Freeradius with EAP-SIM
Ronaldo Afonso
ronaldo.afonso at vexcorp.com
Wed Nov 16 14:40:26 CET 2011
Hi all,
I'm trying to make a test environment to authenticate users via EAP-SIM.
I followed some freeradius documentation
(freeradius-server-2.1.12/src/tests/eapsim-03) but when I start the
radeapclient it just get stuck waiting for some FreeRadius server "response"
The scenario is a FreeRadius listening on localhost interface and a
radeapclient sending "Access-Requests" to that server.
radeapclient -c3 -r1 -s -x 127.0.0.1 auth localhost-secret <eapsim-in.txt
+++> About to send encoded packet:
User-Name = "1232010000000000"
NAS-IP-Address = 127.0.0.1
EAP-Code = Response
EAP-Type-Identity = "1232010000000000"
Message-Authenticator = 0x30
NAS-Port = 10
EAP-Sim-Rand1 = 0x30000000000000000000000000000000
EAP-Sim-SRES1 = 0x30112233
EAP-Sim-KC1 = 0x445566778899aabb
EAP-Sim-Rand2 = 0x31000000000000000000000000000000
EAP-Sim-SRES2 = 0x31112233
EAP-Sim-KC2 = 0x445566778899aabb
EAP-Sim-Rand3 = 0x32000000000000000000000000000000
EAP-Sim-SRES3 = 0x32112233
EAP-Sim-KC3 = 0x445566778899aabb
radclient: no response from server
It seems me that radeapclient is waiting for some freeradius server
packet.
I thought radeapclient was supposed to initiate the EAP-SIM
authentication process, not the server.
I'm running FreeRadius version: FreeRADIUS Version 2.1.8, for host
i486-pc-linux-gnu, built on Jan 5 2010 at 02:49:11
And the FreeRadius server users configuration file is:
1232010000000000 Auth-Type := EAP, EAP-Type := SIM,
EAP-Sim-Rand1=0x30000000000000000000000000000000,
EAP-Sim-SRES1 = 0x30112233,
EAP-Sim-KC1 = 0x445566778899AABB,
EAP-Sim-Rand2 = 0x31000000000000000000000000000000,
EAP-Sim-SRES2 = 0x31112233,
EAP-Sim-KC2 = 0x445566778899AABB,
EAP-Sim-Rand3 = 0x32000000000000000000000000000000,
EAP-Sim-SRES3 = 0x32112233,
EAP-Sim-KC3 = 0x445566778899AABB
All attributes are on the same line.
I included the
eap {
}
On the eap.conf file
Any help would be appreciated!!!
Thanks ...
--
Ronaldo Afonso
www.vexcorp.com
+55 11 4932-5971
ronaldo.afonso at vexcorp.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20111116/28f5f0d3/attachment.html>
More information about the Freeradius-Users
mailing list