RE: can not initiate sim, no RAND1 attribute
Hi , Could someone take time and reply on this please.. Regards, Kalyani -----Original Message----- From: Kalyani Garigipati (kagarigi) Sent: Monday, May 26, 2008 4:54 PM To: 'freeradius-users@lists.freeradius.org' Subject: can not initiate sim, no RAND1 attribute Hi, Now I am able to start the Radiusd without any errors. But I am getting the following messages when I initiate EAP-SIM request to free Radius rlm_pap: Found existing Auth-Type, not changing it. ++[pap] returns noop rad_check_password: Found Auth-Type EAP auth: type "EAP" +- entering group authenticate rlm_eap: EAP Identity rlm_eap: processing type sim can not initiate sim, no RAND1 attribute rlm_eap: Default EAP type sim failed in initiate rlm_eap: Failed in EAP select ++[eap] returns invalid auth: Failed to validate the user. Login incorrect: [dummy@cisco.com/<via Auth-Type = EAP>] (from client cisco port 0 cli dummy@cisco.com) Found Post-Auth-Type Reject +- entering group REJECT expand: %{User-Name} -> dummy@cisco.com attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 EAP-Message = 0x04010004 Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 4.9 seconds. I have configures EAP -type as SIM in eap.conf Regards, Kalyani
How? Debug indicates that an attribute is missing in the request. But you haven't posted the request. Until you post the relevant information nobody can help you. Ivan Kalik Kalik Informatika ISP Dana 27/5/2008, "Kalyani Garigipati (kagarigi)" <kagarigi@cisco.com> piše:
Hi ,
Could someone take time and reply on this please..
Regards, Kalyani
-----Original Message----- From: Kalyani Garigipati (kagarigi) Sent: Monday, May 26, 2008 4:54 PM To: 'freeradius-users@lists.freeradius.org' Subject: can not initiate sim, no RAND1 attribute
Hi,
Now I am able to start the Radiusd without any errors. But I am getting the following messages when I initiate EAP-SIM request to free Radius
rlm_pap: Found existing Auth-Type, not changing it. ++[pap] returns noop rad_check_password: Found Auth-Type EAP auth: type "EAP" +- entering group authenticate rlm_eap: EAP Identity rlm_eap: processing type sim can not initiate sim, no RAND1 attribute rlm_eap: Default EAP type sim failed in initiate rlm_eap: Failed in EAP select ++[eap] returns invalid auth: Failed to validate the user. Login incorrect: [dummy@cisco.com/<via Auth-Type = EAP>] (from client cisco port 0 cli dummy@cisco.com) Found Post-Auth-Type Reject +- entering group REJECT expand: %{User-Name} -> dummy@cisco.com attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 EAP-Message = 0x04010004 Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 4.9 seconds.
I have configures EAP -type as SIM in eap.conf
Regards, Kalyani
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Kalyani Garigipati (kagarigi) wrote:
Could someone take time and reply on this please..
Looking at the rlm_eap_sim module, the RAND attributes have to go into the *reply*, not the *check* items. Ugh. See "man unlang" in 2.0 for putting attributes into the reply list. Don't use the "users" file. Alan DeKok.
participants (3)
-
Alan DeKok -
Ivan Kalik -
Kalyani Garigipati (kagarigi)