Hi, i have added simtriplets.dat and create file sim_files in /freeradius/modules and also i configure sim_files in authorize{} in /sites-enabled/default but i dont use suffix module so my concern is how to solve this message : "rlm_sim_files: insufficient number of challenges for imsi imsi@wlan.mnc001.mcc510.3gppnetwork.org : 0 " "[sim_files] returnnot found " here is my log: Ready to process requests. rad_recv: Access-Request packet from host 192.168.1.1 port 2048, id=0, length=215 User-Name = " 1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org" NAS-IP-Address = 192.168.1.1 Called-Station-Id = "48f8b315461a" Calling-Station-Id = "1814563e5189" NAS-Identifier = "48f8b315461a" NAS-Port = 38 Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x02000038013135313030313937363038303633393140776c616e2e6d6e633030312e6d63633531302e336770706e6574776f726b2e6f7267 Message-Authenticator = 0x91af511bc958602ec652547f08683045 +- entering group authorize {...} ++[preprocess] returns ok rlm_sim_files: insufficient number of challenges for imsi 1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org: 0 ++[sim_files] returns notfound [eap] EAP packet type response id 0 length 56 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound [files] users: Matched entry 1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org at line 205 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] EAP Identity [eap] processing type sim [eap] Underlying EAP-Type set EAP ID to 218 ++[eap] returns handled Sending Access-Challenge of id 0 to 192.168.1.1 port 2048 EAP-Message = 0x01da0014120a00000f0200020001000011010100 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x1e96d6021e4cc425cab980602ba77fc7 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.1.1 port 2048, id=0, length=265 Cleaning up request 0 ID 0 with timestamp +91 User-Name = " 1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org" NAS-IP-Address = 192.168.1.1 Called-Station-Id = "48f8b315461a" Calling-Station-Id = "1814563e5189" NAS-Identifier = "48f8b315461a" NAS-Port = 38 Framed-MTU = 1400 State = 0x1e96d6021e4cc425cab980602ba77fc7 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x02da0058120a00000705000066bf4d6f1cf16dae34700d33b40a2cf2100100010e0e00333135313030313937363038303633393140776c616e2e6d6e633030312e6d63633531302e336770706e6574776f726b2e6f726700 Message-Authenticator = 0x46abb1e0d252ff580dd8d31e5a56ba46 +- entering group authorize {...} ++[preprocess] returns ok rlm_sim_files: insufficient number of challenges for imsi 1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org: 0 ++[sim_files] returns notfound [eap] EAP packet type response id 218 length 88 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound [files] users: Matched entry 1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org at line 205 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/sim [eap] processing type sim +++> EAP-sim decoded packet: User-Name = " 1510019760806391@wlan.mnc001.mcc510.3gppnetwork.org" NAS-IP-Address = 192.168.1.1 Called-Station-Id = "48f8b315461a" Calling-Station-Id = "1814563e5189" NAS-Identifier = "48f8b315461a" NAS-Port = 38 Framed-MTU = 1400 State = 0x1e96d6021e4cc425cab980602ba77fc7 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x02da0058120a00000705000066bf4d6f1cf16dae34700d33b40a2cf2100100010e0e00333135313030313937363038303633393140776c616e2e6d6e633030312e6d63633531302e336770706e6574776f726b2e6f726700 Message-Authenticator = 0x46abb1e0d252ff580dd8d31e5a56ba46 EAP-Type = SIM EAP-Sim-Subtype = Start EAP-Sim-NONCE_MT = 0x000066bf4d6f1cf16dae34700d33b40a2cf2 EAP-Sim-SELECTED_VERSION = 0x0001 EAP-Sim-IDENTITY = 0x00333135313030313937363038303633393140776c616e2e6d6e633030312e6d63633531302e336770706e6574776f726b2e6f726700 [eap] Underlying EAP-Type set EAP ID to 219 ++[eap] returns handled Sending Access-Challenge of id 0 to 192.168.1.1 port 2048 EAP-Message = 0x01db0050120b0000010d0000101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f0b050000d0b87a34927435f51b0b4892462ced47 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x1e96d6021f4dc425cab980602ba77fc7 Finished request 1. Going to the next request Waking up in 4.9 seconds. Cleaning up request 1 ID 0 with timestamp +91 Ready to process requests. thanx for your answer On Thu, May 30, 2013 at 2:16 PM, Iliya Peregoudov <iperegudov@cboss.ru>wrote:
You should designate realm wlan.mnc001.mcc510.**3gppnetwork.org<http://wlan.mnc001.mcc510.3gppnetwork.org>as locally served in raddb/proxy.conf:
# raddb/proxy.conf realm wlan.mnc001.mcc510.**3gppnetwork.org<http://wlan.mnc001.mcc510.3gppnetwork.org>{ }
Then you should add authentication vectors to raddb/simtriplets.dat:
# raddb/simtriplets.dat # 1<IMSI>,<RAND>,<SRES>,<KC> 1250991417456196,**cf92007bd3814afaa71a58bbe406b8** a0,6b7ace84,b54e3cad99ab2000 ...
At least 3 authentication vectors should be present for each IMSI.
You can generate authentication vectors for your SIM card using smart card reader and agsm program (http://agsm.sourceforge.net/)**.
On 30.05.2013 10:44, raptor raptor wrote:
Hi all, i have read anything about my problem, but i dont get any idea to solve
in FR i get message like this :
"rlm_sim_files: insufficient number of challenges for imsi imsi@wlan.mnc001.mcc510.**3gppnetwork.org<imsi@wlan.mnc001.mcc510.3gppnetwork.org> <mailto:imsi@wlan.mnc001.**mcc510.3gppnetwork.org<imsi@wlan.mnc001.mcc510.3gppnetwork.org>> : 0 " "[sim_files] returnnot found "
- List info/subscribe/unsubscribe? See http://www.freeradius.org/** list/users.html <http://www.freeradius.org/list/users.html>