dictionary.nortel is now from the v4.0.x FreeRADIUS branch.
[metze/wireshark/wip.git] / radius / dictionary.freeradius.internal
1 # -*- text -*-
2 # Copyright (C) 2011 The FreeRADIUS Server project and contributors
3 #
4 #       Non Protocol Attributes used by FreeRADIUS
5 #
6 #       $Id: b830d56623fc3aad78122fa6af04ce66416123b6 $
7 #
8
9 #       The attributes number ranges are allocates as follows:
10 #
11 #       Range:  500-999
12 #               server-side attributes which can go in a reply list
13
14 #       These attributes CAN go in the reply item list.
15 ATTRIBUTE       Fall-Through                            500     integer
16 ATTRIBUTE       Relax-Filter                            501     integer
17 ATTRIBUTE       Exec-Program                            502     string
18 ATTRIBUTE       Exec-Program-Wait                       503     string
19
20 #       These attributes CANNOT go in the reply item list.
21
22 #
23 #       Range:  1000+
24 #               Attributes which cannot go in a reply list.
25 #
26 #
27 #       Range:  1000-1199
28 #               Miscellaneous server attributes.
29 #
30 #
31 #       Non-Protocol Attributes
32 #       These attributes are used internally by the server
33 #
34 ATTRIBUTE       Auth-Type                               1000    integer
35 ATTRIBUTE       Menu                                    1001    string
36 ATTRIBUTE       Termination-Menu                        1002    string
37 ATTRIBUTE       Prefix                                  1003    string
38 ATTRIBUTE       Suffix                                  1004    string
39 ATTRIBUTE       Group                                   1005    string
40 ATTRIBUTE       Crypt-Password                          1006    string
41 ATTRIBUTE       Connect-Rate                            1007    integer
42 ATTRIBUTE       Add-Prefix                              1008    string
43 ATTRIBUTE       Add-Suffix                              1009    string
44 ATTRIBUTE       Expiration                              1010    date
45 ATTRIBUTE       Autz-Type                               1011    integer
46 ATTRIBUTE       Acct-Type                               1012    integer
47 ATTRIBUTE       Session-Type                            1013    integer
48 ATTRIBUTE       Post-Auth-Type                          1014    integer
49 ATTRIBUTE       Pre-Proxy-Type                          1015    integer
50 ATTRIBUTE       Post-Proxy-Type                         1016    integer
51 ATTRIBUTE       Pre-Acct-Type                           1017    integer
52
53 #
54 #       This is the EAP type of authentication, which is set
55 #       by the EAP module, for informational purposes only.
56 #
57 ATTRIBUTE       EAP-Type                                1018    integer
58 ATTRIBUTE       EAP-TLS-Require-Client-Cert             1019    integer
59 ATTRIBUTE       EAP-Id                                  1020    integer
60 ATTRIBUTE       EAP-Code                                1021    integer
61 ATTRIBUTE       EAP-MD5-Password                        1022    string
62 ATTRIBUTE       PEAP-Version                            1023    integer
63 ATTRIBUTE       Client-Shortname                        1024    string virtual
64 ATTRIBUTE       Load-Balance-Key                        1025    string
65 ATTRIBUTE       Raw-Attribute                           1026    octets
66 ATTRIBUTE       TNC-VLAN-Access                         1027    string
67 ATTRIBUTE       TNC-VLAN-Isolate                        1028    string
68 ATTRIBUTE       User-Category                           1029    string
69 ATTRIBUTE       Group-Name                              1030    string
70 ATTRIBUTE       Huntgroup-Name                          1031    string
71 ATTRIBUTE       Simultaneous-Use                        1034    integer
72 ATTRIBUTE       Strip-User-Name                         1035    integer
73 ATTRIBUTE       Hint                                    1040    string
74 ATTRIBUTE       Pam-Auth                                1041    string
75 ATTRIBUTE       Login-Time                              1042    string
76 ATTRIBUTE       Stripped-User-Name                      1043    string
77 ATTRIBUTE       Current-Time                            1044    string
78 ATTRIBUTE       Realm                                   1045    string
79 ATTRIBUTE       No-Such-Attribute                       1046    string
80 ATTRIBUTE       Packet-Type                             1047    integer virtual
81 ATTRIBUTE       Proxy-To-Realm                          1048    string
82 ATTRIBUTE       Replicate-To-Realm                      1049    string
83 ATTRIBUTE       Acct-Session-Start-Time                 1050    date
84 ATTRIBUTE       Acct-Unique-Session-Id                  1051    string
85 ATTRIBUTE       Client-IP-Address                       1052    ipaddr virtual
86 ATTRIBUTE       Ldap-UserDn                             1053    string
87 ATTRIBUTE       NS-MTA-MD5-Password                     1054    string
88 ATTRIBUTE       SQL-User-Name                           1055    string
89 ATTRIBUTE       LM-Password                             1057    octets
90 ATTRIBUTE       NT-Password                             1058    octets
91 ATTRIBUTE       SMB-Account-CTRL                        1059    integer
92 ATTRIBUTE       SMB-Account-CTRL-TEXT                   1061    string
93 ATTRIBUTE       User-Profile                            1062    string
94 ATTRIBUTE       Digest-Realm                            1063    string
95 ATTRIBUTE       Digest-Nonce                            1064    string
96 ATTRIBUTE       Digest-Method                           1065    string
97 ATTRIBUTE       Digest-URI                              1066    string
98 ATTRIBUTE       Digest-QOP                              1067    string
99 ATTRIBUTE       Digest-Algorithm                        1068    string
100 ATTRIBUTE       Digest-Body-Digest                      1069    string
101 ATTRIBUTE       Digest-CNonce                           1070    string
102 ATTRIBUTE       Digest-Nonce-Count                      1071    string
103 ATTRIBUTE       Digest-User-Name                        1072    string
104 ATTRIBUTE       Pool-Name                               1073    string
105 ATTRIBUTE       Ldap-Group                              1074    string
106 ATTRIBUTE       Module-Success-Message                  1075    string
107 ATTRIBUTE       Module-Failure-Message                  1076    string
108 #               X99-Fast                1077    integer
109 ATTRIBUTE       Rewrite-Rule                            1078    string
110 ATTRIBUTE       Sql-Group                               1079    string
111 ATTRIBUTE       Response-Packet-Type                    1080    integer virtual
112 ATTRIBUTE       Digest-HA1                              1081    string
113 ATTRIBUTE       MS-CHAP-Use-NTLM-Auth                   1082    integer
114 ATTRIBUTE       NTLM-User-Name                          1083    string
115 ATTRIBUTE       MS-CHAP-User-Name                       1083    string
116 ATTRIBUTE       Packet-Src-IP-Address                   1084    ipaddr virtual
117 ATTRIBUTE       Packet-Dst-IP-Address                   1085    ipaddr virtual
118 ATTRIBUTE       Packet-Src-Port                         1086    integer virtual
119 ATTRIBUTE       Packet-Dst-Port                         1087    integer virtual
120 ATTRIBUTE       Packet-Authentication-Vector            1088    octets virtual
121 ATTRIBUTE       Time-Of-Day                             1089    string
122 ATTRIBUTE       Request-Processing-Stage                1090    string virtual
123 ATTRIBUTE       SHA2-Password                           1092    octets
124 ATTRIBUTE       SHA-Password                            1093    octets
125 ATTRIBUTE       SSHA-Password                           1094    octets
126 ATTRIBUTE       SHA1-Password                           1093    octets
127 ATTRIBUTE       SSHA1-Password                          1094    octets
128 ATTRIBUTE       MD5-Password                            1095    octets
129 ATTRIBUTE       SMD5-Password                           1096    octets
130 ATTRIBUTE       Packet-Src-IPv6-Address                 1097    ipv6addr virtual
131 ATTRIBUTE       Packet-Dst-IPv6-Address                 1098    ipv6addr virtual
132 ATTRIBUTE       Virtual-Server                          1099    string virtual
133 ATTRIBUTE       Cleartext-Password                      1100    string
134 ATTRIBUTE       Password-With-Header                    1101    string
135 ATTRIBUTE       Inner-Tunnel-User-Name                  1102    string
136 #
137 #       EAP-IKEv2 is experimental.
138 #
139 ATTRIBUTE       EAP-IKEv2-IDType                        1103    integer
140
141 VALUE   EAP-IKEv2-IDType                IPV4_ADDR               1
142 VALUE   EAP-IKEv2-IDType                FQDN                    2
143 VALUE   EAP-IKEv2-IDType                RFC822_ADDR             3
144 VALUE   EAP-IKEv2-IDType                IPV6_ADDR               5
145 VALUE   EAP-IKEv2-IDType                DER_ASN1_DN             9
146 VALUE   EAP-IKEv2-IDType                DER_ASN1_GN             10
147 VALUE   EAP-IKEv2-IDType                KEY_ID                  11
148
149 ATTRIBUTE       EAP-IKEv2-ID                            1104    string
150 ATTRIBUTE       EAP-IKEv2-Secret                        1105    string
151 ATTRIBUTE       EAP-IKEv2-AuthType                      1106    integer
152
153 VALUE   EAP-IKEv2-AuthType              none                    0
154 VALUE   EAP-IKEv2-AuthType              secret                  1
155 VALUE   EAP-IKEv2-AuthType              cert                    2
156 VALUE   EAP-IKEv2-AuthType              both                    3
157
158 ATTRIBUTE       Send-Disconnect-Request                 1107    integer
159 ATTRIBUTE       Send-CoA-Request                        1107    integer
160
161 VALUE   Send-CoA-Request                No                      0
162 VALUE   Send-CoA-Request                Yes                     1
163
164 ATTRIBUTE       Module-Return-Code                      1108    integer virtual
165
166 VALUE   Module-Return-Code              reject                  0
167 VALUE   Module-Return-Code              fail                    1
168 VALUE   Module-Return-Code              ok                      2
169 VALUE   Module-Return-Code              handled                 3
170 VALUE   Module-Return-Code              invalid                 4
171 VALUE   Module-Return-Code              userlock                5
172 VALUE   Module-Return-Code              notfound                6
173 VALUE   Module-Return-Code              noop                    7
174 VALUE   Module-Return-Code              updated                 8
175
176 ATTRIBUTE       Packet-Original-Timestamp               1109    date
177 ATTRIBUTE       SQL-Table-Name                          1110    string
178 ATTRIBUTE       Home-Server-Pool                        1111    string
179
180 ATTRIBUTE       FreeRADIUS-Client-IP-Address            1120    ipaddr
181 ATTRIBUTE       FreeRADIUS-Client-IPv6-Address          1121    ipv6addr
182 # The rest of the FreeRADIUS-Client-* attributes are at 1150...
183
184 ATTRIBUTE       FreeRADIUS-Client-Require-MA            1122    integer
185
186 VALUE   FreeRADIUS-Client-Require-MA    no                      0
187 VALUE   FreeRADIUS-Client-Require-MA    yes                     1
188
189 ATTRIBUTE       FreeRADIUS-Client-Secret                1123    string
190 ATTRIBUTE       FreeRADIUS-Client-Shortname             1124    string
191 ATTRIBUTE       FreeRADIUS-Client-NAS-Type              1125    string
192 ATTRIBUTE       FreeRADIUS-Client-Virtual-Server        1126    string
193
194 # For session resumption
195 ATTRIBUTE       Allow-Session-Resumption                1127    integer
196
197 VALUE   Allow-Session-Resumption        no                      0
198 VALUE   Allow-Session-Resumption        yes                     1
199
200 ATTRIBUTE       EAP-Session-Resumed                     1128    integer
201
202 VALUE   EAP-Session-Resumed             no                      0
203 VALUE   EAP-Session-Resumed             yes                     1
204
205 #
206 #       Expose EAP keys in the reply.
207 #
208 ATTRIBUTE       EAP-MSK                                 1129    octets
209 ATTRIBUTE       EAP-EMSK                                1130    octets
210
211 #
212 #       For send/recv CoA packets (like Auth-Type, Acct-Type, etc.)
213 #
214 ATTRIBUTE       Recv-CoA-Type                           1131    integer
215 ATTRIBUTE       Send-CoA-Type                           1132    integer
216
217 ATTRIBUTE       MS-CHAP-Password                        1133    string
218 ATTRIBUTE       Packet-Transmit-Counter                 1134    integer
219 ATTRIBUTE       Cached-Session-Policy                   1135    string
220 ATTRIBUTE       MS-CHAP-New-Cleartext-Password          1136    string
221 ATTRIBUTE       MS-CHAP-New-NT-Password                 1137    octets
222
223 #       For default policies
224
225 ATTRIBUTE       Stripped-User-Domain                    1138    string
226 ATTRIBUTE       Called-Station-SSID                     1139    string
227
228 VALUE   Cache-Status-Only               no                      0
229 VALUE   Cache-Status-Only               yes                     1
230
231 VALUE   Cache-Merge                     no                      0
232 VALUE   Cache-Merge                     yes                     1
233
234 VALUE   Cache-Read-Only                 no                      0
235 VALUE   Cache-Read-Only                 yes                     1
236
237 ATTRIBUTE       OTP-Challenge                           1145    string
238 ATTRIBUTE       EAP-Session-Id                          1146    octets
239 ATTRIBUTE       Chbind-Response-Code                    1147    integer
240
241 ATTRIBUTE       Chbind-Response-Code                    1147    integer
242
243 VALUE   Chbind-Response-Code            success                 2
244 VALUE   Chbind-Response-Code            failure                 3
245
246 #
247 #  Server-side "listen type = foo"
248 #
249 ATTRIBUTE       Listen-Socket-Type                      1147    integer
250
251 VALUE   Listen-Socket-Type              none                    0
252 VALUE   Listen-Socket-Type              status                  0
253 VALUE   Listen-Socket-Type              proxy                   1
254 VALUE   Listen-Socket-Type              auth                    2
255 VALUE   Listen-Socket-Type              auth+acct               2
256 VALUE   Listen-Socket-Type              acct                    3
257 VALUE   Listen-Socket-Type              detail                  4
258 VALUE   Listen-Socket-Type              vmps                    5
259 VALUE   Listen-Socket-Type              dhcp                    6
260 VALUE   Listen-Socket-Type              control                 7
261 VALUE   Listen-Socket-Type              coa                     8
262
263 ATTRIBUTE       Acct-Input-Octets64                     1148    integer64
264 ATTRIBUTE       Acct-Output-Octets64                    1149    integer64
265
266 ATTRIBUTE       FreeRADIUS-Client-IP-Prefix             1150    ipv4prefix
267 ATTRIBUTE       FreeRADIUS-Client-IPv6-Prefix           1151    ipv6prefix
268 ATTRIBUTE       FreeRADIUS-Response-Delay               1152    integer
269 ATTRIBUTE       FreeRADIUS-Client-Src-IP-Address        1153    ipaddr
270 ATTRIBUTE       FreeRADIUS-Client-Src-IPv6-Address      1154    ipv6addr
271 ATTRIBUTE       FreeRADIUS-Response-Delay-USec          1155    integer
272
273 ATTRIBUTE       REST-HTTP-Header                        1160    string
274 ATTRIBUTE       REST-HTTP-Body                          1161    string
275
276 ATTRIBUTE       Cache-Expires                           1170    date
277 ATTRIBUTE       Cache-Created                           1171    date
278 ATTRIBUTE       Cache-TTL                               1172    signed
279 ATTRIBUTE       Cache-Status-Only                       1173    integer
280 ATTRIBUTE       Cache-Merge                             1174    integer
281 ATTRIBUTE       Cache-Entry-Hits                        1175    integer
282 ATTRIBUTE       Cache-Read-Only                         1176    integer
283
284 #
285 #       Range:  1200-1279
286 #               EAP-SIM (and other EAP type) weirdness.
287 #
288 #       For EAP-SIM, some attribute definitions for database interface
289 #
290 ATTRIBUTE       EAP-Sim-Subtype                         1200    integer
291
292 ATTRIBUTE       EAP-Sim-Rand1                           1201    octets
293 ATTRIBUTE       EAP-Sim-Rand2                           1202    octets
294 ATTRIBUTE       EAP-Sim-Rand3                           1203    octets
295
296 ATTRIBUTE       EAP-Sim-SRES1                           1204    octets
297 ATTRIBUTE       EAP-Sim-SRES2                           1205    octets
298 ATTRIBUTE       EAP-Sim-SRES3                           1206    octets
299
300 VALUE   EAP-Sim-Subtype                 Start                   10
301 VALUE   EAP-Sim-Subtype                 Challenge               11
302 VALUE   EAP-Sim-Subtype                 Notification            12
303 VALUE   EAP-Sim-Subtype                 Re-authentication       13
304
305 # this attribute is used internally by the client code.
306 ATTRIBUTE       EAP-Sim-State                           1207    integer
307
308 ATTRIBUTE       EAP-Sim-IMSI                            1208    string
309 ATTRIBUTE       EAP-Sim-HMAC                            1209    string
310 ATTRIBUTE       EAP-Sim-KEY                             1210    octets
311 ATTRIBUTE       EAP-Sim-EXTRA                           1211    octets
312
313 ATTRIBUTE       EAP-Sim-Kc1                             1212    octets
314 ATTRIBUTE       EAP-Sim-Kc2                             1213    octets
315 ATTRIBUTE       EAP-Sim-Kc3                             1214    octets
316
317 ATTRIBUTE       EAP-Sim-Ki                              1215    octets
318 ATTRIBUTE       EAP-Sim-Algo-Version                    1216    integer
319
320 #
321 #       Range:  1280 - 1535
322 #               EAP-type specific attributes
323 #
324 #               These are used mostly for radeapclient, and aren't
325 #               that useful for anyone else.
326 #
327 #  egrep VALUE dictionary.freeradius.internal  | grep EAP-Type | awk '{print "ATTRIBUTE EAP-Type-" $3 " " 1280+$4 " octets"}' > foo;./format.pl foo
328 #
329 ATTRIBUTE       EAP-Type-Base                           1280    octets
330 ATTRIBUTE       EAP-Type-VALUE                          1280    octets
331 ATTRIBUTE       EAP-Type-None                           1280    octets
332 ATTRIBUTE       EAP-Type-Identity                       1281    octets
333 ATTRIBUTE       EAP-Type-Notification                   1282    octets
334 ATTRIBUTE       EAP-Type-NAK                            1283    octets
335 ATTRIBUTE       EAP-Type-MD5-Challenge                  1284    octets
336 ATTRIBUTE       EAP-Type-One-Time-Password              1285    octets
337 ATTRIBUTE       EAP-Type-Generic-Token-Card             1286    octets
338 ATTRIBUTE       EAP-Type-RSA-Public-Key                 1289    octets
339 ATTRIBUTE       EAP-Type-DSS-Unilateral                 1290    octets
340 ATTRIBUTE       EAP-Type-KEA                            1291    octets
341 ATTRIBUTE       EAP-Type-KEA-Validate                   1292    octets
342 ATTRIBUTE       EAP-Type-EAP-TLS                        1293    octets
343 ATTRIBUTE       EAP-Type-Defender-Token                 1294    octets
344 ATTRIBUTE       EAP-Type-RSA-SecurID-EAP                1295    octets
345 ATTRIBUTE       EAP-Type-Arcot-Systems-EAP              1296    octets
346 ATTRIBUTE       EAP-Type-Cisco-LEAP                     1297    octets
347 ATTRIBUTE       EAP-Type-Nokia-IP-Smart-Card            1298    octets
348 ATTRIBUTE       EAP-Type-SIM                            1298    octets
349 ATTRIBUTE       EAP-Type-SRP-SHA1                       1299    octets
350 ATTRIBUTE       EAP-Type-EAP-TTLS                       1301    octets
351 ATTRIBUTE       EAP-Type-Remote-Access-Service          1302    octets
352 ATTRIBUTE       EAP-Type-AKA                            1303    octets
353 ATTRIBUTE       EAP-Type-EAP-3Com-Wireless              1304    octets
354 ATTRIBUTE       EAP-Type-PEAP                           1305    octets
355 ATTRIBUTE       EAP-Type-MS-EAP-Authentication          1306    octets
356 ATTRIBUTE       EAP-Type-MAKE                           1307    octets
357 ATTRIBUTE       EAP-Type-CRYPTOCard                     1308    octets
358 ATTRIBUTE       EAP-Type-EAP-MSCHAP-V2                  1309    octets
359 ATTRIBUTE       EAP-Type-DynamID                        1310    octets
360 ATTRIBUTE       EAP-Type-Rob-EAP                        1311    octets
361 ATTRIBUTE       EAP-Type-SecurID-EAP                    1312    octets
362 ATTRIBUTE       EAP-Type-MS-Authentication-TLV          1313    octets
363 ATTRIBUTE       EAP-Type-SentriNET                      1314    octets
364 ATTRIBUTE       EAP-Type-EAP-Actiontec-Wireless         1315    octets
365 ATTRIBUTE       EAP-Type-Cogent-Biomentric-EAP          1316    octets
366 ATTRIBUTE       EAP-Type-AirFortress-EAP                1317    octets
367 ATTRIBUTE       EAP-Type-EAP-HTTP-Digest                1318    octets
368 ATTRIBUTE       EAP-Type-SecuriSuite-EAP                1319    octets
369 ATTRIBUTE       EAP-Type-DeviceConnect-EAP              1320    octets
370 ATTRIBUTE       EAP-Type-EAP-SPEKE                      1321    octets
371 ATTRIBUTE       EAP-Type-EAP-MOBAC                      1322    octets
372 ATTRIBUTE       EAP-Type-EAP-FAST                       1323    octets
373 ATTRIBUTE       EAP-Type-Zonelabs                       1324    octets
374 ATTRIBUTE       EAP-Type-EAP-Link                       1325    octets
375 ATTRIBUTE       EAP-Type-EAP-PAX                        1326    octets
376 ATTRIBUTE       EAP-Type-EAP-PSK                        1327    octets
377 ATTRIBUTE       EAP-Type-EAP-SAKE                       1328    octets
378 ATTRIBUTE       EAP-Type-EAP-IKEv2                      1329    octets
379 ATTRIBUTE       EAP-Type-EAP-AKA2                       1330    octets
380 ATTRIBUTE       EAP-Type-EAP-GPSK                       1331    octets
381 ATTRIBUTE       EAP-Type-EAP-PWD                        1332    octets
382 ATTRIBUTE       EAP-Type-EAP-EVEv1                      1333    octets
383
384 ATTRIBUTE       EAP-Type-Microsoft-MS-CHAPv2            1306    octets
385 ATTRIBUTE       EAP-Type-Cisco-MS-CHAPv2                1309    octets
386 ATTRIBUTE       EAP-Type-MS-CHAP-V2                     1306    octets
387
388 #
389 #       Range:  1536 - 1791
390 #               EAP Sim sub-types.
391 #
392
393 # these are PW_EAP_SIM_X + 1536
394 ATTRIBUTE       EAP_Sim-Base                            1536    octets
395 ATTRIBUTE       EAP-Sim-RAND                            1537    octets
396 ATTRIBUTE       EAP-Sim-PADDING                         1542    octets
397 ATTRIBUTE       EAP-Sim-NONCE_MT                        1543    octets
398 ATTRIBUTE       EAP-Sim-PERMANENT_ID_REQ                1546    octets
399 ATTRIBUTE       EAP-Sim-MAC                             1547    octets
400 ATTRIBUTE       EAP-Sim-NOTIFICATION                    1548    octets
401 ATTRIBUTE       EAP-Sim-ANY_ID_REQ                      1549    octets
402 ATTRIBUTE       EAP-Sim-IDENTITY                        1550    octets
403 ATTRIBUTE       EAP-Sim-VERSION_LIST                    1551    octets
404 ATTRIBUTE       EAP-Sim-SELECTED_VERSION                1552    octets
405 ATTRIBUTE       EAP-Sim-FULLAUTH_ID_REQ                 1553    octets
406 ATTRIBUTE       EAP-Sim-COUNTER                         1555    octets
407 ATTRIBUTE       EAP-Sim-COUNTER_TOO_SMALL               1556    octets
408 ATTRIBUTE       EAP-Sim-NONCE_S                         1557    octets
409 ATTRIBUTE       EAP-Sim-IV                              1665    octets
410 ATTRIBUTE       EAP-Sim-ENCR_DATA                       1666    octets
411 ATTRIBUTE       EAP-Sim-NEXT_PSEUDONUM                  1668    octets
412 ATTRIBUTE       EAP-Sim-NEXT_REAUTH_ID                  1669    octets
413 ATTRIBUTE       EAP-Sim-CHECKCODE                       1670    octets
414
415 #
416 #       Range: 1800-1899
417 #              Temporary attributes, for local storage.
418 #
419 ATTRIBUTE       Tmp-String-0                            1800    string
420 ATTRIBUTE       Tmp-String-1                            1801    string
421 ATTRIBUTE       Tmp-String-2                            1802    string
422 ATTRIBUTE       Tmp-String-3                            1803    string
423 ATTRIBUTE       Tmp-String-4                            1804    string
424 ATTRIBUTE       Tmp-String-5                            1805    string
425 ATTRIBUTE       Tmp-String-6                            1806    string
426 ATTRIBUTE       Tmp-String-7                            1807    string
427 ATTRIBUTE       Tmp-String-8                            1808    string
428 ATTRIBUTE       Tmp-String-9                            1809    string
429
430 ATTRIBUTE       Tmp-Integer-0                           1810    integer
431 ATTRIBUTE       Tmp-Integer-1                           1811    integer
432 ATTRIBUTE       Tmp-Integer-2                           1812    integer
433 ATTRIBUTE       Tmp-Integer-3                           1813    integer
434 ATTRIBUTE       Tmp-Integer-4                           1814    integer
435 ATTRIBUTE       Tmp-Integer-5                           1815    integer
436 ATTRIBUTE       Tmp-Integer-6                           1816    integer
437 ATTRIBUTE       Tmp-Integer-7                           1817    integer
438 ATTRIBUTE       Tmp-Integer-8                           1818    integer
439 ATTRIBUTE       Tmp-Integer-9                           1819    integer
440
441 ATTRIBUTE       Tmp-IP-Address-0                        1820    ipaddr
442 ATTRIBUTE       Tmp-IP-Address-1                        1821    ipaddr
443 ATTRIBUTE       Tmp-IP-Address-2                        1822    ipaddr
444 ATTRIBUTE       Tmp-IP-Address-3                        1823    ipaddr
445 ATTRIBUTE       Tmp-IP-Address-4                        1824    ipaddr
446 ATTRIBUTE       Tmp-IP-Address-5                        1825    ipaddr
447 ATTRIBUTE       Tmp-IP-Address-6                        1826    ipaddr
448 ATTRIBUTE       Tmp-IP-Address-7                        1827    ipaddr
449 ATTRIBUTE       Tmp-IP-Address-8                        1828    ipaddr
450 ATTRIBUTE       Tmp-IP-Address-9                        1829    ipaddr
451
452 ATTRIBUTE       Tmp-Octets-0                            1830    octets
453 ATTRIBUTE       Tmp-Octets-1                            1831    octets
454 ATTRIBUTE       Tmp-Octets-2                            1832    octets
455 ATTRIBUTE       Tmp-Octets-3                            1833    octets
456 ATTRIBUTE       Tmp-Octets-4                            1834    octets
457 ATTRIBUTE       Tmp-Octets-5                            1835    octets
458 ATTRIBUTE       Tmp-Octets-6                            1836    octets
459 ATTRIBUTE       Tmp-Octets-7                            1837    octets
460 ATTRIBUTE       Tmp-Octets-8                            1838    octets
461 ATTRIBUTE       Tmp-Octets-9                            1839    octets
462
463 ATTRIBUTE       Tmp-Date-0                              1840    date
464 ATTRIBUTE       Tmp-Date-1                              1841    date
465 ATTRIBUTE       Tmp-Date-2                              1842    date
466 ATTRIBUTE       Tmp-Date-3                              1843    date
467 ATTRIBUTE       Tmp-Date-4                              1844    date
468 ATTRIBUTE       Tmp-Date-5                              1845    date
469 ATTRIBUTE       Tmp-Date-6                              1846    date
470 ATTRIBUTE       Tmp-Date-7                              1847    date
471 ATTRIBUTE       Tmp-Date-8                              1848    date
472 ATTRIBUTE       Tmp-Date-9                              1849    date
473
474 ATTRIBUTE       Tmp-Integer64-0                         1871    integer64
475 ATTRIBUTE       Tmp-Integer64-1                         1872    integer64
476 ATTRIBUTE       Tmp-Integer64-2                         1873    integer64
477 ATTRIBUTE       Tmp-Integer64-3                         1874    integer64
478 ATTRIBUTE       Tmp-Integer64-4                         1875    integer64
479 ATTRIBUTE       Tmp-Integer64-5                         1876    integer64
480 ATTRIBUTE       Tmp-Integer64-6                         1877    integer64
481 ATTRIBUTE       Tmp-Integer64-7                         1878    integer64
482 ATTRIBUTE       Tmp-Integer64-8                         1879    integer64
483 ATTRIBUTE       Tmp-Integer64-9                         1880    integer64
484 #
485 #  These attributes shouldn't be used anywhere.  They are defined here
486 #  only for casting of values in conditional expressions.
487 #
488 #  The order and number need to be consistent with the typedefs used
489 #  in the server source.
490 #
491 ATTRIBUTE       Tmp-Cast-String                         1851    string
492 ATTRIBUTE       Tmp-Cast-Integer                        1852    integer
493 ATTRIBUTE       Tmp-Cast-Ipaddr                         1853    ipaddr
494 ATTRIBUTE       Tmp-Cast-Date                           1854    date
495 ATTRIBUTE       Tmp-Cast-Abinary                        1855    abinary
496 ATTRIBUTE       Tmp-Cast-Octets                         1856    octets
497 ATTRIBUTE       Tmp-Cast-Ifid                           1857    ifid
498 ATTRIBUTE       Tmp-Cast-IPv6Addr                       1858    ipv6addr
499 ATTRIBUTE       Tmp-Cast-IPv6Prefix                     1859    ipv6prefix
500 ATTRIBUTE       Tmp-Cast-Byte                           1860    byte
501 ATTRIBUTE       Tmp-Cast-Short                          1861    short
502 ATTRIBUTE       Tmp-Cast-Ethernet                       1862    ether
503 ATTRIBUTE       Tmp-Cast-Signed                         1863    signed
504 # don't use or define these
505 ATTRIBUTE       Tmp-Cast-Integer64                      1869    integer64
506 ATTRIBUTE       Tmp-Cast-IPv4Prefix                     1870    ipv4prefix
507 # don't use or define VSA or MAX
508
509 #       Range:  1900-1909
510 #       WiMAX server-side attributes.
511 #
512 #       These are NOT sent in a packet, but are otherwise
513 #       available for testing and validation.  The various
514 #       things that *are* sent in a packet are derived from
515 #       these attributes.
516 #
517 ATTRIBUTE       WiMAX-MN-NAI                            1900    string
518
519 ATTRIBUTE       TLS-Cert-Serial                         1910    string
520 ATTRIBUTE       TLS-Cert-Expiration                     1911    string
521 ATTRIBUTE       TLS-Cert-Issuer                         1912    string
522 ATTRIBUTE       TLS-Cert-Subject                        1913    string
523 ATTRIBUTE       TLS-Cert-Common-Name                    1914    string
524 ATTRIBUTE       TLS-Cert-Subject-Alt-Name-Email         1915    string
525 ATTRIBUTE       TLS-Cert-Subject-Alt-Name-Dns           1916    string
526 ATTRIBUTE       TLS-Cert-Subject-Alt-Name-Upn           1917    string
527 # 1918 - 1919: reserved for future cert attributes
528 ATTRIBUTE       TLS-Client-Cert-Serial                  1920    string
529 ATTRIBUTE       TLS-Client-Cert-Expiration              1921    string
530 ATTRIBUTE       TLS-Client-Cert-Issuer                  1922    string
531 ATTRIBUTE       TLS-Client-Cert-Subject                 1923    string
532 ATTRIBUTE       TLS-Client-Cert-Common-Name             1924    string
533 ATTRIBUTE       TLS-Client-Cert-Filename                1925    string
534 ATTRIBUTE       TLS-Client-Cert-Subject-Alt-Name-Email  1926    string
535 ATTRIBUTE       TLS-Client-Cert-X509v3-Extended-Key-Usage 1927  string
536 ATTRIBUTE       TLS-Client-Cert-X509v3-Subject-Key-Identifier 1928      string
537 ATTRIBUTE       TLS-Client-Cert-X509v3-Authority-Key-Identifier 1929    string
538 ATTRIBUTE       TLS-Client-Cert-X509v3-Basic-Constraints 1930   string
539 ATTRIBUTE       TLS-Client-Cert-Subject-Alt-Name-Dns    1931    string
540 ATTRIBUTE       TLS-Client-Cert-Subject-Alt-Name-Upn    1932    string
541 ATTRIBUTE       TLS-PSK-Identity                        1933    string
542
543 # 1934 - 1939: reserved for future cert attributes
544
545 #
546 #       Range:  1940-2099
547 #               Free
548 #
549 #       Range:  2100-2199
550 #       SoH attributes; FIXME: these should really be protocol attributes
551 #       so that the SoH radius request can be proxied, but from which
552 #       vendor? Sigh...
553 #
554 ATTRIBUTE       SoH-MS-Machine-OS-vendor                2100    integer
555 VALUE   SoH-MS-Machine-OS-vendor        Microsoft               311
556
557 ATTRIBUTE       SoH-MS-Machine-OS-version               2101    integer
558 ATTRIBUTE       SoH-MS-Machine-OS-release               2102    integer
559 ATTRIBUTE       SoH-MS-Machine-OS-build                 2103    integer
560 ATTRIBUTE       SoH-MS-Machine-SP-version               2104    integer
561 ATTRIBUTE       SoH-MS-Machine-SP-release               2105    integer
562
563 ATTRIBUTE       SoH-MS-Machine-Processor                2106    integer
564 VALUE   SoH-MS-Machine-Processor        x86                     0
565 VALUE   SoH-MS-Machine-Processor        i64                     6
566 VALUE   SoH-MS-Machine-Processor        x86_64                  9
567
568 ATTRIBUTE       SoH-MS-Machine-Name                     2107    string
569 ATTRIBUTE       SoH-MS-Correlation-Id                   2108    octets
570 ATTRIBUTE       SoH-MS-Machine-Role                     2109    integer
571 VALUE   SoH-MS-Machine-Role             client                  1
572 VALUE   SoH-MS-Machine-Role             dc                      2
573 VALUE   SoH-MS-Machine-Role             server                  3
574
575 ATTRIBUTE       SoH-Supported                           2119    integer
576 VALUE   SoH-Supported                   no                      0
577 VALUE   SoH-Supported                   yes                     1
578
579 ATTRIBUTE       SoH-MS-Windows-Health-Status            2120    string
580 ATTRIBUTE       SoH-MS-Health-Other                     2129    string
581
582 #
583 #       Range:  2200-2219
584 #               Utilities bundled with the server
585 #
586 ATTRIBUTE       Radclient-Test-Name                     2200    string
587
588 #
589 #       Range:  2220-2999
590 #               Free
591 #
592 #       Range:  3000-3999
593 #               Site-local attributes (see raddb/dictionary.in)
594 #               Do NOT define attributes in this range!
595 #
596 #       Range:  4000-65535
597 #               Unused
598 #
599 #       Range:  65536-
600 #               Invalid.  Don't use.
601 #
602
603 #
604 #       Non-Protocol Integer Translations
605 #
606
607 VALUE   Auth-Type                       Local                   0
608 VALUE   Auth-Type                       System                  1
609 VALUE   Auth-Type                       SecurID                 2
610 VALUE   Auth-Type                       Crypt-Local             3
611 VALUE   Auth-Type                       Reject                  4
612 VALUE   Auth-Type                       ActivCard               5
613 VALUE   Auth-Type                       EAP                     6
614 VALUE   Auth-Type                       ARAP                    7
615
616 #
617 #       FreeRADIUS extensions (most originally from Cistron)
618 #
619 VALUE   Auth-Type                       Accept                  254
620
621 VALUE   Auth-Type                       PAP                     1024
622 VALUE   Auth-Type                       CHAP                    1025
623 # 1026 was LDAP, but we deleted it.  Adding it back will break the
624 # ldap module.
625 VALUE   Auth-Type                       PAM                     1027
626 VALUE   Auth-Type                       MS-CHAP                 1028
627 VALUE   Auth-Type                       MSCHAP                  1028
628 VALUE   Auth-Type                       Kerberos                1029
629 VALUE   Auth-Type                       CRAM                    1030
630 VALUE   Auth-Type                       NS-MTA-MD5              1031
631 # 1032 is unused (was a duplicate of CRAM)
632 VALUE   Auth-Type                       SMB                     1033
633 VALUE   Auth-Type                       MS-CHAP-V2              1034
634
635 #
636 #       Authorization type, too.
637 #
638 VALUE   Autz-Type                       Local                   0
639
640 #
641 #       And accounting
642 #
643 VALUE   Acct-Type                       Local                   0
644
645 #
646 #       And Session handling
647 #
648 VALUE   Session-Type                    Local                   0
649
650 #
651 #       And Post-Auth
652 VALUE   Post-Auth-Type                  Local                   0
653 VALUE   Post-Auth-Type                  Reject                  1
654
655 #
656 #       Experimental Non-Protocol Integer Translations for FreeRADIUS
657 #
658 VALUE   Fall-Through                    No                      0
659 VALUE   Fall-Through                    Yes                     1
660
661 VALUE   Relax-Filter                    No                      0
662 VALUE   Relax-Filter                    Yes                     1
663
664 VALUE   Strip-User-Name                 No                      0
665 VALUE   Strip-User-Name                 Yes                     1
666
667 VALUE   Packet-Type                     Access-Request          1
668 VALUE   Packet-Type                     Access-Accept           2
669 VALUE   Packet-Type                     Access-Reject           3
670 VALUE   Packet-Type                     Accounting-Request      4
671 VALUE   Packet-Type                     Accounting-Response     5
672 VALUE   Packet-Type                     Accounting-Status       6
673 VALUE   Packet-Type                     Password-Request        7
674 VALUE   Packet-Type                     Password-Accept         8
675 VALUE   Packet-Type                     Password-Reject         9
676 VALUE   Packet-Type                     Accounting-Message      10
677 VALUE   Packet-Type                     Access-Challenge        11
678 VALUE   Packet-Type                     Status-Server           12
679 VALUE   Packet-Type                     Status-Client           13
680
681 #
682 #       The following packet types are described in RFC 2882,
683 #       but they are NOT part of the RADIUS standard.  Instead,
684 #       they are informational about vendor-specific extensions
685 #       to the RADIUS standard.
686 #
687 VALUE   Packet-Type                     Resource-Free-Request   21
688 VALUE   Packet-Type                     Resource-Free-Response  22
689 VALUE   Packet-Type                     Resource-Query-Request  23
690 VALUE   Packet-Type                     Resource-Query-Response 24
691 VALUE   Packet-Type                     Alternate-Resource-Reclaim-Request 25
692 VALUE   Packet-Type                     NAS-Reboot-Request      26
693 VALUE   Packet-Type                     NAS-Reboot-Response     27
694 VALUE   Packet-Type                     Next-Passcode           29
695 VALUE   Packet-Type                     New-Pin                 30
696 VALUE   Packet-Type                     Terminate-Session       31
697 VALUE   Packet-Type                     Password-Expired        32
698 VALUE   Packet-Type                     Event-Request           33
699 VALUE   Packet-Type                     Event-Response          34
700
701 #       RFC 3576 allocates packet types 40-45
702
703 VALUE   Packet-Type                     Disconnect-Request      40
704 VALUE   Packet-Type                     Disconnect-ACK          41
705 VALUE   Packet-Type                     Disconnect-NAK          42
706 VALUE   Packet-Type                     CoA-Request             43
707 VALUE   Packet-Type                     CoA-ACK                 44
708 VALUE   Packet-Type                     CoA-NAK                 45
709
710 VALUE   Packet-Type                     IP-Address-Allocate     50
711 VALUE   Packet-Type                     IP-Address-Release      51
712
713 VALUE   Response-Packet-Type            Access-Request          1
714 VALUE   Response-Packet-Type            Access-Accept           2
715 VALUE   Response-Packet-Type            Access-Reject           3
716 VALUE   Response-Packet-Type            Accounting-Request      4
717 VALUE   Response-Packet-Type            Accounting-Response     5
718 VALUE   Response-Packet-Type            Accounting-Status       6
719 VALUE   Response-Packet-Type            Password-Request        7
720 VALUE   Response-Packet-Type            Password-Accept         8
721 VALUE   Response-Packet-Type            Password-Reject         9
722 VALUE   Response-Packet-Type            Accounting-Message      10
723 VALUE   Response-Packet-Type            Access-Challenge        11
724 VALUE   Response-Packet-Type            Status-Server           12
725 VALUE   Response-Packet-Type            Status-Client           13
726
727 VALUE   Response-Packet-Type            Disconnect-Request      40
728 VALUE   Response-Packet-Type            Disconnect-ACK          41
729 VALUE   Response-Packet-Type            Disconnect-NAK          42
730 VALUE   Response-Packet-Type            CoA-Request             43
731 VALUE   Response-Packet-Type            CoA-ACK                 44
732 VALUE   Response-Packet-Type            CoA-NAK                 45
733 #
734 #  Special value
735 #
736 VALUE   Response-Packet-Type            Do-Not-Respond          256
737
738 #
739 #       EAP Sub-types, inside of Request and Response packets
740 #
741 #       http://www.iana.org/assignments/ppp-numbers
742 #               "PPP EAP REQUEST/RESPONSE TYPES"
743 #
744 #
745 #       See dictionary.microsoft, MS-Acct-EAP-Type for similar definitions
746 #
747 VALUE   EAP-Type                        None                    0
748 VALUE   EAP-Type                        Identity                1
749 VALUE   EAP-Type                        Notification            2
750 VALUE   EAP-Type                        NAK                     3
751 VALUE   EAP-Type                        MD5-Challenge           4
752 VALUE   EAP-Type                        MD5                     4
753 VALUE   EAP-Type                        One-Time-Password       5
754 VALUE   EAP-Type                        OTP                     5
755 VALUE   EAP-Type                        Generic-Token-Card      6
756 VALUE   EAP-Type                        GTC                     6
757 VALUE   EAP-Type                        RSA-Public-Key          9
758 VALUE   EAP-Type                        DSS-Unilateral          10
759 VALUE   EAP-Type                        KEA                     11
760 VALUE   EAP-Type                        KEA-Validate            12
761 VALUE   EAP-Type                        TLS                     13
762 VALUE   EAP-Type                        Defender-Token          14
763 VALUE   EAP-Type                        RSA-SecurID-EAP         15
764 VALUE   EAP-Type                        Arcot-Systems-EAP       16
765 VALUE   EAP-Type                        Cisco-LEAP              17
766 VALUE   EAP-Type                        LEAP                    17
767 VALUE   EAP-Type                        Nokia-IP-Smart-Card     18
768 VALUE   EAP-Type                        SIM                     18
769 VALUE   EAP-Type                        SRP-SHA1                19
770 # 20 is unassigned
771 VALUE   EAP-Type                        TTLS                    21
772 VALUE   EAP-Type                        Remote-Access-Service   22
773 VALUE   EAP-Type                        AKA                     23
774 VALUE   EAP-Type                        3Com-Wireless           24
775 VALUE   EAP-Type                        PEAP                    25
776 VALUE   EAP-Type                        Microsoft-MS-CHAPv2     26
777 VALUE   EAP-Type                        MAKE                    27
778 VALUE   EAP-Type                        CRYPTOCard              28
779 VALUE   EAP-Type                        Cisco-MS-CHAPv2         29
780 VALUE   EAP-Type                        DynamID                 30
781 VALUE   EAP-Type                        Rob-EAP                 31
782 VALUE   EAP-Type                        SecurID-EAP             32
783 VALUE   EAP-Type                        MS-Authentication-TLV   33
784 VALUE   EAP-Type                        SentriNET               34
785 VALUE   EAP-Type                        Actiontec-Wireless      35
786 VALUE   EAP-Type                        Cogent-Biomentric-EAP   36
787 VALUE   EAP-Type                        AirFortress-EAP         37
788 VALUE   EAP-Type                        HTTP-Digest             38
789 VALUE   EAP-Type                        TNC                     38
790 VALUE   EAP-Type                        SecuriSuite-EAP         39
791 VALUE   EAP-Type                        DeviceConnect-EAP       40
792 VALUE   EAP-Type                        SPEKE                   41
793 VALUE   EAP-Type                        MOBAC                   42
794 VALUE   EAP-Type                        FAST                    43
795 VALUE   EAP-Type                        Zonelabs                44
796 VALUE   EAP-Type                        Link                    45
797 VALUE   EAP-Type                        PAX                     46
798 VALUE   EAP-Type                        PSK                     47
799 VALUE   EAP-Type                        SAKE                    48
800 VALUE   EAP-Type                        IKEv2                   49
801 VALUE   EAP-Type                        AKA2                    50
802 VALUE   EAP-Type                        GPSK                    51
803 VALUE   EAP-Type                        PWD                     52
804 VALUE   EAP-Type                        EVEv1                   53
805
806 #
807 #       And this is what most people mean by MS-CHAPv2
808 #
809 VALUE   EAP-Type                        MSCHAPv2                26
810
811 #
812 #       This says TLS, but it's only valid for TTLS & PEAP.
813 #       EAP-TLS *always* requires a client certificate.
814 #
815 VALUE   EAP-TLS-Require-Client-Cert     No                      0
816 VALUE   EAP-TLS-Require-Client-Cert     Yes                     1
817
818 #
819 #       These are the EAP-Code values.
820 #
821 VALUE   EAP-Code                        Request                 1
822 VALUE   EAP-Code                        Response                2
823 VALUE   EAP-Code                        Success                 3
824 VALUE   EAP-Code                        Failure                 4
825
826 #
827 #  For MS-CHAP, do we run ntlm_auth, or not.
828 #
829 VALUE   MS-CHAP-Use-NTLM-Auth           No                      0
830 VALUE   MS-CHAP-Use-NTLM-Auth           Yes                     1