Hi all, I'm running the new split stack on a LC 15 (osmo-bts and osmo-pcu from stock LC15, and osmo-bsc, osmo-msc, osmo-stp, osmo-hlr, ... from debian 9 armv7l nightly in a chroot).
osmo-sgsn gives me:
0180225034309988 DGPRS <000f> gprs_subscriber.c:714 SUBSCR(250026920931392) Received GSUP message OSMO_GSUP_MSGT_SEND_AUTH_INFO_ERROR 20180225034309988 DGPRS <000f> gprs_subscriber.c:470 SUBSCR(250026920931392) Send authentication info has failed with cause 2, handled as: Permission denied 20180225034309988 DGPRS <000f> gprs_subscriber.c:478 SUBSCR(250026920931392) GPRS send auth info req failed, access denied, GMM cause = 'IMSI unknown in HLR' (2) 20180225034309988 DGPRS <000f> gprs_subscriber.c:828 SUBSCR(250026920931392) Updating subscriber authentication info 20180225034309988 DMM <0002> gprs_sgsn.c:726 MM(250026920931392/e550701e) Subscriber data update 20180225034309988 DMM <0002> sgsn_auth.c:219 MM(250026920931392/e550701e) Updating authorization (unknown -> authenticate) 20180225034309988 DMM <0002> sgsn_auth.c:236 MM(250026920931392/e550701e) Missing auth tuples, authorization not possible 20180225034309988 DMM <0002> sgsn_auth.c:248 MM(250026920931392/e550701e) Got authorization update: state unknown -> rejected 20180225034309988 DMM <0002> gprs_gmm.c:1140 MM(250026920931392/e550701e) Not authorized, rejecting ATTACH REQUEST with cause 'IMSI unknown in HLR' (2) 20180225034309988 DMM <0002> gprs_gmm.c:489 MM(250026920931392/e550701e) <- GPRS ATTACH REJECT: IMSI unknown in HLR 20180225034309988 DMM <0002> gprs_gmm.c:313 MM(250026920931392/e550701e) Cleaning MM context due to GPRS ATTACH REJECT
osmo-hlr:
20180225034401485 DAUC <0003> db_auc.c:129 IMSI='250026920931392': No 2G Auth Data 20180225034401485 DAUC <0003> db_auc.c:165 IMSI='250026920931392': No 3G Auth Data 20180225034401485 DAUC <0003> hlr.c:79 250026920931392: IMSI known, but has no auth data; Returning slightly inaccurate cause 'IMSI Unknown' via GSUP
But I added the IMSIs in the HLR. Which kind of auth data should I put to a SIM card from a mainstream carrier?
Thanks, Rafael Diniz
On Sun, Feb 25, 2018 at 12:50:54AM -0300, Rafael Diniz wrote:
osmo-sgsn gives me: MM(250026920931392/e550701e) Updating authorization (unknown -> authenticate) 20180225034309988 DMM <0002> sgsn_auth.c:236 MM(250026920931392/e550701e) Missing auth tuples, authorization not possible 20180225034309988 DMM <0002> sgsn_auth.c:248 MM(250026920931392/e550701e) Got authorization update: state unknown -> rejected 20180225034309988 DMM <0002> gprs_gmm.c:1140 MM(250026920931392/e550701e) Not authorized, rejecting ATTACH REQUEST with cause 'IMSI unknown in HLR' (2)
Hi Rafael,
as Vadim pointed out, you won't be able to do Authentication without the actual auth tuples, which you most likely do not know for an arbitrary SIM.
In 2G however, it is possible to connect without Authentication. I think that's done by 'auth-policy closed' and using 'ismi-acl add <your-imsi>', in the osmo-sgsn.cfg under 'sgsn'. Then you're not using the HLR at all.
In the MSC, we have added a configuration option 'authentication optional' so that you can use the HLR and allow missing auth data there, but the SGSN hasn't seen attention to that detail yet. There it's all or nothing, IIRC.
Looking forward to hear your results on it...
~N
Thanks Vadim and Neels.
Vadim, you are right, it is a Russian Megafon SIM. In the context I'm working (GSM community networks), users use "foreign" SIM cards.
Neels, today I'll try with the configuration parameters you pointed out and see the results.
Cheers, Rafael Diniz
On 02/25/2018 08:17 PM, Neels Hofmeyr wrote:
On Sun, Feb 25, 2018 at 12:50:54AM -0300, Rafael Diniz wrote:
osmo-sgsn gives me: MM(250026920931392/e550701e) Updating authorization (unknown -> authenticate) 20180225034309988 DMM <0002> sgsn_auth.c:236 MM(250026920931392/e550701e) Missing auth tuples, authorization not possible 20180225034309988 DMM <0002> sgsn_auth.c:248 MM(250026920931392/e550701e) Got authorization update: state unknown -> rejected 20180225034309988 DMM <0002> gprs_gmm.c:1140 MM(250026920931392/e550701e) Not authorized, rejecting ATTACH REQUEST with cause 'IMSI unknown in HLR' (2)
Hi Rafael,
as Vadim pointed out, you won't be able to do Authentication without the actual auth tuples, which you most likely do not know for an arbitrary SIM.
In 2G however, it is possible to connect without Authentication. I think that's done by 'auth-policy closed' and using 'ismi-acl add <your-imsi>', in the osmo-sgsn.cfg under 'sgsn'. Then you're not using the HLR at all.
In the MSC, we have added a configuration option 'authentication optional' so that you can use the HLR and allow missing auth data there, but the SGSN hasn't seen attention to that detail yet. There it's all or nothing, IIRC.
Looking forward to hear your results on it...
~N
Hi Neels,
Now I have a fully working system! GPRS working!
Thanks! Rafael Diniz
On 02/25/2018 08:17 PM, Neels Hofmeyr wrote:
On Sun, Feb 25, 2018 at 12:50:54AM -0300, Rafael Diniz wrote:
osmo-sgsn gives me: MM(250026920931392/e550701e) Updating authorization (unknown -> authenticate) 20180225034309988 DMM <0002> sgsn_auth.c:236 MM(250026920931392/e550701e) Missing auth tuples, authorization not possible 20180225034309988 DMM <0002> sgsn_auth.c:248 MM(250026920931392/e550701e) Got authorization update: state unknown -> rejected 20180225034309988 DMM <0002> gprs_gmm.c:1140 MM(250026920931392/e550701e) Not authorized, rejecting ATTACH REQUEST with cause 'IMSI unknown in HLR' (2)
Hi Rafael,
as Vadim pointed out, you won't be able to do Authentication without the actual auth tuples, which you most likely do not know for an arbitrary SIM.
In 2G however, it is possible to connect without Authentication. I think that's done by 'auth-policy closed' and using 'ismi-acl add <your-imsi>', in the osmo-sgsn.cfg under 'sgsn'. Then you're not using the HLR at all.
In the MSC, we have added a configuration option 'authentication optional' so that you can use the HLR and allow missing auth data there, but the SGSN hasn't seen attention to that detail yet. There it's all or nothing, IIRC.
Looking forward to hear your results on it...
~N
btw, attached goes my config, with LC15 (running everything inside ir) IP 192.168.0.6.
Cheers, Rafael Diniz
On 02/26/2018 11:09 PM, Rafael Diniz wrote:
Hi Neels,
Now I have a fully working system! GPRS working!
Thanks! Rafael Diniz
On 02/25/2018 08:17 PM, Neels Hofmeyr wrote:
On Sun, Feb 25, 2018 at 12:50:54AM -0300, Rafael Diniz wrote:
osmo-sgsn gives me: MM(250026920931392/e550701e) Updating authorization (unknown -> authenticate) 20180225034309988 DMM <0002> sgsn_auth.c:236 MM(250026920931392/e550701e) Missing auth tuples, authorization not possible 20180225034309988 DMM <0002> sgsn_auth.c:248 MM(250026920931392/e550701e) Got authorization update: state unknown -> rejected 20180225034309988 DMM <0002> gprs_gmm.c:1140 MM(250026920931392/e550701e) Not authorized, rejecting ATTACH REQUEST with cause 'IMSI unknown in HLR' (2)
Hi Rafael,
as Vadim pointed out, you won't be able to do Authentication without the actual auth tuples, which you most likely do not know for an arbitrary SIM.
In 2G however, it is possible to connect without Authentication. I think that's done by 'auth-policy closed' and using 'ismi-acl add <your-imsi>', in the osmo-sgsn.cfg under 'sgsn'. Then you're not using the HLR at all.
In the MSC, we have added a configuration option 'authentication optional' so that you can use the HLR and allow missing auth data there, but the SGSN hasn't seen attention to that detail yet. There it's all or nothing, IIRC.
Looking forward to hear your results on it...
~N
-
Neels Hofmeyr -
Rafael Diniz