[srslte-users] [Potential Spoof] Re: Auth problem with openair-CN - srsENB - srsUE combo

Harsha Chenji cjkernel at gmail.com
Thu Aug 10 19:24:54 UTC 2017


Thanks Anoop, the UE stays connected now. Will keep you updated.

On Wed, Aug 9, 2017 at 7:50 PM, Anoop Singh Tomar <anooptomar at fb.com> wrote:

> Hi Harsha ,
>
>
>
> I realized that you have attachec hss log file as well . I think I know
> the issue.
>
>
>
> K value is fine.  Issue id with OP and OPc .
>
>
>
> You have configured OP value as OPc in HSS OAI DB ,
>
>
>
> IMSI: 208930100001111Key: 8b.af.47.3f.2f.8f.d0.94.87.cc.cb.d7.09.7c.68.62.
>
> Query: UPDATE `users` SET `OPc`=UNHEX('e734f8734007d6c5ce7a0508809e7e9c')
> WHERE `users`.`imsi`='208930100001111'
>
> IMSI 208930100001111 Updated OPc e734f8734007d6c5ce7a0508809e7e9c ->
> e734f8734007d6c5ce7a0508809e7e9c
>
>
>
> This is OP not OPc in SRS UE config.
>
>
>
> Please configure this value on HSS.conf as OP =
> e734f8734007d6c5ce7a0508809e7e9c and don’t set OPc in OAI db.
>
>
>
> Let OPc be calculated from OP ( in HSS.conf ) and K .
>
>
>
> It should work fine.
>
>
>
> Thanks,
>
> Anoop
>
>
>
>
>
> *From: *<openair5g-user-request at lists.eurecom.fr> on behalf of Anoop
> Singh Tomar <anooptomar at fb.com>
> *Reply-To: *Anoop Singh Tomar <anooptomar at fb.com>
> *Date: *Wednesday, August 9, 2017 at 4:36 PM
> *To: *Harsha Chenji <cjkernel at gmail.com>, "srslte-users at lists.
> softwareradiosystems.com" <srslte-users at lists.softwareradiosystems.com>,
> openaircn-user <openaircn-user at lists.eurecom.fr>
> *Cc: *"ac732213 at ohio.edu" <ac732213 at ohio.edu>, "
> openair5g-user at lists.eurecom.fr" <openair5g-user at lists.eurecom.fr>
> *Subject: *[Potential Spoof] Re: Auth problem with openair-CN - srsENB -
> srsUE combo
>
>
>
> I got answer to my questions after looking into SRS UE code. It supports
> mileage and takes OP as input. Below is the configuration you are using on
> SRS UE side.
>
>
>
> algo = milenage
>
> op   = e734f8734007d6c5ce7a0508809e7e9c
>
> amf  = 8000
>
> k    = 8baf473f2f8fd09487cccbd7097c6862
>
> imsi = 208930100001111
>
>
>
> Can you please check whether you have used same configuration  in HSS.conf
> ( OP value ) and in OAI DB for K .
>
>
>
> Thanks,
>
> Anoop
>
>
>
>
>
> *From: *Anoop Singh Tomar <anooptomar at fb.com>
> *Date: *Wednesday, August 9, 2017 at 4:13 PM
> *To: *Harsha Chenji <cjkernel at gmail.com>, "srslte-users at lists.
> softwareradiosystems.com" <srslte-users at lists.softwareradiosystems.com>,
> openaircn-user <openaircn-user at lists.eurecom.fr>
> *Cc: *"ac732213 at ohio.edu" <ac732213 at ohio.edu>, "
> openair5g-user at lists.eurecom.fr" <openair5g-user at lists.eurecom.fr>
> *Subject: *Re: Auth problem with openair-CN - srsENB - srsUE combo
>
>
>
> Hi Harsha,
>
>
>
> Looked into UE logs
>
>
>
> 15:09:41.655148 [RRC ] Info    SRB1 - Received DL Information Transfer
>
> 15:09:41.655151 [NAS ] Info    DL SRB1 PDU
>
>              0000: 07 52 00 cd 52 96 76 8c 68 01 5e a9 ee b7 4f 54
>
>              0010: 78 ee 11 10 ce 10 ed 86 dd c2 80 00 28 8d f0 75
>
> 15:09:41.655158 [NAS ] Info    Received Authentication Request
>
> 15:09:41.655163 [NAS ] Info    MCC=61960, MNC=65427
>
> 15:09:41.655185 [NAS ] Warning Network authentication failure
>
>
>
> There is a auth failure in UE SRS side and in that case it seems UE SRS
> does not send Auth failure message. I don’t see in UL SRB1 Tx other than
> RRC Connection setup complete.
>
>
>
> Looks like some issue in NAS side of UE SRS. Does it support Milenage
> algorithm ?  If so then please check whether UE SRS takes OPc or OP as
> input parameter?
>
>
>
> Thanks,
>
> Anoop
>
>
>
>
>
> *From: *Anoop Singh Tomar <anooptomar at fb.com>
> *Date: *Wednesday, August 9, 2017 at 2:50 PM
> *To: *Harsha Chenji <cjkernel at gmail.com>, "srslte-users at lists.
> softwareradiosystems.com" <srslte-users at lists.softwareradiosystems.com>,
> openaircn-user <openaircn-user at lists.eurecom.fr>
> *Cc: *"ac732213 at ohio.edu" <ac732213 at ohio.edu>, "
> openair5g-user at lists.eurecom.fr" <openair5g-user at lists.eurecom.fr>
> *Subject: *Re: Auth problem with openair-CN - srsENB - srsUE combo
>
>
>
> Hi Harsha,
>
>
>
> From the MME logs :
>
>
>
> EMM-PROC  - T3460 timer expired, retransmission counter = 5
>
> This means EPC/MME is not getting any response to DL NAS: Authentication
> Request message after multiple retries. And hence EPC is aborting the
> attach procedure.  S
>
>
>
> This means there are either of the following issue
>
>
>
>    1. UE SRS NAS is not responding to Auth request OR
>    2. UL RRC message from SRS UE which carries Authentication Response
>    message is not being received at eNB correctly OR
>    3. DL RRC message on SRB1 from eNB that carries Authentication request
>    is not being received at SRS UE correctly.
>
>
>
> Need to analyze UE side and eNB side logs to pin point the issue. One
> pointer is that since RRC connection setup is successful and initial NAS
> message within RRC Connection setup complete is received in EPC that means
> UL SRB1 is working fine . So first thing to look at SRB1 in DL direction (
> point #3 and then point #1)
>
>
>
> Thanks,
>
> Anoop
>
>
>
> *From: *<openaircn-user-request at lists.eurecom.fr> on behalf of Harsha
> Chenji <cjkernel at gmail.com>
> *Reply-To: *Harsha Chenji <cjkernel at gmail.com>
> *Date: *Wednesday, August 9, 2017 at 12:22 PM
> *To: *"srslte-users at lists.softwareradiosystems.com" <srslte-users at lists.
> softwareradiosystems.com>, openaircn-user <openaircn-user at lists.eurecom.fr
> >
> *Cc: *"ac732213 at ohio.edu" <ac732213 at ohio.edu>
> *Subject: *Auth problem with openair-CN - srsENB - srsUE combo
>
>
>
> Hi all,
>
> openair, srsenb, srsue are all on separate machines, with B200s being
> used. The gain is cranked up to 100 everywhere.
>
> The enb registers with the mme. But when the ue connects, it gets a
> network authentication error. We have replicated the same usim settings
> from oaisim, on srsUE. The logs are attached. As a FYI, oaisim+openair-cn
> works fine (haven't tested openaircn + openair-enb + srsUE).
>
> srsue.log = console output of ./srsue
>
> ue.log = /tmp detailed log of ./srsue
>
> enb.log, srsenb.log = same as above except for ./srsenb
>
> hss, mme, spgw.log = console output of openaircn
>
>
>
> ue.conf.xxx = conf file used for ./srsue
>
>
>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.softwareradiosystems.com/pipermail/srslte-users/attachments/20170810/663ae834/attachment.html>


More information about the srslte-users mailing list