Hi to all; I'm setting up GPRS with radius authentication. Authentication accepted when using the GPRS phone as modem for internet connections(PPP). Authentication fails when using GPRS WAP applications. GPRS phones security features was enabled including the username and password but the radius server keeps on rejecting connections. Is there any similar cases thats being resolved? Thanks for any replies... Regards, NUS __________________________________ What will the world find in 2020? Leave a part of your 2006 in the Yahoo! Time Capsule. Contribute now! http://timecapsule.yahoo.com/capsule.php?intl=ph
Hi, On 10/13/06, nsuralullec <nus_lived@yahoo.com.ph> wrote:
Is there any similar cases thats being resolved?
Probably. If you are interested in answers with a little more content you should provide more data than the equivalent of "It doesn't work" as mentioned in the FAQ, INSTALL (provided you even talk about freeradius) etc. and almost daily on this list. Even if someone would know anything more specific than me, I think (s)he would consider it too burdensome to reply to such a broad question. regards K. Hoercher
On Fri 13 Oct 2006 11:20, nsuralullec wrote:
Hi to all;
I'm setting up GPRS with radius authentication. Authentication accepted when using the GPRS phone as modem for internet connections(PPP). Authentication fails when using GPRS WAP applications. GPRS phones security features was enabled including the username and password but the radius server keeps on rejecting connections.
Is there any similar cases thats being resolved?
We have a large number of phones being authenticated by FreeRADIUS for both WAP and GPRS access on multiple APNs. It works great so if you are having problems you need to provide detailed debug logs if you wish us to help you debug your configuration. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
Correct me if my concept are wrong. I successfully configured the radius.conf and proxy.conf to authenticate my WAP mobile phone in the freeradius, MOBILE-> NAS -> RADIUS -> WAP Gateway but after successfully authenticated it does not go directly to my WAP gateway server which is a Kannel Wap gateway a page not found displayed. My Mobile configuration works if not authenticating with a radius server. All the logs seems ok and just waiting for transactions. --- Peter Nixon <listuser@peternixon.net> wrote:
On Fri 13 Oct 2006 11:20, nsuralullec wrote:
Hi to all;
I'm setting up GPRS with radius authentication. Authentication accepted when using the GPRS phone as modem for internet connections(PPP). Authentication fails when using GPRS WAP applications. GPRS phones security features was enabled including the username and password but the radius server keeps on rejecting connections.
Is there any similar cases thats being resolved?
We have a large number of phones being authenticated by FreeRADIUS for both WAP and GPRS access on multiple APNs. It works great so if you are having problems you need to provide detailed debug logs if you wish us to help you debug your configuration.
Cheers --
Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
__________________________________ What will the world find in 2020? Leave a part of your 2006 in the Yahoo! Time Capsule. Contribute now! http://timecapsule.yahoo.com/capsule.php?intl=ph
On Fri 13 Oct 2006 14:51, nsuralullec wrote:
Correct me if my concept are wrong. I successfully configured the radius.conf and proxy.conf to authenticate my WAP mobile phone in the freeradius,
MOBILE-> NAS -> RADIUS -> WAP Gateway
but after successfully authenticated it does not go directly to my WAP gateway server which is a Kannel Wap gateway a page not found displayed. My Mobile configuration works if not authenticating with a radius server. All the logs seems ok and just waiting for transactions.
Your concept is most likely wrong, but as you haven't provided network details I can't be sure. Most likely radius and kannel are not in any way related. Most like radius is authing your PPP session, and then your phone initiates a wap session AFTER it connects to the network. You either have a radius problem, a wap problem or a network problem. With the info you have provided it is not possible to tell. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
What i want is to authenticate Mobile WAP users to a freeradius before using the mobile wap gateway(Kannel), but as per the radius logs, it successfully authenticates but it does not redirect the mobile wap request to the wap gateway. The mobile configurations are correct it works if the NAS doesnot require authentications. Logs: rad_recv: Access-Request packet from host 10.100.80.10:21817, id=103, length=102 User-Name = "nus@WAP" User-Password = "053197" Called-Station-Id = "nus_apn" Calling-Station-Id = "XXXXXXXXXXXX" (Intentionally omitted) Framed-Protocol = GPRS-PDP-Context NAS-Port-Type = Virtual NAS-Port = 60000 Service-Type = Framed-User NAS-IP-Address = 10.100.80.10 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 6 modcall[authorize]: module "preprocess" returns ok for request 6 modcall[authorize]: module "chap" returns noop for request 6 modcall[authorize]: module "mschap" returns noop for request 6 rlm_realm: Looking up realm "WAP" for User-Name = "nus@WAP" rlm_realm: Found realm "WAP" rlm_realm: Adding Stripped-User-Name = "nus" rlm_realm: Proxying request from user nus to realm WAP rlm_realm: Adding Realm = "WAP" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 6 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 6 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 171 modcall[authorize]: module "files" returns ok for request 6 modcall: leaving group authorize (returns ok) for request 6 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 6 modcall[authenticate]: module "unix" returns ok for request 6 modcall: leaving group authenticate (returns ok) for request 6 Sending Access-Accept of id 103 to 10.100.80.10 port 21817 Framed-IP-Address = 255.255.255.254 Framed-MTU = 576 Service-Type = Framed-User Finished request 6 Going to the next request Waking up in 6 seconds... rad_recv: Accounting-Request packet from host 10.100.80.10:21817, id=104, length=125 Acct-Session-Id = "CA8A9FCA332B546" Framed-Protocol = GPRS-PDP-Context Called-Station-Id = "nus_apn" Calling-Station-Id = "XXXXXXXXXXXX" (Intentionally omitted) Framed-IP-Address = 10.150.192.130 Acct-Authentic = RADIUS User-Name = "nus@WAP" Acct-Status-Type = Start NAS-Port-Type = Virtual NAS-Port = 60000 Service-Type = Framed-User NAS-IP-Address = 10.100.80.10 Acct-Delay-Time = 0 Processing the preacct section of radiusd.conf modcall: entering group preacct for request 7 modcall[preacct]: module "preprocess" returns noop for request 7 rlm_acct_unique: Hashing 'NAS-Port = 60000,Client-IP-Address = 10.100.80.10,NAS-IP-Address = 10.100.80.10,Acct-Session-Id = "CA8A9FCA332B546",User-Name = "nus@WAP"' rlm_acct_unique: Acct-Unique-Session-ID = "fe3b2a13273eb6bc". modcall[preacct]: module "acct_unique" returns ok for request 7 rlm_realm: Looking up realm "WAP" for User-Name = "nus@WAP" rlm_realm: Found realm "WAP" rlm_realm: Adding Stripped-User-Name = "nus" rlm_realm: Proxying request from user nus to realm WAP rlm_realm: Adding Realm = "WAP" rlm_realm: Accounting realm is LOCAL. modcall[preacct]: module "suffix" returns noop for request 7 modcall[preacct]: module "files" returns noop for request 7 modcall: leaving group preacct (returns ok) for request 7 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 7 radius_xlat: '/usr/local/var/log/radius/radacct/10.100.80.10/detail-20061013' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/10.100.80.10/detail-20061013 modcall[accounting]: module "detail" returns ok for request 7 modcall[accounting]: module "unix" returns ok for request 7 radius_xlat: '/usr/local/var/log/radius/radutmp' radius_xlat: 'nus@WAP' modcall[accounting]: module "radutmp" returns ok for request 7 modcall: leaving group accounting (returns ok) for request 7 Sending Accounting-Response of id 104 to 10.100.80.10 port 21817 Finished request 7 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 5 ID 102 with timestamp 452f6d4c Cleaning up request 6 ID 103 with timestamp 452f6d4c Cleaning up request 7 ID 104 with timestamp 452f6d4c Nothing to do. Sleeping until we see a request. rad_recv: Accounting-Request packet from host 10.100.80.10:21817, id=112, length=161 Acct-Session-Id = "CA8A9FCA332B546" Framed-Protocol = GPRS-PDP-Context Called-Station-Id = "nus_apn" Calling-Station-Id = "XXXXXXXXXXXX" (Intentionally omitted) Framed-IP-Address = 10.150.192.130 Acct-Authentic = RADIUS Acct-Session-Time = 19 Acct-Input-Octets = 85 Acct-Output-Octets = 113 Acct-Input-Packets = 1 Acct-Output-Packets = 1 Acct-Terminate-Cause = User-Request User-Name = "nus@WAP" Acct-Status-Type = Stop NAS-Port-Type = Virtual NAS-Port = 60000 Service-Type = Framed-User NAS-IP-Address = 10.100.80.10 Acct-Delay-Time = 0 Processing the preacct section of radiusd.conf modcall: entering group preacct for request 8 modcall[preacct]: module "preprocess" returns noop for request 8 rlm_acct_unique: Hashing 'NAS-Port = 60000,Client-IP-Address = 10.100.80.10,NAS-IP-Address = 10.100.80.10,Acct-Session-Id = "CA8A9FCA332B546",User-Name = "nus@WAP"' rlm_acct_unique: Acct-Unique-Session-ID = "fe3b2a13273eb6bc". modcall[preacct]: module "acct_unique" returns ok for request 8 rlm_realm: Looking up realm "WAP" for User-Name = "nus@WAP" rlm_realm: Found realm "WAP" rlm_realm: Adding Stripped-User-Name = "nus" rlm_realm: Proxying request from user nus to realm WAP rlm_realm: Adding Realm = "WAP" rlm_realm: Accounting realm is LOCAL. modcall[preacct]: module "suffix" returns noop for request 8 modcall[preacct]: module "files" returns noop for request 8 modcall: leaving group preacct (returns ok) for request 8 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 8 radius_xlat: '/usr/local/var/log/radius/radacct/10.100.80.10/detail-20061013' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/10.100.80.10/detail-20061013 modcall[accounting]: module "detail" returns ok for request 8 modcall[accounting]: module "unix" returns ok for request 8 radius_xlat: '/usr/local/var/log/radius/radutmp' radius_xlat: 'nus@WAP' modcall[accounting]: module "radutmp" returns ok for request 8 modcall: leaving group accounting (returns ok) for request 8 Sending Accounting-Response of id 112 to 10.100.80.10 port 21817 Finished request 8 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 8 ID 112 with timestamp 452f6d5f Nothing to do. Sleeping until we see a request. Thanks for any help.. Nus __________________________________ What will the world find in 2020? Leave a part of your 2006 in the Yahoo! Time Capsule. Contribute now! http://timecapsule.yahoo.com/capsule.php?intl=ph
On Mon 16 Oct 2006 06:17, nsuralullec wrote:
What i want is to authenticate Mobile WAP users to a freeradius before using the mobile wap gateway(Kannel), but as per the radius logs, it successfully authenticates but it does not redirect the mobile wap request to the wap gateway. The mobile configurations are correct it works if the NAS doesnot require authentications.
What makes you think that it should do this? Have you configured your NAS to do this redirection? Your "Access-Accept" doen't contain any such message. Does your NAS even support such a feature? Ask your NAS vendor how this is supposed to work... Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
participants (3)
-
K. Hoercher -
nsuralullec -
Peter Nixon