Re: Mobile Phones Radius Authentications
On Mon 16 Oct 2006 06:17, nsuralullec wrote: What i want is to authenticate Mobile WAP users to a freeradius before using the mobile wap gateway(Kannel), but as per the radius logs, it successfully authenticates but it does not redirect the mobile wap request to the wap gateway. The mobile configurations are correct it works if the NAS doesnot require authentications. What makes you think that it should do this? Have you configured your NAS to do this redirection? Your Access-Accept doen't contain any such message. Does your NAS even support such a feature? Ask your NAS vendor how this is supposed to work... Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc pgp7eWoYa0YAk.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Mobile Phones Radius Authentications
What i want is to authenticate Mobile WAP users to a
freeradius before using the mobile wap
gateway(Kannel), but as per the radius logs, it
successfully authenticates but it does not redirect
the mobile wap request to the wap gateway. The mobile
configurations are correct it works if the NAS doesnot
require authentications.
Logs:
rad_recv: Access-Request packet from host
10.100.80.10:21817, id=103, length=102
User-Name = [EMAIL PROTECTED]
User-Password = 053197
Called-Station-Id = nus_apn
Calling-Station-Id = (Intentionally
omitted)
Framed-Protocol = GPRS-PDP-Context
NAS-Port-Type = Virtual
NAS-Port = 6
Service-Type = Framed-User
NAS-IP-Address = 10.100.80.10
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 6
modcall[authorize]: module preprocess returns ok
for request 6
modcall[authorize]: module chap returns noop for
request 6
modcall[authorize]: module mschap returns noop for
request 6
rlm_realm: Looking up realm WAP for User-Name =
[EMAIL PROTECTED]
rlm_realm: Found realm WAP
rlm_realm: Adding Stripped-User-Name = nus
rlm_realm: Proxying request from user nus to realm
WAP
rlm_realm: Adding Realm = WAP
rlm_realm: Authentication realm is LOCAL.
modcall[authorize]: module suffix returns noop for
request 6
rlm_eap: No EAP-Message, not doing EAP
modcall[authorize]: module eap returns noop for
request 6
users: Matched entry DEFAULT at line 152
users: Matched entry DEFAULT at line 171
modcall[authorize]: module files returns ok for
request 6
modcall: leaving group authorize (returns ok) for
request 6
rad_check_password: Found Auth-Type System
auth: type System
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 6
modcall[authenticate]: module unix returns ok for
request 6
modcall: leaving group authenticate (returns ok) for
request 6
Sending Access-Accept of id 103 to 10.100.80.10 port
21817
Framed-IP-Address = 255.255.255.254
Framed-MTU = 576
Service-Type = Framed-User
Finished request 6
Going to the next request
Waking up in 6 seconds...
rad_recv: Accounting-Request packet from host
10.100.80.10:21817, id=104, length=125
Acct-Session-Id = CA8A9FCA332B546
Framed-Protocol = GPRS-PDP-Context
Called-Station-Id = nus_apn
Calling-Station-Id = (Intentionally
omitted)
Framed-IP-Address = 10.150.192.130
Acct-Authentic = RADIUS
User-Name = [EMAIL PROTECTED]
Acct-Status-Type = Start
NAS-Port-Type = Virtual
NAS-Port = 6
Service-Type = Framed-User
NAS-IP-Address = 10.100.80.10
Acct-Delay-Time = 0
Processing the preacct section of radiusd.conf
modcall: entering group preacct for request 7
modcall[preacct]: module preprocess returns noop
for request 7
rlm_acct_unique: Hashing 'NAS-Port =
6,Client-IP-Address = 10.100.80.10,NAS-IP-Address
= 10.100.80.10,Acct-Session-Id =
CA8A9FCA332B546,User-Name = [EMAIL PROTECTED]'
rlm_acct_unique: Acct-Unique-Session-ID =
fe3b2a13273eb6bc.
modcall[preacct]: module acct_unique returns ok
for request 7
rlm_realm: Looking up realm WAP for User-Name =
[EMAIL PROTECTED]
rlm_realm: Found realm WAP
rlm_realm: Adding Stripped-User-Name = nus
rlm_realm: Proxying request from user nus to realm
WAP
rlm_realm: Adding Realm = WAP
rlm_realm: Accounting realm is LOCAL.
modcall[preacct]: module suffix returns noop for
request 7
modcall[preacct]: module files returns noop for
request 7
modcall: leaving group preacct (returns ok) for
request 7
Processing the accounting section of radiusd.conf
modcall: entering group accounting for request 7
radius_xlat:
'/usr/local/var/log/radius/radacct/10.100.80.10/detail-20061013'
rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d
expands to
/usr/local/var/log/radius/radacct/10.100.80.10/detail-20061013
modcall[accounting]: module detail returns ok for
request 7
modcall[accounting]: module unix returns ok for
request 7
radius_xlat: '/usr/local/var/log/radius/radutmp'
radius_xlat: '[EMAIL PROTECTED]'
modcall[accounting]: module radutmp returns ok for
request 7
modcall: leaving group accounting (returns ok) for
request 7
Sending Accounting-Response of id 104 to 10.100.80.10
port 21817
Finished request 7
Going to the next request
Waking up in 6 seconds...
--- Walking the entire request list ---
Cleaning up request 5 ID 102 with timestamp 452f6d4c
Cleaning up request 6 ID 103 with timestamp 452f6d4c
Cleaning up request 7 ID 104 with timestamp 452f6d4c
Nothing to do. Sleeping until we see a request.
rad_recv: Accounting-Request packet from host
10.100.80.10:21817, id=112, length=161
Acct-Session-Id = CA8A9FCA332B546
Framed-Protocol = GPRS-PDP-Context
Called-Station-Id = nus_apn
Mobile Phones Radius Authentications
Hi to all; I'm setting up GPRS with radius authentication. Authentication accepted when using the GPRS phone as modem for internet connections(PPP). Authentication fails when using GPRS WAP applications. GPRS phones security features was enabled including the username and password but the radius server keeps on rejecting connections. Is there any similar cases thats being resolved? Thanks for any replies... Regards, NUS __ What will the world find in 2020? Leave a part of your 2006 in the Yahoo! Time Capsule. Contribute now! http://timecapsule.yahoo.com/capsule.php?intl=ph - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Mobile Phones Radius Authentications
Hi, On 10/13/06, nsuralullec [EMAIL PROTECTED] wrote: Is there any similar cases thats being resolved? Probably. If you are interested in answers with a little more content you should provide more data than the equivalent of It doesn't work as mentioned in the FAQ, INSTALL (provided you even talk about freeradius) etc. and almost daily on this list. Even if someone would know anything more specific than me, I think (s)he would consider it too burdensome to reply to such a broad question. regards K. Hoercher - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Mobile Phones Radius Authentications
On Fri 13 Oct 2006 11:20, nsuralullec wrote: Hi to all; I'm setting up GPRS with radius authentication. Authentication accepted when using the GPRS phone as modem for internet connections(PPP). Authentication fails when using GPRS WAP applications. GPRS phones security features was enabled including the username and password but the radius server keeps on rejecting connections. Is there any similar cases thats being resolved? We have a large number of phones being authenticated by FreeRADIUS for both WAP and GPRS access on multiple APNs. It works great so if you are having problems you need to provide detailed debug logs if you wish us to help you debug your configuration. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc pgprBHVddvXSZ.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Mobile Phones Radius Authentications
Correct me if my concept are wrong. I successfully configured the radius.conf and proxy.conf to authenticate my WAP mobile phone in the freeradius, MOBILE- NAS - RADIUS - WAP Gateway but after successfully authenticated it does not go directly to my WAP gateway server which is a Kannel Wap gateway a page not found displayed. My Mobile configuration works if not authenticating with a radius server. All the logs seems ok and just waiting for transactions. --- Peter Nixon [EMAIL PROTECTED] wrote: On Fri 13 Oct 2006 11:20, nsuralullec wrote: Hi to all; I'm setting up GPRS with radius authentication. Authentication accepted when using the GPRS phone as modem for internet connections(PPP). Authentication fails when using GPRS WAP applications. GPRS phones security features was enabled including the username and password but the radius server keeps on rejecting connections. Is there any similar cases thats being resolved? We have a large number of phones being authenticated by FreeRADIUS for both WAP and GPRS access on multiple APNs. It works great so if you are having problems you need to provide detailed debug logs if you wish us to help you debug your configuration. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc __ What will the world find in 2020? Leave a part of your 2006 in the Yahoo! Time Capsule. Contribute now! http://timecapsule.yahoo.com/capsule.php?intl=ph - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Mobile Phones Radius Authentications
On Fri 13 Oct 2006 14:51, nsuralullec wrote: Correct me if my concept are wrong. I successfully configured the radius.conf and proxy.conf to authenticate my WAP mobile phone in the freeradius, MOBILE- NAS - RADIUS - WAP Gateway but after successfully authenticated it does not go directly to my WAP gateway server which is a Kannel Wap gateway a page not found displayed. My Mobile configuration works if not authenticating with a radius server. All the logs seems ok and just waiting for transactions. Your concept is most likely wrong, but as you haven't provided network details I can't be sure. Most likely radius and kannel are not in any way related. Most like radius is authing your PPP session, and then your phone initiates a wap session AFTER it connects to the network. You either have a radius problem, a wap problem or a network problem. With the info you have provided it is not possible to tell. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc pgpI2zIOTVDOz.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
