eap sim authentication for multiple clients

2013-06-27 Thread raptor raptor
Hi, i have tried with one client and it's success to authenticate and access internet in wlan i just try one client and success but when i use another client and it fails first, i connect with one client and it's success (until Finished request 2 in debug log) and then in next request, i try

Re: eap sim authorization problem

2013-06-26 Thread raptor raptor
any idea? thanx for your time and your answer best regard On Fri, Jun 21, 2013 at 6:31 PM, Iliya Peregoudov iperegu...@cboss.ruwrote: On 20.06.2013 17:56, raptor raptor wrote: my users format 1510019760806391@wlan.mnc001.**mcc510.3gppnetwork.org1510019760806...@wlan.mnc001

Re: eap sim authorization problem

2013-06-26 Thread raptor raptor
and the second device can't connect if my first device is already connect thanx for your time and your answer best regards On Fri, Jun 21, 2013 at 6:31 PM, Iliya Peregoudov iperegu...@cboss.ruwrote: On 20.06.2013 17:56, raptor raptor wrote: my users format 1510019760806391@wlan.mnc001

Re: eap sim authorization problem

2013-06-20 Thread raptor raptor
iperegu...@cboss.ruwrote: On 20.06.2013 8:38, raptor raptor wrote: i just try one client and success but when i use another client and it fails Post debug log if you want to diagnose authentication failure. is it correct if i add other client in users and simtriplets.dat? Yes, you

Re: eap sim authorization problem

2013-06-20 Thread raptor raptor
PM, Iliya Peregoudov iperegu...@cboss.ruwrote: On 20.06.2013 13:38, raptor raptor wrote: Sending Access-Accept of id 0 to 192.168.2.1 port 2048 MS-MPPE-Recv-Key = 0x9d0b6b0a9151822473399a9fed44** e8f0d74df083532a7d437e436f6086**6252d8 MS-MPPE-Send-Key = 0xebf07da25ca3cd97267d1fc6a1ce

Re: eap sim authorization problem

2013-06-19 Thread raptor raptor
Hi, IIlya Thanx for your advice it works On Thu, Jun 13, 2013 at 2:47 PM, Iliya Peregoudov iperegu...@cboss.ruwrote: On 11.06.2013 12:27, raptor raptor wrote: 1. when i change users entry, i get notification that access-accept has succesfull but unfortunately, when i restart the system

Re: eap sim authorization problem

2013-06-19 Thread raptor raptor
... . . . . 151002xxx...@wlan.mnc EAP-Type :=SIM EAP-Sim-Rand1 = 0x... . . . . thanx for your time and your advice best regards On Thu, Jun 20, 2013 at 11:24 AM, raptor raptor raptors...@gmail.comwrote: Hi, IIlya Thanx for your advice it works On Thu, Jun 13, 2013 at 2:47 PM, Iliya

Re: EAP-SIM

2013-06-19 Thread raptor raptor
you missed to install rlm_sim_files 1. go to /src/modules/rlm_sim_files and sudo make 2. copy rlm_sim_files to library cp ./.libs/rlm_sim_files-2.2.0.so /usr/lib/freeradius 3. create link to usr/lib/freeradius/rlm_sim_files-2.2.0.so sudo ln -s

Re: eap sim authorization problem

2013-06-10 Thread raptor raptor
, Jun 10, 2013 at 5:29 PM, Iliya Peregoudov iperegu...@cboss.ruwrote: On 09.06.2013 5:34, raptor raptor wrote: simtriplets.dat format that i wite: 1imsi,RAND,SRES,Kc 1510019760806391,**AAC0FAFDC47D4524AC9E2A3D51BDBA** 39,2A71bac3,7868589a75fdc000 1510019760806391

Re: stripped-username for eap sim

2013-06-08 Thread raptor raptor
hi, i have same problem with you about rlm_sim_files : insufficient number of challenges for imsi i read in rlm_sim_files.c that problem is imsicount 3 i also read in rfc 4186 says that: If the number of RAND challenges is smaller than what is required by peer’s local policy when processing the

Re: eap sim authorization problem

2013-06-08 Thread raptor raptor
my simtriplets.dat : 1imsi 1510019760806391,AAC0FAFDC47D4524AC9E2A3D51BDBA39,2A71bac3,7868589a75fdc000 1510019760806391,BF9A9F6EEB36422895D010927D76972C,F49dd880,3Afbcf2fA9b0a000 1510019760806391,C63837CFECD348deB119C35CFECD4898,49312999,FD488938B6f2a000 On Mon, Jun 3, 2013 at 9:26 PM, Alan

Re: eap sim authorization problem

2013-06-08 Thread raptor raptor
simtriplets.dat format that i wite: 1imsi,RAND,SRES,Kc 1510019760806391,AAC0FAFDC47D4524AC9E2A3D51BDBA39,2A71bac3,7868589a75fdc000 1510019760806391,BF9A9F6EEB36422895D010927D76972C,F49dd880,3Afbcf2fA9b0a000 1510019760806391,C63837CFECD348deB119C35CFECD4898,49312999,FD488938B6f2a000 i add in

Re: eap sim authorization problem

2013-05-31 Thread raptor raptor
-User-Name. Or you can put full username 1IMSI@wlan.mnc001.mcc510.**3gppnetwork.orghttp://wlan.mnc001.mcc510.3gppnetwork.orginto simtriplets.dat. This will work without calling suffix. On 30.05.2013 19:26, raptor raptor wrote: Hi, i have added simtriplets.dat and create file sim_files

eap sim authorization problem

2013-05-30 Thread raptor raptor
Hi all, i have read anything about my problem, but i dont get any idea to solve in FR i get message like this : rlm_sim_files: insufficient number of challenges for imsi i...@wlan.mnc001.mcc510.3gppnetwork.org : 0 [sim_files] returnnot found it's my log: Ready to process requests. rad_recv:

Re: eap sim authorization problem

2013-05-30 Thread raptor raptor
Hi, Phil Better yet, don't use the suffix module; look for the realm and strip it yourself: authorize { if (User-Name =~ /^(.*)@(.+)$/) { update request { Stripped-User-Name := %{1} Realm := %{2} } } } See the policy.conf/policy.d and list archives for better regexps for

Re: eap sim authorization problem

2013-05-30 Thread raptor raptor
** a0,6b7ace84,b54e3cad99ab2000 ... At least 3 authentication vectors should be present for each IMSI. You can generate authentication vectors for your SIM card using smart card reader and agsm program (http://agsm.sourceforge.net/)**. On 30.05.2013 10:44, raptor raptor wrote: Hi all, i have read