Freeradius with EAP-SIM

Ronaldo Afonso ronaldo.afonso at vexcorp.com
Wed Nov 16 14:40:26 CET 2011


  Hi all,

  I'm trying to make a test environment to authenticate users via EAP-SIM.

  I followed some freeradius documentation
(freeradius-server-2.1.12/src/tests/eapsim-03) but when I start the
radeapclient it just get stuck waiting for some FreeRadius server "response"

  The scenario is a FreeRadius listening on localhost interface and a
radeapclient sending "Access-Requests" to that server.


radeapclient -c3 -r1 -s -x 127.0.0.1 auth localhost-secret <eapsim-in.txt

+++> About to send encoded packet:
    User-Name = "1232010000000000"
    NAS-IP-Address = 127.0.0.1
    EAP-Code = Response
    EAP-Type-Identity = "1232010000000000"
    Message-Authenticator = 0x30
    NAS-Port = 10
    EAP-Sim-Rand1 = 0x30000000000000000000000000000000
    EAP-Sim-SRES1 = 0x30112233
    EAP-Sim-KC1 = 0x445566778899aabb
    EAP-Sim-Rand2 = 0x31000000000000000000000000000000
    EAP-Sim-SRES2 = 0x31112233
    EAP-Sim-KC2 = 0x445566778899aabb
    EAP-Sim-Rand3 = 0x32000000000000000000000000000000
    EAP-Sim-SRES3 = 0x32112233
    EAP-Sim-KC3 = 0x445566778899aabb
radclient: no response from server

    It seems me that radeapclient is waiting for some freeradius server
packet.

    I thought radeapclient was supposed to initiate the EAP-SIM
authentication process, not the server.

    I'm running FreeRadius version: FreeRADIUS Version 2.1.8, for host
i486-pc-linux-gnu, built on Jan  5 2010 at 02:49:11

    And the FreeRadius server users configuration file is:

1232010000000000    Auth-Type := EAP, EAP-Type := SIM,
EAP-Sim-Rand1=0x30000000000000000000000000000000,
EAP-Sim-SRES1 = 0x30112233,
EAP-Sim-KC1 = 0x445566778899AABB,
EAP-Sim-Rand2 = 0x31000000000000000000000000000000,
EAP-Sim-SRES2 = 0x31112233,
EAP-Sim-KC2 = 0x445566778899AABB,
EAP-Sim-Rand3 = 0x32000000000000000000000000000000,
EAP-Sim-SRES3 = 0x32112233,
EAP-Sim-KC3 = 0x445566778899AABB

  All attributes are on the same line.

  I included the

  eap {
  }

  On the eap.conf file

  Any help would be appreciated!!!

  Thanks ...

-- 
Ronaldo Afonso
www.vexcorp.com
+55 11 4932-5971
ronaldo.afonso at vexcorp.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20111116/28f5f0d3/attachment.html>


More information about the Freeradius-Users mailing list