25 Feb
2018
25 Feb
'18
4:50 a.m.
Hi all,
I'm running the new split stack on a LC 15 (osmo-bts and osmo-pcu from
stock LC15, and osmo-bsc, osmo-msc, osmo-stp, osmo-hlr, ... from debian
9 armv7l nightly in a chroot).
osmo-sgsn gives me:
0180225034309988 DGPRS <000f> gprs_subscriber.c:714
SUBSCR(250026920931392) Received GSUP message
OSMO_GSUP_MSGT_SEND_AUTH_INFO_ERROR
20180225034309988 DGPRS <000f> gprs_subscriber.c:470
SUBSCR(250026920931392) Send authentication info has failed with cause
2, handled as: Permission denied
20180225034309988 DGPRS <000f> gprs_subscriber.c:478
SUBSCR(250026920931392) GPRS send auth info req failed, access denied,
GMM cause = 'IMSI unknown in HLR' (2)
20180225034309988 DGPRS <000f> gprs_subscriber.c:828
SUBSCR(250026920931392) Updating subscriber authentication info
20180225034309988 DMM <0002> gprs_sgsn.c:726
MM(250026920931392/e550701e) Subscriber data update
20180225034309988 DMM <0002> sgsn_auth.c:219
MM(250026920931392/e550701e) Updating authorization (unknown ->
authenticate)
20180225034309988 DMM <0002> sgsn_auth.c:236
MM(250026920931392/e550701e) Missing auth tuples, authorization not possible
20180225034309988 DMM <0002> sgsn_auth.c:248
MM(250026920931392/e550701e) Got authorization update: state unknown ->
rejected
20180225034309988 DMM <0002> gprs_gmm.c:1140
MM(250026920931392/e550701e) Not authorized, rejecting ATTACH REQUEST
with cause 'IMSI unknown in HLR' (2)
20180225034309988 DMM <0002> gprs_gmm.c:489 MM(250026920931392/e550701e)
<- GPRS ATTACH REJECT: IMSI unknown in HLR
20180225034309988 DMM <0002> gprs_gmm.c:313 MM(250026920931392/e550701e)
Cleaning MM context due to GPRS ATTACH REJECT
osmo-hlr:
20180225034401485 DAUC <0003> db_auc.c:129 IMSI='250026920931392': No 2G
Auth Data
20180225034401485 DAUC <0003> db_auc.c:165 IMSI='250026920931392': No 3G
Auth Data
20180225034401485 DAUC <0003> hlr.c:79 250026920931392: IMSI known, but
has no auth data; Returning slightly inaccurate cause 'IMSI Unknown' via
GSUP
But I added the IMSIs in the HLR.
Which kind of auth data should I put to a SIM card from a mainstream
carrier?
Thanks,
Rafael Diniz
26 Feb
26 Feb
12:17 a.m.
On Sun, Feb 25, 2018 at 12:50:54AM -0300, Rafael Diniz wrote:
osmo-sgsn gives me:
MM(250026920931392/e550701e) Updating authorization (unknown ->
authenticate)
20180225034309988 DMM <0002> sgsn_auth.c:236
MM(250026920931392/e550701e) Missing auth tuples, authorization not possible
20180225034309988 DMM <0002> sgsn_auth.c:248
MM(250026920931392/e550701e) Got authorization update: state unknown ->
rejected
20180225034309988 DMM <0002> gprs_gmm.c:1140
MM(250026920931392/e550701e) Not authorized, rejecting ATTACH REQUEST
with cause 'IMSI unknown in HLR' (2)
Hi Rafael,
as Vadim pointed out, you won't be able to do Authentication without the actual
auth tuples, which you most likely do not know for an arbitrary SIM.
In 2G however, it is possible to connect without Authentication. I think
that's done by 'auth-policy closed' and using 'ismi-acl add
<your-imsi>', in
the osmo-sgsn.cfg under 'sgsn'. Then you're not using the HLR at all.
In the MSC, we have added a configuration option 'authentication optional' so
that you can use the HLR and allow missing auth data there, but the SGSN hasn't
seen attention to that detail yet. There it's all or nothing, IIRC.
Looking forward to hear your results on it...
~N
--
- Neels Hofmeyr <nhofmeyr(a)sysmocom.de> http://www.sysmocom.de/
=======================================================================
* sysmocom - systems for mobile communications GmbH
* Alt-Moabit 93
* 10559 Berlin, Germany
* Sitz / Registered office: Berlin, HRB 134158 B
* Geschäftsführer / Managing Directors: Harald Welte
11:55 a.m.
Thanks Vadim and Neels.
Vadim, you are right, it is a Russian Megafon SIM. In the context I'm
working (GSM community networks), users use "foreign" SIM cards.
Neels, today I'll try with the configuration parameters you pointed out
and see the results.
Cheers,
Rafael Diniz
On 02/25/2018 08:17 PM, Neels Hofmeyr wrote:
On Sun, Feb 25, 2018 at 12:50:54AM -0300, Rafael Diniz
wrote:
osmo-sgsn gives me:
MM(250026920931392/e550701e) Updating authorization (unknown ->
authenticate)
20180225034309988 DMM <0002> sgsn_auth.c:236
MM(250026920931392/e550701e) Missing auth tuples, authorization not possible
20180225034309988 DMM <0002> sgsn_auth.c:248
MM(250026920931392/e550701e) Got authorization update: state unknown ->
rejected
20180225034309988 DMM <0002> gprs_gmm.c:1140
MM(250026920931392/e550701e) Not authorized, rejecting ATTACH REQUEST
with cause 'IMSI unknown in HLR' (2)
Hi Rafael,
as Vadim pointed out, you won't be able to do Authentication without the actual
auth tuples, which you most likely do not know for an arbitrary SIM.
In 2G however, it is possible to connect without Authentication. I think
that's done by 'auth-policy closed' and using 'ismi-acl add
<your-imsi>', in
the osmo-sgsn.cfg under 'sgsn'. Then you're not using the HLR at all.
In the MSC, we have added a configuration option 'authentication optional' so
that you can use the HLR and allow missing auth data there, but the SGSN hasn't
seen attention to that detail yet. There it's all or nothing, IIRC.
Looking forward to hear your results on it...
~N
27 Feb
27 Feb
3:09 a.m.
Hi Neels,
Now I have a fully working system! GPRS working!
Thanks!
Rafael Diniz
On 02/25/2018 08:17 PM, Neels Hofmeyr wrote:
On Sun, Feb 25, 2018 at 12:50:54AM -0300, Rafael Diniz
wrote:
osmo-sgsn gives me:
MM(250026920931392/e550701e) Updating authorization (unknown ->
authenticate)
20180225034309988 DMM <0002> sgsn_auth.c:236
MM(250026920931392/e550701e) Missing auth tuples, authorization not possible
20180225034309988 DMM <0002> sgsn_auth.c:248
MM(250026920931392/e550701e) Got authorization update: state unknown ->
rejected
20180225034309988 DMM <0002> gprs_gmm.c:1140
MM(250026920931392/e550701e) Not authorized, rejecting ATTACH REQUEST
with cause 'IMSI unknown in HLR' (2)
Hi Rafael,
as Vadim pointed out, you won't be able to do Authentication without the actual
auth tuples, which you most likely do not know for an arbitrary SIM.
In 2G however, it is possible to connect without Authentication. I think
that's done by 'auth-policy closed' and using 'ismi-acl add
<your-imsi>', in
the osmo-sgsn.cfg under 'sgsn'. Then you're not using the HLR at all.
In the MSC, we have added a configuration option 'authentication optional' so
that you can use the HLR and allow missing auth data there, but the SGSN hasn't
seen attention to that detail yet. There it's all or nothing, IIRC.
Looking forward to hear your results on it...
~N
1:30 p.m.
btw, attached goes my config, with LC15 (running everything inside ir)
IP 192.168.0.6.
Cheers,
Rafael Diniz
On 02/26/2018 11:09 PM, Rafael Diniz wrote:
Hi Neels,
Now I have a fully working system! GPRS working!
Thanks!
Rafael Diniz
On 02/25/2018 08:17 PM, Neels Hofmeyr wrote:
On Sun, Feb 25, 2018 at 12:50:54AM -0300, Rafael
Diniz wrote:
osmo-sgsn gives me:
MM(250026920931392/e550701e) Updating authorization (unknown ->
authenticate)
20180225034309988 DMM <0002> sgsn_auth.c:236
MM(250026920931392/e550701e) Missing auth tuples, authorization not possible
20180225034309988 DMM <0002> sgsn_auth.c:248
MM(250026920931392/e550701e) Got authorization update: state unknown ->
rejected
20180225034309988 DMM <0002> gprs_gmm.c:1140
MM(250026920931392/e550701e) Not authorized, rejecting ATTACH REQUEST
with cause 'IMSI unknown in HLR' (2)
Hi Rafael,
as Vadim pointed out, you won't be able to do Authentication without the actual
auth tuples, which you most likely do not know for an arbitrary SIM.
In 2G however, it is possible to connect without Authentication. I think
that's done by 'auth-policy closed' and using 'ismi-acl add
<your-imsi>', in
the osmo-sgsn.cfg under 'sgsn'. Then you're not using the HLR at all.
In the MSC, we have added a configuration option 'authentication optional' so
that you can use the HLR and allow missing auth data there, but the SGSN hasn't
seen attention to that detail yet. There it's all or nothing, IIRC.
Looking forward to hear your results on it...
~N
2257
days inactive
2259
days old
4 comments
2 participants
participants (2)
-
Neels Hofmeyr -
Rafael Diniz