Help - ASN-GW throwing error - Validation of attributes failed

[Iliya Peregoudov]

Run freeradius in debug mode (-X). Look for eap module debug messages. 
Look for wimax module debug messages. Try to understand.

Rathod Subhashchandra wrote:
> Dear Iliya,
> 
> Thanks for your valuable suggestion.
> Rlm_wimax module was not building. I enabled and now it is building.
> As per your suggestion, I have added "wimax" in file
> raddb/sites-enabled/default
> Still I am not getting WiMAX-MSK in Access-Accept. Could you please help me
> in this?
> 
> Thanks !
> Rathod.
> 
> 
> -----Original Message-----
> From: Iliya Peregoudov [mailto:iperegudov at cboss.ru] 
> Sent: Thursday, March 15, 2012 11:41 AM
> To: rathod at tataelxsi.co.in; FreeRadius users mailing list
> Subject: Re: Help - ASN-GW throwing error - Validation of attributes failed
> 
> There is no WiMAX-MSK attribute in Access-Accept. You need to call 
> rlm_wimax module from post-auth section of default virtual server:
> 
> # raddb/sites-enabled/default
> post-auth {
>     ...
>     wimax
>     ...
> }
> 
> This module will add WiMAX-MSK and remove MS-MPPE-Send-Key and 
> MS-MPPE-Recv-Key.
> 
> 
> Rathod Subhashchandra wrote:
>> Dear All,
>>
>>  
>>
>> I am trying to setup EAP-TLS authentication mechanism for my WiMAX 
>> testing and following are the details.
>>
>>  
>>
>> 1.  TATA ELXSI - WIMAX MS
>>
>> 2.  TATA ELXSI - WIMAX BS
>>
>> 3.  ARICENT ASN-GW version 4.2
>>
>> 4.  Free Radius AAA server version 2.1.3
>>
>>  
>>
>> Certificates exchange is through. When AAA server responds with 
>> Access-Accept, ASN-GW throws error saying "Validation of the Attributes 
>> in the Received packet failed"
>>
>>  
>>
>> Wireshark logs @ ASN-GW
>>
>>  
>>
>>  
>>
>> I could not attach wireshark pcap logs due to size constraint. I have 
>> took print screen of only ACCESS-ACCEPT message copied to MS word.
>>
>>  
>>
>> What are the mandatory fields in Access-Accept and their valid values?
>>
>> Service-Type attribute value is 2. ASN-GW is adding this attribute. Is 
>> this valid for EAP-TLS?
>>
>> I am guessing this should be 8. I don't have control over ASN-GW 
>> parameters modification.
>>
>>  
>>
>> Please let me know what fields are invalid in above ACCESS-ACCEPT.
>>
>>  
>>
>> Thanks !
>>
>> Rathod.
>>
>>  
>>
>>
>> ------------------------------------------------------------------------
>>
>> -
>> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6269 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120315/8b210929/attachment-0001.bin>