[prev in list] [next in list] [prev in thread] [next in thread]
List: freeradius-users
Subject: Re: Help in Configuring EAP-SIM
From: Alan DeKok <aland () deployingradius ! com>
Date: 2022-02-04 15:14:05
Message-ID: E5E56283-DB7B-4F69-B593-A2910D890AAA () deployingradius ! com
[Download RAW message or body]
On Feb 3, 2022, at 5:28 PM, Shane Guan via Freeradius-Users \
<freeradius-users@lists.freeradius.org> wrote:
> I am writing to inquire about the best way to configure freeradius for eap-sim.
>
> * I am using version 3.0.25
> * I have a test sim peer and know the Ki, OP, and IMSI for it.
That's good.
> How would I configure freeradius to use the Ki and OP when it receives a message \
> from the test peer requesting to authenticate with EAP-SIM?
You just tell the server what they are, and the server does the right thing.
> I tried putting the Ki and OP in the users file but that didn't work.
What does that mean?
> According to doc/modules/rlm_eap it says I need to write a separate module to \
> generate GSM triplets given the Ki. However, in \
> src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c:eap_sim_get_challenge it looks \
> like there is already a module to generate GSM triplets given the Ki. How could I \
> configure freeradius to call it?
To be honest... this isn't a commonly used feature. :(
From a quick check of the source, you put the EAP-SIM-* attributes into the \
"control" list, and it *should* just work.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic