FreeRadius + EAP-AKA support

[Kumar, Sunil-2]

Hi,

We are trying to use FreeRadius1.1.4 as authentication server for
EAP-AKA implementation with our product toolkit.

As per the RFC 4187

AT_RES
The value field of this attribute begins with the 2-byte RES Length,
which identifies the exact length of the RES in bits.  The RES length
is followed by the AKA RES parameter. According to [TS33.105], the
length of the AKA RES can vary between 32 and 128 bits.  Because the
length of the AT_RES attribute must be a multiple of 4 bytes, the
sender pads the RES with zero bits where necessary.


In the freeradius1.1.4 implementation, for EAP-AKA the value of RES
length is always considered as constant EAPSIM_RES_SIZE (16). It doesn't
take care of the values other than 16 bytes.

We in our toolkit needs to support all the variable length of RES values
from 32 bits (4 bytes) to 128 bits (16 bytes). So I have modified the
FreeRadius implementation for the same support.

The intention of writing such mail is to get the information that if
somebody has already noticed and fixed this issue in the latest
releases, so please share that information as well.

In case it's not been fixed as yet, then may be I could contribute my
patch for freeradius 1.1.4 version to support all variable length RES
value varying from 32 bits to 128 bits.

Thanks.

Warm regards.
Sunil Kumar
The information contained in this electronic mail transmission
may be privileged and confidential, and therefore, protected
from disclosure. If you have received this communication in
error, please notify us immediately by replying to this
message and deleting it from your computer without copying
or disclosing it.



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html

[Alan DeKok-2]

Kumar, Sunil wrote:
> We are trying to use FreeRadius1.1.4 as authentication server for
> EAP-AKA implementation with our product toolkit.

  Hm... if you've applied the EAP-AKA patch, could you send a copy to
me?  bugs.freeradius.org has gone down, and I'm not sure I have a copy
of the patch anywhere.

> We in our toolkit needs to support all the variable length of RES values
> from 32 bits (4 bytes) to 128 bits (16 bytes). So I have modified the
> FreeRadius implementation for the same support.

  Nice.  Please send us the patch!

> The intention of writing such mail is to get the information that if
> somebody has already noticed and fixed this issue in the latest
> releases, so please share that information as well.

  No one else has seen this issue.

> In case it's not been fixed as yet, then may be I could contribute my
> patch for freeradius 1.1.4 version to support all variable length RES
> value varying from 32 bits to 128 bits.

  Please send the patch for EAP-AKA!  Or even the entire rlm_eap
directory that you're using, and we'll work out the patch.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html

[Kumar, Sunil-2]

Hi Alan

Please find the attached patch to fix the variable length issue for
AT_RES with EAP-AKA support.

I have created this patch on top of FreeRadius 1.1.4 release version.
Please provide your valuable comments or feedback for the same.

Thanks.

Warm regards.
Sunil Kumar

> -----Original Message-----
> From: Alan DeKok [mailto:aland@...]
> Sent: Thursday, February 26, 2009 1:53 PM
> To: FreeRadius developers mailing list
> Cc: Kumar, Sunil
> Subject: Re: FreeRadius + EAP-AKA support
>
> Kumar, Sunil wrote:
> > We are trying to use FreeRadius1.1.4 as authentication server for
> > EAP-AKA implementation with our product toolkit.
>
>   Hm... if you've applied the EAP-AKA patch, could you send a copy to
> me?  bugs.freeradius.org has gone down, and I'm not sure I have a copy
> of the patch anywhere.
>
> > We in our toolkit needs to support all the variable length of RES

values
> > from 32 bits (4 bytes) to 128 bits (16 bytes). So I have modified

the

> > FreeRadius implementation for the same support.
>
>   Nice.  Please send us the patch!
>
> > The intention of writing such mail is to get the information that if
> > somebody has already noticed and fixed this issue in the latest
> > releases, so please share that information as well.
>
>   No one else has seen this issue.
>
> > In case it's not been fixed as yet, then may be I could contribute

my
> > patch for freeradius 1.1.4 version to support all variable length

RES
> > value varying from 32 bits to 128 bits.
>
>   Please send the patch for EAP-AKA!  Or even the entire rlm_eap
> directory that you're using, and we'll work out the patch.
>
>   Alan DeKok.

The information contained in this electronic mail transmission
may be privileged and confidential, and therefore, protected
from disclosure. If you have received this communication in
error, please notify us immediately by replying to this
message and deleting it from your computer without copying
or disclosing it.



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html

[Alan DeKok-2]

Kumar, Sunil wrote:
> Hi Alan
>
> Please find the attached patch to fix the variable length issue for
> AT_RES with EAP-AKA support.
>
> I have created this patch on top of FreeRadius 1.1.4 release version.
> Please provide your valuable comments or feedback for the same.

  Please send the *entire* rlm_eap directory.  That module is *not* in
the default FreeRADIUS release 1.1.4.  So sending a patch doesn't
help... because there are no rlm_eap_aka files to patch.

  IIRC, the EAP-AKA patch changed a number of files outside of the
rlm_eap_aka directory, too.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html

[cht.maillist]

Hi Kumar,
    Would you please also send me a copy of the patch?  Thank you very much.

cht.maillist@...

BillGets
2009.11.06

-- Kumar, Sunil wrote :
Hi Alan

Please find the attached patch to fix the variable length issue for
AT_RES with EAP-AKA support.

I have created this patch on top of FreeRadius 1.1.4 release version.
Please provide your valuable comments or feedback for the same.

Thanks.

Warm regards.
Sunil Kumar

> -----Original Message-----
> From: Alan DeKok [mailto:aland@depl...]
> Sent: Thursday, February 26, 2009 1:53 PM
> To: FreeRadius developers mailing list
> Cc: Kumar, Sunil
> Subject: Re: FreeRadius + EAP-AKA support
>
> Kumar, Sunil wrote:
> > We are trying to use FreeRadius1.1.4 as authentication server for
> > EAP-AKA implementation with our product toolkit.
>
>   Hm... if you've applied the EAP-AKA patch, could you send a copy to
> me?  bugs.freeradius.org has gone down, and I'm not sure I have a copy
> of the patch anywhere.
>
> > We in our toolkit needs to support all the variable length of RES

values
> > from 32 bits (4 bytes) to 128 bits (16 bytes). So I have modified
the

> > FreeRadius implementation for the same support.
>
>   Nice.  Please send us the patch!
>
> > The intention of writing such mail is to get the information that if
> > somebody has already noticed and fixed this issue in the latest
> > releases, so please share that information as well.
>
>   No one else has seen this issue.
>
> > In case it's not been fixed as yet, then may be I could contribute

my
> > patch for freeradius 1.1.4 version to support all variable length
RES
> > value varying from 32 bits to 128 bits.
>
>   Please send the patch for EAP-AKA!  Or even the entire rlm_eap
> directory that you're using, and we'll work out the patch.
>
>   Alan DeKok.

The information contained in this electronic mail transmission
may be privileged and confidential, and therefore, protected
from disclosure. If you have received this communication in
error, please notify us immediately by replying to this
message and deleting it from your computer without copying
or disclosing it.

--
This message was sent on behalf of cht.maillist@... at openSubscriber.com
http://www.opensubscriber.com/message/freeradius-devel@.../11553404.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html

[sakthi krishnan]

Hi Kumar,

 

do you have this patch (variable length of RES key) ?

 

Kind Thanks,

Sakthi

On Fri, Nov 6, 2009 at 2:41 PM, <cht.maillist@...> wrote:

Hi Kumar,
   Would you please also send me a copy of the patch?  Thank you very much.

cht.maillist@...

BillGets
2009.11.06

-- Kumar, Sunil wrote :
Hi Alan

Please find the attached patch to fix the variable length issue for
AT_RES with EAP-AKA support.

I have created this patch on top of FreeRadius 1.1.4 release version.
Please provide your valuable comments or feedback for the same.

Thanks.

Warm regards.
Sunil Kumar


> -----Original Message-----
> From: Alan DeKok [mailto:aland@.....]
> Sent: Thursday, February 26, 2009 1:53 PM
> To: FreeRadius developers mailing list
> Cc: Kumar, Sunil
> Subject: Re: FreeRadius + EAP-AKA support
>
> Kumar, Sunil wrote:
> > We are trying to use FreeRadius1.1.4 as authentication server for
> > EAP-AKA implementation with our product toolkit.
>
>   Hm... if you've applied the EAP-AKA patch, could you send a copy to
> me?  bugs.freeradius.org has gone down, and I'm not sure I have a copy
> of the patch anywhere.
>
> > We in our toolkit needs to support all the variable length of RES
values
> > from 32 bits (4 bytes) to 128 bits (16 bytes). So I have modified
the
> > FreeRadius implementation for the same support.
>
>   Nice.  Please send us the patch!
>
> > The intention of writing such mail is to get the information that if
> > somebody has already noticed and fixed this issue in the latest
> > releases, so please share that information as well.
>
>   No one else has seen this issue.
>
> > In case it's not been fixed as yet, then may be I could contribute
my
> > patch for freeradius 1.1.4 version to support all variable length
RES
> > value varying from 32 bits to 128 bits.
>
>   Please send the patch for EAP-AKA!  Or even the entire rlm_eap
> directory that you're using, and we'll work out the patch.
>
>   Alan DeKok.

The information contained in this electronic mail transmission
may be privileged and confidential, and therefore, protected
from disclosure. If you have received this communication in
error, please notify us immediately by replying to this
message and deleting it from your computer without copying
or disclosing it.

--
This message was sent on behalf of cht.maillist@... at openSubscriber.com
http://www.opensubscriber.com/message/freeradius-devel@.../11553404.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html