stripped-username for eap sim
Hi all, i'm using freeradius 2.1.9 for eap sim testing i have simtriplets.dat with format : imsi.RAND,SRES,Kc and i'm having message probleme: rlm_sim_files : insufficient number of challenges for imsi 151008xxxxxxxxx@wlan.mnc008.mcc310.3gppnetwork.org [sim_files] : returnnot found i read that we should strip that full username : 151008xxxxxxxxx@wlan.mnc008.mcc310.3gppnetwork.org into strip username: 131008xxxxxxxxx and realm wlan.mnc008.mcc310.3gppnetwork.org am i correct? so how do i configure that strip username for authorizing into rlm_sim_files and to simtriplets.dat? thanx best regards, martin
suffix (a preconfigured instance of rlm_realm module) will do User-Name splitting into Stripped-User-Name and Realm. You'll need to configure locally served realm in raddb/proxy.conf: # raddb/proxy.conf realm wlan.mncXXX.mccYYY.3gppnetwork.org { } suffix should be called before sim_files in authorize section: # raddb/sites-available/default: authorize { suffix sim_files } On 01.06.2013 11:44, martin robertino wrote:
Hi all, i'm using freeradius 2.1.9 for eap sim testing i have simtriplets.dat with format : imsi.RAND,SRES,Kc and i'm having message probleme: rlm_sim_files : insufficient number of challenges for imsi 151008xxxxxxxxx@wlan.mnc008.mcc310.3gppnetwork.org <mailto:151008xxxxxxxxx@wlan.mnc008.mcc310.3gppnetwork.org> [sim_files] : returnnot found
i read that we should strip that full username :151008xxxxxxxxx@wlan.mnc008.mcc310.3gppnetwork.org <mailto:151008xxxxxxxxx@wlan.mnc008.mcc310.3gppnetwork.org> into strip username: 131008xxxxxxxxx and realm wlan.mnc008.mcc310.3gppnetwork.org <http://wlan.mnc008.mcc310.3gppnetwork.org> am i correct?
so how do i configure that strip username for authorizing into rlm_sim_files and to simtriplets.dat?
thanx
best regards, martin
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
hi, i have same problem with you about rlm_sim_files : insufficient number of challenges for imsi i read in rlm_sim_files.c that problem is imsicount < 3 i also read in rfc 4186 says that: "If the number of RAND challenges is smaller than what is required by peer’s local policy when processing the AT_RAND attribute, the peer MUST send the EAP-Response/SIM/Client-Error packet with the error code "insufficient number of challenges". " and i try to add # raddb/proxy.conf realm wlan.mncXXX.mccYYY.3gppnetwork.org { } but the result is same could you solve my problem? thanx best regard On 6/3/13, Iliya Peregoudov <iperegudov@cboss.ru> wrote:
suffix (a preconfigured instance of rlm_realm module) will do User-Name splitting into Stripped-User-Name and Realm. You'll need to configure locally served realm in raddb/proxy.conf:
# raddb/proxy.conf realm wlan.mncXXX.mccYYY.3gppnetwork.org { }
suffix should be called before sim_files in authorize section:
# raddb/sites-available/default: authorize { suffix sim_files }
On 01.06.2013 11:44, martin robertino wrote:
Hi all, i'm using freeradius 2.1.9 for eap sim testing i have simtriplets.dat with format : imsi.RAND,SRES,Kc and i'm having message probleme: rlm_sim_files : insufficient number of challenges for imsi 151008xxxxxxxxx@wlan.mnc008.mcc310.3gppnetwork.org <mailto:151008xxxxxxxxx@wlan.mnc008.mcc310.3gppnetwork.org> [sim_files] : returnnot found
i read that we should strip that full username :151008xxxxxxxxx@wlan.mnc008.mcc310.3gppnetwork.org <mailto:151008xxxxxxxxx@wlan.mnc008.mcc310.3gppnetwork.org> into strip username: 131008xxxxxxxxx and realm wlan.mnc008.mcc310.3gppnetwork.org <http://wlan.mnc008.mcc310.3gppnetwork.org> am i correct?
so how do i configure that strip username for authorizing into rlm_sim_files and to simtriplets.dat?
thanx
best regards, martin
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Iliya Peregoudov -
martin robertino -
raptor raptor