Hello all,
I hope this email finds you all well and is my first post.
I think I have a small problem with my backtrack distro and I am trying to load eap-sim onto my free radius server 2.1.11. I have followed the guide to add the relevant parts of the config and when I put the config into the default files for as per http://freeradius.1045715.n5.nabble.com/EAP-SIM-configuration-on-v2-1-12-td5... <http://freeradius.1045715.n5.nabble.com/EAP-SIM-configuration-on-v2-1-12-td5714134.html>
but I get the same message. I think it is a library or link issue. I am not the best linux person in the world s sorry if this seems like a dumb question
Module: Linked to sub-module rlm_eap_sim Module: Instantiating eap-sim Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating module "preprocess" from file /usr/local/etc/raddb/modules/preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Linked to module rlm_realm Module: Instantiating module "suffix" from file /usr/local/etc/raddb/modules/realm realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } /usr/local/etc/raddb/modules/sim_files[1]: Failed to link to module 'rlm_sim_files': rlm_sim_files.so: cannot open shared object file: No such file or directory /usr/local/etc/raddb/sites-enabled/default[138]: Failed to load module "sim_files". /usr/local/etc/raddb/sites-enabled/default[62]: Errors parsing authorize section. root@bt:/usr/local/etc/raddb# more simtriplets.dat
If anyone could help, that would be fantastic
many thx
ken
Ken Farrington Director CCIE #12651 802 Limited International House, 221 Bow Road, London, E3 2SJ, United Kingdom Direct: +44 (0)7500 802802 ken.farrington@802.co.uk http://www.802.co.uk Disclaimer This e-mail may contain information that is confidential, privileged or otherwise protected from disclosure. If you are not an intended recipient of this e-mail, do not duplicate or redistribute it by any means. Please delete it and any attachments and notify the sender that you have received it in error. Any views or opinions presented are solely those of the author and do not necessarily represent those of 802 Limited or any subsidiary company of 802 Limited. This email may relate to or be sent from other members of the 802 Group. All rights reserved. 802 Limited. Registered in the UK. Company Number. 7962864.
On 25/08/2013 12:03, ken.farrington wrote:
/usr/local/etc/raddb/modules/sim_files[1]: Failed to link to module 'rlm_sim_files': rlm_sim_files.so: cannot open shared object file: No such file or directory
Your version of FreeRADIUS wasn't compiled with rlm_eap_sim enabled, or it wasn't installed. I can't remember if you need to build with --experimental-modules or whatever the ./configure options is called. Also, upgrade to 2.2.0
Thanks so much I will try that. Much regards ken.farrington@802.co.uk Phil Mayers <p.mayers@imperial.ac.uk> wrote:
On 25/08/2013 12:03, ken.farrington wrote:
/usr/local/etc/raddb/modules/sim_files[1]: Failed to link to module 'rlm_sim_files': rlm_sim_files.so: cannot open shared object file: No such file or directory
Your version of FreeRADIUS wasn't compiled with rlm_eap_sim enabled, or
it wasn't installed. I can't remember if you need to build with --experimental-modules or whatever the ./configure options is called.
Also, upgrade to 2.2.0 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Sent from my Android device with K-9 Mail. Please excuse my brevity.
On 25.08.2013 15:03, ken.farrington wrote:
Module: Linked to sub-module rlm_eap_sim Module: Instantiating eap-sim
rlm_eap_sim is compiled in.
/usr/local/etc/raddb/modules/sim_files[1]: Failed to link to module 'rlm_sim_files': rlm_sim_files.so: cannot open shared object file: No such file or directory
rlm_sim_files is not compiled in. In fact you do not need rlm_eap_files. All can be done using rlm_files module.
On 08/26/2013 12:11 PM, Iliya Peregoudov wrote:
On 25.08.2013 15:03, ken.farrington wrote:
Module: Linked to sub-module rlm_eap_sim Module: Instantiating eap-sim
rlm_eap_sim is compiled in.
/usr/local/etc/raddb/modules/sim_files[1]: Failed to link to module 'rlm_sim_files': rlm_sim_files.so: cannot open shared object file: No such file or directory
rlm_sim_files is not compiled in.
Oops yes sorry. rlm_sim_files, not rlm_eap_sim
In fact you do not need rlm_eap_files. All can be done using rlm_files module.
I'll defer to you on that ;o)
Many thanks indeed. Are you saying I can just take out sim_files from the authorise in the default file and it should work anyway? If so, fantastic :) On 26 August 2013 at 12:11 Iliya Peregoudov <iperegudov@cboss.ru> wrote:
On 25.08.2013 15:03, ken.farrington wrote:
Module: Linked to sub-module rlm_eap_sim Module: Instantiating eap-sim
rlm_eap_sim is compiled in.
/usr/local/etc/raddb/modules/sim_files[1]: Failed to link to module 'rlm_sim_files': rlm_sim_files.so: cannot open shared object file: No such file or directory
rlm_sim_files is not compiled in.
In fact you do not need rlm_eap_files. All can be done using rlm_files module. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Ken Farrington Director CCIE #12651
802 Limited International House, 221 Bow Road, London, E3 2SJ, United Kingdom Direct: +44 (0)7500 802802 ken.farrington@802.co.uk http://www.802.co.uk Disclaimer This e-mail may contain information that is confidential, privileged or otherwise protected from disclosure. If you are not an intended recipient of this e-mail, do not duplicate or redistribute it by any means. Please delete it and any attachments and notify the sender that you have received it in error. Any views or opinions presented are solely those of the author and do not necessarily represent those of 802 Limited or any subsidiary company of 802 Limited. This email may relate to or be sent from other members of the 802 Group. All rights reserved. 802 Limited. Registered in the UK. Company Number. 7962864.
On 27.08.2013 10:57, ken.farrington wrote:
Many thanks indeed. Are you saying I can just take out sim_files from the authorise in the default file and it should work anyway? If so, fantastic :)
My raddb/sites-enabled/default: authorize { preprocess auth_log chap mschap suffix eap { ok = return } files pap } My raddb/users: 1250016490216808@wlan.mnc001.mcc250.3gppnetwork.org EAP-Sim-RAND1 = 0x09844aff4ccf66cdb95e59dba8ec291c, EAP-Sim-RAND2 = 0x100446e9e8f553a9d87d0444a44b6cf5, EAP-Sim-RAND3 = 0x753fdfc2d7e834002557a069462a1fa5, EAP-Sim-SRES1 = 0x5dc9a406, EAP-Sim-SRES2 = 0x3b3f8ea3, EAP-Sim-SRES3 = 0x85bb8aeb, EAP-Sim-KC1 = 0x75e85aff085e917b, EAP-Sim-KC2 = 0x3055d76de12f1772, EAP-Sim-KC3 = 0x81806503efeebec1 1250016490216808@wlan.mnc001.mcc250.3gppnetwork.org is a decorated permanent identity for IMSI 250016490216808. (EA-Sim-RAND1, EAP-Sim-SRES1, EAP-Sim-KC1) is an authentication vector (aka GSM triplet). rlm_eap_sim requires three GSM triplets to be available. You can extract IMSI and GSM triplets from the SIM card using smart card reader and agsm2 program (http://agsm.sourceforge.net). Note this will always use same GSM triplets for authentication and consequently same master session key (MSK) for encryption. You need to integrate with HLR to retrieve truly random GSM triplets. Usually this is done by some sort of RADIUS-to-MAP gateway, like Cisco ITP.
Fantastic and thanks. On it now :) On 27 August 2013 at 08:54 Iliya Peregoudov <iperegudov@cboss.ru> wrote:
On 27.08.2013 10:57, ken.farrington wrote:
Many thanks indeed. Are you saying I can just take out sim_files from the authorise in the default file and it should work anyway? If so, fantastic :)
My raddb/sites-enabled/default:
authorize { preprocess auth_log chap mschap suffix eap { ok = return } files pap }
My raddb/users:
1250016490216808@wlan.mnc001.mcc250.3gppnetwork.org EAP-Sim-RAND1 = 0x09844aff4ccf66cdb95e59dba8ec291c, EAP-Sim-RAND2 = 0x100446e9e8f553a9d87d0444a44b6cf5, EAP-Sim-RAND3 = 0x753fdfc2d7e834002557a069462a1fa5, EAP-Sim-SRES1 = 0x5dc9a406, EAP-Sim-SRES2 = 0x3b3f8ea3, EAP-Sim-SRES3 = 0x85bb8aeb, EAP-Sim-KC1 = 0x75e85aff085e917b, EAP-Sim-KC2 = 0x3055d76de12f1772, EAP-Sim-KC3 = 0x81806503efeebec1
1250016490216808@wlan.mnc001.mcc250.3gppnetwork.org is a decorated permanent identity for IMSI 250016490216808.
(EA-Sim-RAND1, EAP-Sim-SRES1, EAP-Sim-KC1) is an authentication vector (aka GSM triplet). rlm_eap_sim requires three GSM triplets to be available.
You can extract IMSI and GSM triplets from the SIM card using smart card reader and agsm2 program (http://agsm.sourceforge.net).
Note this will always use same GSM triplets for authentication and consequently same master session key (MSK) for encryption. You need to integrate with HLR to retrieve truly random GSM triplets. Usually this is done by some sort of RADIUS-to-MAP gateway, like Cisco ITP. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Ken Farrington Director CCIE #12651
802 Limited International House, 221 Bow Road, London, E3 2SJ, United Kingdom Direct: +44 (0)7500 802802 ken.farrington@802.co.uk http://www.802.co.uk Disclaimer This e-mail may contain information that is confidential, privileged or otherwise protected from disclosure. If you are not an intended recipient of this e-mail, do not duplicate or redistribute it by any means. Please delete it and any attachments and notify the sender that you have received it in error. Any views or opinions presented are solely those of the author and do not necessarily represent those of 802 Limited or any subsidiary company of 802 Limited. This email may relate to or be sent from other members of the 802 Group. All rights reserved. 802 Limited. Registered in the UK. Company Number. 7962864.
participants (4)
-
Iliya Peregoudov -
Ken Farrington -
ken.farrington
-
Phil Mayers