Hi Iliya/Alan,
I have looked into rlm_eap_sim source and found that is incorrectly
decode AT_IDENTITY attribute. This leads to incorrect AT_MAC attribute
calculation. MAC mismatch detected by supplicant and it refuses to
continue EAP-SIM authentication.
Please try to apply patch I've attached. This patch fixes AT_IDENTITY
attribute decoding.
Nice. If it works, I'll apply it.
I just tested the patch with our iDevices, and EAP-SIM now works again
:) Looks like the patch did the trick. I also asked MS to retest using
their supplicant since I cannot test that myself.
Thank you very much!!
--
Francois Gaudreault, ing. jr
fgaudrea...@inverse.ca :: +1.514.447.4918 (x130) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
