1 |
# |
# |
2 |
# $Id$ |
# $Id$ |
3 |
# |
# |
4 |
|
# For detailed description, run: |
5 |
|
# info Radius dictionary |
6 |
|
|
7 |
## NOTE: Beside its usual functions this file also serves as a source |
# Do not remove this! |
8 |
## for include/raddict.h in the distribution directory. |
$INCLUDE dict/standard |
|
## Preprocessing script scripts/dict.awk, translates all comments except |
|
|
## those starting with two # signs into appropriate C comments. |
|
|
## To prevent any comments irrelevant to radius source from appearing |
|
|
## in the header, begin them with ##. |
|
|
|
|
|
## Uncomment any of these as appropriate: |
|
|
|
|
|
$INCLUDE dict/compat ## Compatibility issues |
|
|
$INCLUDE dict/livingston ## Livingston compatibility |
|
|
#$INCLUDE dict/tunnel ## Tunnel attrs. as per RFC 2867 |
|
|
#$INCLUDE dict/usr ## USR Robotics |
|
|
#$INCLUDE dict/ascend ## MAX Ascend |
|
|
#$INCLUDE dict/ascend.vs ## MAX Ascend -- vendor-specific |
|
|
#$INCLUDE dict/cisco ## Cisco |
|
|
#$INCLUDE dict/voip ## Special attributes to be used |
|
|
## with rewriting functions |
|
|
|
|
|
## |
|
|
## Following are the proper new names. Use these. |
|
|
## syntax flags: [us-hi-hu] |
|
|
ATTRIBUTE User-Name 1 string - [LR-RLR] |
|
|
ATTRIBUTE User-Password 2 string - [L-----]E |
|
|
ATTRIBUTE CHAP-Password 3 string - [L-----]bE |
|
|
ATTRIBUTE NAS-IP-Address 4 ipaddr - [L--RLR] |
|
|
ATTRIBUTE NAS-Port-Id 5 integer - [LR-RLR] |
|
|
ATTRIBUTE Service-Type 6 integer - [LR-RLR]=P |
|
|
ATTRIBUTE Framed-Protocol 7 integer - [LR-RLR]=P |
|
|
ATTRIBUTE Framed-IP-Address 8 ipaddr - [LR-RLR]= |
|
|
ATTRIBUTE Framed-IP-Netmask 9 ipaddr - [LR-RLR]= |
|
|
ATTRIBUTE Framed-Routing 10 integer - [-R-R-R]= |
|
|
ATTRIBUTE Filter-Id 11 string - [-R-R-R]=P |
|
|
ATTRIBUTE Framed-MTU 12 integer - [LR-R-R]=P |
|
|
ATTRIBUTE Framed-Compression 13 integer - [LR-RLR]=P |
|
|
ATTRIBUTE Login-IP-Host 14 ipaddr - [LR-R-R]=P |
|
|
ATTRIBUTE Login-Service 15 integer - [-R-R-R]=P |
|
|
ATTRIBUTE Login-TCP-Port 16 integer - [-R-R-R]= |
|
|
ATTRIBUTE Reply-Message 18 string - [-R----]+P |
|
|
ATTRIBUTE Callback-Number 19 string - [-R----]= |
|
|
ATTRIBUTE Callback-Id 20 string - [-R----]= |
|
|
ATTRIBUTE Framed-Route 22 string - [-R----]+ |
|
|
ATTRIBUTE Framed-IPX-Network 23 ipaddr - [-R----]= |
|
|
ATTRIBUTE State 24 string - [LRLRLR]P |
|
|
ATTRIBUTE Class 25 string - [LRLRLR] |
|
|
ATTRIBUTE Vendor-Specific 26 string - [LR-R-R] |
|
|
ATTRIBUTE Session-Timeout 27 integer - [-R----]=P |
|
|
ATTRIBUTE Idle-Timeout 28 integer - [-R----]=P |
|
|
ATTRIBUTE Termination-Action 29 integer - [LR-R-R]=P |
|
|
ATTRIBUTE Called-Station-Id 30 string - [L--RLR] |
|
|
ATTRIBUTE Calling-Station-Id 31 string - [L--RLR] |
|
|
ATTRIBUTE NAS-Identifier 32 string - [L--RLR] |
|
|
ATTRIBUTE Proxy-State 33 string - [------] |
|
|
ATTRIBUTE Login-LAT-Service 34 string - [-R---R]= |
|
|
ATTRIBUTE Login-LAT-Node 35 string - [-R---R]= |
|
|
ATTRIBUTE Login-LAT-Group 36 string - [-R---R]= |
|
|
ATTRIBUTE Framed-AppleTalk-Link 37 integer - [-R---R]= |
|
|
ATTRIBUTE Framed-AppleTalk-Network 38 integer - [-R---R]= |
|
|
ATTRIBUTE Framed-AppleTalk-Zone 39 string - [-R---R]= |
|
|
|
|
|
ATTRIBUTE Acct-Status-Type 40 integer - [] |
|
|
ATTRIBUTE Acct-Delay-Time 41 integer - [] |
|
|
ATTRIBUTE Acct-Input-Octets 42 integer - [] |
|
|
ATTRIBUTE Acct-Output-Octets 43 integer - [] |
|
|
ATTRIBUTE Acct-Session-Id 44 string - [] |
|
|
ATTRIBUTE Acct-Authentic 45 integer - [] |
|
|
ATTRIBUTE Acct-Session-Time 46 integer - [] |
|
|
ATTRIBUTE Acct-Input-Packets 47 integer - [] |
|
|
ATTRIBUTE Acct-Output-Packets 48 integer - [] |
|
|
ATTRIBUTE Acct-Terminate-Cause 49 integer - [] |
|
|
ATTRIBUTE Acct-Multi-Session-Id 50 integer - [] |
|
|
ATTRIBUTE Acct-Link-Count 51 integer - [] |
|
|
ATTRIBUTE Acct-Input-Gigawords 52 integer - [] |
|
|
ATTRIBUTE Acct-Output-Gigawords 53 integer - [] |
|
|
ATTRIBUTE Event-Timestamp 55 integer - [] |
|
|
|
|
|
ATTRIBUTE CHAP-Challenge 60 string - []b |
|
|
ATTRIBUTE NAS-Port-Type 61 integer - [] |
|
|
ATTRIBUTE Port-Limit 62 integer - []P |
|
|
ATTRIBUTE Login-LAT-Port 63 integer - [] |
|
|
|
|
|
ATTRIBUTE ARAP-Password 70 string - [] |
|
|
ATTRIBUTE ARAP-Features 71 string - [] |
|
|
ATTRIBUTE ARAP-Zone-Access 72 integer - [] |
|
|
ATTRIBUTE ARAP-Security 73 integer - [] |
|
|
ATTRIBUTE ARAP-Security-Data 74 string - [] |
|
|
ATTRIBUTE Password-Retry 75 integer - [] |
|
|
ATTRIBUTE Prompt 76 integer - [] |
|
|
VALUE Prompt NoEcho 0 |
|
|
VALUE Prompt Echo 1 |
|
|
ATTRIBUTE Connect-Info 77 string - [] |
|
|
ATTRIBUTE Configuration-Token 78 string - [] |
|
|
ATTRIBUTE EAP-Message 79 string - [] |
|
|
ATTRIBUTE Message-Authenticator 80 string - [] |
|
|
ATTRIBUTE ARAP-Challenge-Response 84 string - [] |
|
|
ATTRIBUTE Acct-Interim-Interval 85 integer - [] |
|
|
# Note: according to rfc2869, this attribute is named NAS-Port-Id |
|
|
# which conflicts with the name for attribute 5. The latter should |
|
|
# be called NAS-Port! |
|
|
ATTRIBUTE NAS-Port-Id-String 87 integer - [] |
|
|
ATTRIBUTE Framed-Pool 88 string - [] |
|
|
|
|
|
ATTRIBUTE User-UID 99 integer - [LRLRLR] |
|
|
ATTRIBUTE User-GID 100 integer - [LRLRLR] |
|
|
|
|
|
# |
|
|
# Cistron-Radius compatibility |
|
|
# |
|
|
ATTRIBUTE Huntgroup-Name 221 string - [L--RLR] |
|
|
ATTRIBUTE User-Category 1029 string - [L--R-R] |
|
|
ATTRIBUTE Group-Name 1030 string - [L--R-R] |
|
|
ATTRIBUTE Simultaneous-Use 1034 integer - [L--R-R] |
|
|
ATTRIBUTE Strip-User-Name 1035 integer - [LRLR-R] |
|
|
ATTRIBUTE Fall-Through 1036 integer - [LRLR--] |
|
|
# Use of this attribute is deprecated |
|
|
ATTRIBUTE Add-Port-To-IP-Address 1037 integer - [------] |
|
|
ATTRIBUTE Exec-Program 1038 string - [-R----] |
|
|
ATTRIBUTE Exec-Program-Wait 1039 string - [-R----] |
|
|
ATTRIBUTE Hint 1040 string - [L-LRLR] |
|
|
ATTRIBUTE Pam-Auth 1041 string - [L--R-R]= |
|
|
ATTRIBUTE Login-Time 1042 string - [L-----] |
|
|
|
|
|
# Attributes used by GNU Radius |
|
|
ATTRIBUTE Replace-User-Name 2001 string - [LRLR--] |
|
|
ATTRIBUTE Rewrite-Function 2002 string - [LRLRLR] |
|
|
|
|
|
ATTRIBUTE Acct-Type 2003 integer - [L--R-R] |
|
|
VALUE Acct-Type None 0 |
|
|
VALUE Acct-Type System 1 |
|
|
VALUE Acct-Type Detail 2 |
|
|
VALUE Acct-Type SQL 3 |
|
|
|
|
|
ATTRIBUTE Match-Profile 2004 string - [LR-R-R] |
|
|
## ATTRIBUTE Include-Profile 2005 string |
|
|
ATTRIBUTE Auth-Data 2006 string - [L--R-R]= |
|
|
|
|
|
ATTRIBUTE Log-Mode-Mask 2007 integer - [L--R-R]+ |
|
|
VALUE Log-Mode-Mask Log-Auth 1 |
|
|
VALUE Log-Mode-Mask Log-Auth-Pass 2 |
|
|
VALUE Log-Mode-Mask Log-Failed-Pass 4 |
|
|
VALUE Log-Mode-Mask Log-Pass 6 |
|
|
VALUE Log-Mode-Mask Log-All 7 |
|
|
|
|
|
ATTRIBUTE Acct-Ext-Program 2008 string - [---R--] |
|
|
ATTRIBUTE Scheme-Procedure 2009 string - [-R----] |
|
|
ATTRIBUTE Scheme-Acct-Procedure 2010 string - [---R--] |
|
|
|
|
|
ATTRIBUTE Password-Location 2011 integer - [L-----] |
|
|
VALUE Password-Location SQL 1 |
|
|
|
|
|
ATTRIBUTE Proxy-Replied 2012 integer - [L-L-L-]= |
|
|
VALUE Proxy-Replied No 0 |
|
|
VALUE Proxy-Replied Yes 1 |
|
|
|
|
|
# These are used by rewriting functions: |
|
|
ATTRIBUTE Orig-User-Name 2101 string - [L--R-R] |
|
|
ATTRIBUTE Orig-NAS-Port-Id 2105 integer - [L--R-R] |
|
|
ATTRIBUTE Orig-Acct-Session-Id 2144 integer - [L--R-R] |
|
|
|
|
|
ATTRIBUTE Password-Expire-Days 2145 integer - [------] |
|
|
|
|
|
# |
|
|
# Non-Protocol Attributes |
|
|
# These attributes are used internally by the server |
|
|
# |
|
|
ATTRIBUTE Expiration 21 date - [L-----] |
|
|
ATTRIBUTE Auth-Type 1000 integer - [L--R-R] |
|
|
ATTRIBUTE Menu 1001 string - [-R----]= |
|
|
ATTRIBUTE Termination-Menu 1002 string - [-R----]= |
|
|
ATTRIBUTE Prefix 1003 string - [L-L-LR] |
|
|
ATTRIBUTE Suffix 1004 string - [L-L-LR] |
|
|
ATTRIBUTE Group 1005 string - [L-L-LR] |
|
|
ATTRIBUTE Crypt-Password 1006 string - [L-----] |
|
|
ATTRIBUTE Connect-Rate 1007 integer - [------] |
|
|
|
|
|
# |
|
|
# Integer Translations |
|
|
# |
|
|
|
|
|
# User Types |
|
|
|
|
|
VALUE Service-Type Login-User 1 |
|
|
VALUE Service-Type Framed-User 2 |
|
|
VALUE Service-Type Callback-Login-User 3 |
|
|
VALUE Service-Type Callback-Framed-User 4 |
|
|
VALUE Service-Type Outbound-User 5 |
|
|
VALUE Service-Type Administrative-User 6 |
|
|
VALUE Service-Type NAS-Prompt-User 7 |
|
|
VALUE Service-Type Authenticate-Only 8 |
|
|
VALUE Service-Type Call-Check 10 |
|
|
|
|
|
# GNU Radius Extension |
|
|
VALUE Service-Type RADIUS-Administrative-User 20 |
|
|
|
|
|
# Framed Protocols |
|
|
|
|
|
VALUE Framed-Protocol PPP 1 |
|
|
VALUE Framed-Protocol SLIP 2 |
|
|
|
|
|
# Framed Routing Values |
|
|
|
|
|
VALUE Framed-Routing None 0 |
|
|
VALUE Framed-Routing Broadcast 1 |
|
|
VALUE Framed-Routing Listen 2 |
|
|
VALUE Framed-Routing Broadcast-Listen 3 |
|
|
|
|
|
# Framed Compression Types |
|
|
|
|
|
VALUE Framed-Compression None 0 |
|
|
VALUE Framed-Compression Van-Jacobson-TCP-IP 1 |
|
|
|
|
|
# Login Services |
|
|
|
|
|
VALUE Login-Service Telnet 0 |
|
|
VALUE Login-Service Rlogin 1 |
|
|
VALUE Login-Service TCP-Clear 2 |
|
|
VALUE Login-Service PortMaster 3 |
|
|
|
|
|
# Status Types |
|
|
|
|
|
VALUE Acct-Status-Type Start 1 |
|
|
VALUE Acct-Status-Type Stop 2 |
|
|
VALUE Acct-Status-Type Alive 3 |
|
|
VALUE Acct-Status-Type Accounting-On 7 |
|
|
VALUE Acct-Status-Type Accounting-Off 8 |
|
|
|
|
|
# Authentication Types |
|
|
|
|
|
VALUE Acct-Authentic RADIUS 1 |
|
|
VALUE Acct-Authentic Local 2 |
|
|
|
|
|
# Termination Options |
|
|
|
|
|
VALUE Termination-Action Default 0 |
|
|
VALUE Termination-Action RADIUS-Request 1 |
|
|
|
|
|
# NAS Port Types, available in 3.3.1 and later |
|
|
|
|
|
VALUE NAS-Port-Type Async 0 |
|
|
VALUE NAS-Port-Type Sync 1 |
|
|
VALUE NAS-Port-Type ISDN 2 |
|
|
VALUE NAS-Port-Type ISDN-V120 3 |
|
|
VALUE NAS-Port-Type ISDN-V110 4 |
|
|
|
|
|
# Acct Terminate Causes, available in 3.3.2 and later |
|
|
|
|
|
VALUE Acct-Terminate-Cause User-Request 1 |
|
|
VALUE Acct-Terminate-Cause Lost-Carrier 2 |
|
|
VALUE Acct-Terminate-Cause Lost-Service 3 |
|
|
VALUE Acct-Terminate-Cause Idle-Timeout 4 |
|
|
VALUE Acct-Terminate-Cause Session-Timeout 5 |
|
|
VALUE Acct-Terminate-Cause Admin-Reset 6 |
|
|
VALUE Acct-Terminate-Cause Admin-Reboot 7 |
|
|
VALUE Acct-Terminate-Cause Port-Error 8 |
|
|
VALUE Acct-Terminate-Cause NAS-Error 9 |
|
|
VALUE Acct-Terminate-Cause NAS-Request 10 |
|
|
VALUE Acct-Terminate-Cause NAS-Reboot 11 |
|
|
VALUE Acct-Terminate-Cause Port-Unneeded 12 |
|
|
VALUE Acct-Terminate-Cause Port-Preempted 13 |
|
|
VALUE Acct-Terminate-Cause Port-Suspended 14 |
|
|
VALUE Acct-Terminate-Cause Service-Unavailable 15 |
|
|
VALUE Acct-Terminate-Cause Callback 16 |
|
|
VALUE Acct-Terminate-Cause User-Error 17 |
|
|
VALUE Acct-Terminate-Cause Host-Request 18 |
|
|
|
|
|
# |
|
|
# Auth-Type translations |
|
|
# |
|
|
VALUE Auth-Type Local 0 |
|
|
VALUE Auth-Type System 1 |
|
|
VALUE Auth-Type SecurID 2 |
|
|
VALUE Auth-Type Crypt-Local 3 |
|
|
VALUE Auth-Type Reject 4 |
|
|
VALUE Auth-Type Ignore 5 |
|
|
|
|
|
# |
|
|
# Extensions introduced by Cistron |
|
|
# |
|
|
VALUE Auth-Type Mysql 252 |
|
|
# A preferred alias for Mysql |
|
|
VALUE Auth-Type SQL 252 |
|
|
VALUE Auth-Type Pam 253 |
|
|
VALUE Auth-Type Accept 254 |
|
|
|
|
|
VALUE Fall-Through No 0 |
|
|
VALUE Fall-Through Yes 1 |
|
|
VALUE Add-Port-To-IP-Address No 0 |
|
|
VALUE Add-Port-To-IP-Address Yes 1 |
|
|
VALUE Strip-User-Name No 0 |
|
|
VALUE Strip-User-Name Yes 1 |
|
9 |
|
|
10 |
|
# Uncomment any of these as appropriate: |
11 |
|
|
12 |
|
$INCLUDE dict/compat # Compatibility issues |
13 |
|
$INCLUDE dict/livingston # Livingston compatibility |
14 |
|
#$INCLUDE dict/tunnel # Tunnel attrs. as per RFC 2867 |
15 |
|
#$INCLUDE dict/usr # USR Robotics |
16 |
|
#$INCLUDE dict/ascend # MAX Ascend |
17 |
|
#$INCLUDE dict/ascend.vs # MAX Ascend -- vendor-specific |
18 |
|
#$INCLUDE dict/cisco # Cisco |
19 |
|
#$INCLUDE dict/voip # Special attributes to be used |
20 |
|
# with rewriting functions |
21 |
|
|