On Fri, Aug 21, 2015 at 10:15:16AM -0700, Siddharth Katragadda wrote:
but I still get the eap_sim: ERROR: EAP-SIM-RAND1 not found Although the passwd file now says: [passwd] = ok
So it looks like passwd file was able to find the User-Name in simtriplets.dat, so it should have extracted the EAP-SIM-RAND1 etc from it right?
No idea: when I drop your simtriplets file and passwd config into a clean 3.0.x HEAD build here, then use radtest (so no eap) I get: ... (0) suffix: Checking for suffix after "@" (0) suffix: Looking up realm "wlan.mnc001.mcc001.3gppnetwork.org" for User-Name = "1001010123456789@wlan.mnc001.mcc001.3gppnetwork.org" (0) suffix: No such realm "wlan.mnc001.mcc001.3gppnetwork.org" (0) [suffix] = noop (0) passwd: Added EAP-SIM-RAND1: '2ADE1426F93045258CCD7B9CF739CD51' to config (0) passwd: Added EAP-SIM-SRES1: 'CA1a6a73' to config (0) passwd: Added EAP-SIM-KC1: '44163dcd3063ee06' to config (0) passwd: Added EAP-SIM-RAND2: 'A7DB577E986F41e999981FE01E8E9351' to config (0) passwd: Added EAP-SIM-SRES2: '9E0ec181' to config (0) passwd: Added EAP-SIM-KC2: '2B3182377B3d2e05' to config (0) passwd: Added EAP-SIM-RAND3: '92F13B6BB93641b0914DD3D6DAAFB78C' to config (0) passwd: Added EAP-SIM-SRES3: '9Ca5541a' to config (0) passwd: Added EAP-SIM-KC3: '767e395d867fa4b0' to config (0) [passwd] = ok (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop ... That looks good enough to me - and checking the code, eap_sim just looks for eap-sim-rand1 in the control attributes. You've trimmed the debug output, so I've no idea what version you are using to test against. You could try adding something like this after your call to passwd to force a debug expansion and see what the value has actually been set to if ("%{escape:%{control:EAP-Sim-Rand1}}" == "h") { noop } e.g. (0) if ("%{escape:%{control:EAP-Sim-Rand1}}" == "h") { (0) EXPAND %{escape:%{control:EAP-Sim-Rand1}} (0) --> 0x3241444531343236463933303435323538434344374239434637333943443531 (0) if ("%{escape:%{control:EAP-Sim-Rand1}}" == "h") -> FALSE If you get --> instead, then EAP-Sim-Rand1 wasn't set properly for some reason.
Btw, I did have 10 fields in the simtriplets.dat (delimited by colon). Why did you find only 4??
Failing eyesight, dementia, or the fact that in your first e-mail there were only four fields in that file. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>