Hello all, I configured manually ($ ./configure --with-modules="rlm_sim" --with-modules="rlm_sim_files" && make) and installed (# make install) the freeradius-server-2.1.12 from the upstream on the CentOS 5.7 x86_64 machine. Then I configured the following configuration files: - /usr/local/etc/raddb/radiusd.conf - /usr/local/etc/raddb/clients.conf - /usr/local/etc/raddb/eap.conf - /usr/local/etc/raddb/sites-enabled/default And lastly, I created the /usr/local/etc/raddb/simtriplets.dat with six (6) triplets (just to make sure though AFAIK 3 is enough) for a single IMSI. Then, I executed the command "# /usr/local/sbin/radiusd -X -d /usr/local/etc/raddb" and tried testing directly from my iPhone4, I got the below snippet of the stdout logs: - - - < s n i p > - - - rad_recv: Access-Request packet from host 172.17.1.110 port 2048, id=120, length=249 User-Name = "3be855ae7a8607c7f@wlan.mnc001.mcc525.3gppnetwork.org" NAS-IP-Address = 172.17.1.110 NAS-Port = 0 Called-Station-Id = "0E-19-BE-80-71-00:eap-sim" Calling-Station-Id = "5C-59-48-67-C7-A5" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x0200003901336265383535616537613836303763376640776c616e2e6d6e633030312e6d63633532352e336770706e6574776f726b2e6f7267 Message-Authenticator = 0xdef1645477a2ba0f9a9371f0a9eea8b7 # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/172.17.1.110/auth-detail-20120213 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/172.17.1.110/auth-detail-20120213 [auth_log] expand: %t -> Mon Feb 13 23:48:18 2012 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] Looking up realm "wlan.mnc001.mcc525.3gppnetwork.org" for User-Name = "3be855ae7a8607c7f@wlan.mnc001.mcc525.3gppnetwork.org" [suffix] No such realm "wlan.mnc001.mcc525.3gppnetwork.org" ++[suffix] returns noop rlm_sim_files: insufficient number of challenges for imsi 3be855ae7a8607c7f@wlan.mnc001.mcc525.3gppnetwork.org: 0 ++[sim_files] returns notfound [eap] EAP packet type response id 0 length 57 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = EAP # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group authenticate {...} [eap] EAP Identity [eap] processing type sim can not initiate sim, no RAND1 attribute [eap] Default EAP type sim failed in initiate [eap] Failed in EAP select ++[eap] returns invalid Failed to authenticate the user. Login incorrect: [3be855ae7a8607c7f@wlan.mnc001.mcc525.3gppnetwork.org] (from client eap-sim port 0 cli 5C-59-48-67-C7-A5) Using Post-Auth-Type Reject # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> 3be855ae7a8607c7f@wlan.mnc001.mcc525.3gppnetwork.org attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 120 to 172.17.1.110 port 2048 EAP-Message = 0x04000004 Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 4.9 seconds. Cleaning up request 0 ID 120 with timestamp +13 Ready to process requests. - - - < s n i p > - - - Based on the above logs, below are the (3) lines that I'm not sure how to address them: [suffix] No such realm "wlan.mnc001.mcc525.3gppnetwork.org" rlm_sim_files: insufficient number of challenges for imsi 3be855ae7a8607c7f@wlan.mnc001.mcc525.3gppnetwork.org: 0 ++[sim_files] returns notfound [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. [eap] processing type sim can not initiate sim, no RAND1 attribute [eap] Default EAP type sim failed in initiate [eap] Failed in EAP select ++[eap] returns invalid Failed to authenticate the user. Login incorrect: [3be855ae7a8607c7f@wlan.mnc001.mcc525.3gppnetwork.org] (from client eap-sim port 0 cli 5C-59-48-67-C7-A5) Please advice on how am I going to proceed from here. Thank you in advance. Regards, GNUbie