Hi, Please let me know , if its possible to test EAP-AKA authentication without HLR/HSS using freeradius. i.e can freeradius gernarte the quients from given RAND, Key value ?. if yes means , where can get the code for this algorithm? Thanks Antoni Milton.
On Wed, Apr 24, 2013 at 08:11:11AM -0700, antoni milton wrote:
Please let me know , if its possible to test EAP-AKA authentication without HLR/HSS using freeradius.
Please don't cross-post. There is code in hostapd which you may be able to modify to do what you want: $ grep -R USIM_SIM . ./src/eap_peer/eap_aka.c:#ifdef CONFIG_USIM_SIMULATOR ./src/eap_peer/eap_aka.c:#endif /* CONFIG_USIM_SIMULATOR */ ./wpa_supplicant/android.config:#CONFIG_USIM_SIMULATOR=y ./wpa_supplicant/Android.mk:ifdef CONFIG_USIM_SIMULATOR ./wpa_supplicant/Android.mk:L_CFLAGS += -DCONFIG_USIM_SIMULATOR ./wpa_supplicant/ChangeLog: enable with CONFIG_SIM_SIMULATOR=y/CONFIG_USIM_SIMULATOR=y in .config ./wpa_supplicant/defconfig:#CONFIG_USIM_SIMULATOR=y ./wpa_supplicant/Makefile:ifdef CONFIG_USIM_SIMULATOR ./wpa_supplicant/Makefile:CFLAGS += -DCONFIG_USIM_SIMULATOR 2008-11-23 - v0.6.6 * added Milenage SIM/USIM emulator for EAP-SIM/EAP-AKA (can be used to simulate test SIM/USIM card with a known private key; enable with CONFIG_SIM_SIMULATOR=y/CONFIG_USIM_SIMULATOR=y in .config and password="Ki:OPc"/password="Ki:OPc:SQN" in network configuration) It looks like src/crypto/milenage.c does the actual checking, and that's what you'd have to move into radius. Any questions about that code need to go to the hostapd list of course. HTH, Brian.
Thanks a lot Brian for your Response. Now I am trying to download the source code but i am not able to get as a package within freeradius and android-wpa_supplicant. Could you please point me the location/ repository to get the source code ? Thanks Antoni Milton. ________________________________ From: Brian Candler <B.Candler@pobox.com> To: antoni milton <antoni_india@yahoo.com> Cc: "freeradius-users@lists.freeradius.org" <freeradius-users@lists.freeradius.org> Sent: Thursday, April 25, 2013 2:47 PM Subject: Re: EAP-AKA testing without HLR/HSS On Wed, Apr 24, 2013 at 08:11:11AM -0700, antoni milton wrote:
Please let me know , if its possible to test EAP-AKA authentication without HLR/HSS using freeradius.
Please don't cross-post. There is code in hostapd which you may be able to modify to do what you want: $ grep -R USIM_SIM . ./src/eap_peer/eap_aka.c:#ifdef CONFIG_USIM_SIMULATOR ./src/eap_peer/eap_aka.c:#endif /* CONFIG_USIM_SIMULATOR */ ./wpa_supplicant/android.config:#CONFIG_USIM_SIMULATOR=y ./wpa_supplicant/Android.mk:ifdef CONFIG_USIM_SIMULATOR ./wpa_supplicant/Android.mk:L_CFLAGS += -DCONFIG_USIM_SIMULATOR ./wpa_supplicant/ChangeLog: enable with CONFIG_SIM_SIMULATOR=y/CONFIG_USIM_SIMULATOR=y in .config ./wpa_supplicant/defconfig:#CONFIG_USIM_SIMULATOR=y ./wpa_supplicant/Makefile:ifdef CONFIG_USIM_SIMULATOR ./wpa_supplicant/Makefile:CFLAGS += -DCONFIG_USIM_SIMULATOR 2008-11-23 - v0.6.6 * added Milenage SIM/USIM emulator for EAP-SIM/EAP-AKA (can be used to simulate test SIM/USIM card with a known private key; enable with CONFIG_SIM_SIMULATOR=y/CONFIG_USIM_SIMULATOR=y in .config and password="Ki:OPc"/password="Ki:OPc:SQN" in network configuration) It looks like src/crypto/milenage.c does the actual checking, and that's what you'd have to move into radius. Any questions about that code need to go to the hostapd list of course. HTH, Brian.
On Tue, Apr 30, 2013 at 02:04:59AM -0700, Antoni Milton wrote:
Now I am trying to download the source code but i am not able to get as a package within freeradius and android-wpa_supplicant.
That statement doesn't mean anything to me. There is no "package within freeradius" containing hostapd - they are separate. And I don't know what android-wpa_supplicant has to do with it. Sorry if I wasn't clear before, but I was saying that I think you will need to write your own code to do this authentication within freeradius, I was just pointing out that there are parts in hostapd which may serve as a guide. If you're not able to do this you might be able to find someone else in your organisation who can.
Could you please point me the location/ repository to get the source code ?
Enter "hostapd" into google. The first hit is http://hostap.epitest.fi/hostapd/ There are download links and a link to the GIT repo.
Incidentally, there is some discussion about EAP-AKA on freeradius-devel at the moment: http://lists.freeradius.org/pipermail/freeradius-devel/2013-April/008016.htm... If that user gets it working, they may be able to help you.
participants (3)
-
antoni milton -
Antoni Milton
-
Brian Candler