About eap-aka test with hostapd

[彦 张]

Hi, Jouni Malinen,
Thank you for your reply.
Now, I have pass the whole process of eap-aka with hostapd, and the MAC error is because of the error username I filled.
but I have work around a problem to pass the test.  so I have to debug it and need your help. I will explain as following:
*******************************************************************************
the first step of send identity to server, but in eap_aka_determine_identity() of hostapd, I used the permanent identity with '0' prefix.
it would said permanent user name not know, and will send identity request to peer again.
I found the return value of eap_sim_db_identity_known() is -1 forever if permanent identity used. I don't know why?
And what the meaning of 'before_identity'? I found the value is set 0 when process identity response from peer again.
if (identity == NULL ||
     eap_sim_db_identity_known(sm->eap_sim_db_priv, sm->identity,
          sm->identity_len) < 0) {
  if (before_identity) {
   wpa_printf(MSG_DEBUG, "EAP-AKA: Permanent user name "
       "not known - send AKA-Identity request"); 
   eap_aka_state(data, IDENTITY);
   return;
  } else {
   wpa_printf(MSG_DEBUG, "EAP-AKA: Unknown whether the "
       "permanent user name is known; try to use "
       "it");
   /* eap_sim_db_get_aka_auth() will report failure, if
    * this identity is not known. */
  }
 }
 
 
Thanks.
 
Yan
 
 
> Date: Mon, 21 Feb 2011 21:34:36 +0200
> From: j at w1.fi
> To: hostap at lists.shmoo.com
> Subject: Re: About eap-aka test with hostapd
> 
> On Thu, Feb 17, 2011 at 09:54:38AM +0000, ? ? wrote:
> 
> > 1. the supplicant i used is Xsupplicant, I found that the xsupplicant didn't support with eap-aka in the eap_testing.txt. Is it means the hostapd is not supported to work with xsupplicant for eap-aka?
> 
> It means that I have not tested this combination. Though, I would expect
> it to work.
> 
> > 2. Now,the parameters filled in the hlr_auc_gw.milenage_db are same as the parameters in Xsupplicant side, Is it right? I found the SQN of milenage_db is increasing.
> 
> I do not know how to configure this type of test mode for Xsupplicant.
> 
> -- 
> Jouni Malinen PGP id EFC895FA
> _______________________________________________
> HostAP mailing list
> HostAP at lists.shmoo.com
> http://lists.shmoo.com/mailman/listinfo/hostap
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20110222/315bd072/attachment.htm