x00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff
Exactly. It prints out the attribute BEFORE it is encrypted.
Finally, I parse the radius packet,and get that the lenth of Wimax-MSK is 82. Now, I don't kown it is right or wrong.
That's right.
Besides,I kown the "encrypt=2" in the dictionary stands for tunnel password,but I don't kown freeradius-server how to encode the Wimax-msk.
The server does it automatically. Alan DeKok.
Thanks for your reply.I want to decode the Wiamx-Msk. Whether the Wiamx-msk be encoded by the rad_tunnel_pwencode function at freeradius-server/src/lib/radius.c or not. Could I reuse the rad_tunnel_pwdecode() to decode it? Alan DeKok-2 wrote:
youler wrote:
hi all, I has installed freeradius-server 2.1.3,but I encounter a problem. I add MSK information in the raddb/usrs as follow: ... Wimax-MSK += 0x00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff
Run the commend ,radiusd -X. I see the results in the server as follow:
Sending Access-Accept of id 111 to 127.0.0.1 port 35987 ... WiMAX-MSK += 0x00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff
Exactly. It prints out the attribute BEFORE it is encrypted.
Finally, I parse the radius packet,and get that the lenth of Wimax-MSK is 82. Now, I don't kown it is right or wrong.
That's right.
Besides,I kown the "encrypt=2" in the dictionary stands for tunnel password,but I don't kown freeradius-server how to encode the Wimax-msk.
The server does it automatically.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
-- View this message in context: http://www.nabble.com/How-the-Wimax-Msk-be-encrypted--tp23558787p23571079.ht... Sent from the FreeRadius - Dev mailing list archive at Nabble.com.
youler wrote:
Thanks for your reply.I want to decode the Wiamx-Msk.
Why? Where?
Whether the Wiamx-msk be encoded by the rad_tunnel_pwencode function at freeradius-server/src/lib/radius.c or not. Could I reuse the rad_tunnel_pwdecode() to decode it?
There is no need to decode it for code that runs inside of the server. There is no need to decode it if you use "radclient". If you are writing your own client... you will need to figure out how to decode it. Alan DeKok.
I download a freeradius client from freeradius home page.But it isn't support Wiamx-MSk decoding. So, I hope to reuse the freeradiuis-server's source code to modify my client. Alan DeKok-2 wrote:
youler wrote:
Thanks for your reply.I want to decode the Wiamx-Msk.
Why? Where?
Whether the Wiamx-msk be encoded by the rad_tunnel_pwencode function at freeradius-server/src/lib/radius.c or not. Could I reuse the rad_tunnel_pwdecode() to decode it?
There is no need to decode it for code that runs inside of the server. There is no need to decode it if you use "radclient".
If you are writing your own client... you will need to figure out how to decode it.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
-- View this message in context: http://www.nabble.com/How-the-Wimax-Msk-be-encrypted--tp23558787p23581571.ht... Sent from the FreeRadius - Dev mailing list archive at Nabble.com.
youler wrote:
I download a freeradius client from freeradius home page.But it isn't support Wiamx-MSk decoding. So, I hope to reuse the freeradiuis-server's source code to modify my client.
So long as you follow the license, this is OK. If you put the code into a commercial product, there are a number of restrictions that need to be followed. Alan DeKok.
I don't make it for commerce.I am a PH.D and need to complete my experiment. My freeradius-client version is 1.1.6. It is really not support Wiamx-MSK decoding. I want to know the decode function and process at freeradius-server.I thirst for getting your suggestions. Alan DeKok-2 wrote:
youler wrote:
I download a freeradius client from freeradius home page.But it isn't support Wiamx-MSk decoding. So, I hope to reuse the freeradiuis-server's source code to modify my client.
So long as you follow the license, this is OK. If you put the code into a commercial product, there are a number of restrictions that need to be followed.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
-- View this message in context: http://www.nabble.com/How-the-Wimax-Msk-be-encrypted--tp23558787p23589989.ht... Sent from the FreeRadius - Dev mailing list archive at Nabble.com.
youler wrote:
I don't make it for commerce.I am a PH.D and need to complete my experiment. My freeradius-client version is 1.1.6. It is really not support Wiamx-MSK decoding. I want to know the decode function and process at freeradius-server.I thirst for getting your suggestions.
The attribute is encrypted via the normal tunnel password method. Alan DeKok.
participants (2)
-
Alan DeKok -
youler