Help in Configuring EAP-SIM

[Alan DeKok]

On Feb 3, 2022, at 5:28 PM, Shane Guan via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> I am writing to inquire about the best way to configure freeradius for eap-sim.
> 
>  *   I am using version 3.0.25
>  *   I have a test sim peer and know the Ki, OP, and IMSI for it.

  That's good.

> How would I configure freeradius to use the Ki and OP when it receives a message from the test peer requesting to authenticate with EAP-SIM?

  You just tell the server what they are, and the server does the right thing.

> I tried putting the Ki and OP in the users file but that didn't work.

  What does that mean?

> According to doc/modules/rlm_eap it says I need to write a separate module to generate GSM triplets given the Ki. However, in src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c:eap_sim_get_challenge it looks like there is already a module to generate GSM triplets given the Ki. How could I configure freeradius to call it?

  To be honest... this isn't a commonly used feature.  :(

  From a quick check of the source, you put the EAP-SIM-* attributes into the "control" list, and it *should* just work.

  Alan DeKok.