2 # Updated 07-Nov-1998 to RFC 2138 and RFC 2139
6 # This file contains dictionary translations for parsing
7 # requests and generating responses. All transactions are
8 # composed of Attribute/Value Pairs. The value of each attribute
9 # is specified as one of 4 data types. Valid data types are:
11 # string - 0-253 octets
12 # ipaddr - 4 octets in network byte order
13 # integer - 32 bit value in big endian order (high byte first)
14 # date - 32 bit value in big endian order - seconds since
15 # 00:00:00 GMT, Jan. 1, 1970
17 # FreeRADIUS includes extended data types which are not defined
18 # in RFC 2138 or RFC 2139. These data types are:
20 # abinary - Ascend's binary filter format.
21 # octets - raw octets, printed and input as hex strings.
22 # e.g.: 0x123456789abcdef
25 # Enumerated values are stored in the user file with dictionary
26 # VALUE translations for easy administration.
31 # --------------- -----
32 # Framed-Protocol = PPP
33 # 7 = 1 (integer encoding)
37 # Include compatibility dictionary for older users file. Move this
38 # directive to the end of the file if you want to see the old names
39 # in the logfiles too.
41 $INCLUDE dictionary.compat # compability issues
42 $INCLUDE dictionary.acc
43 $INCLUDE dictionary.ascend
44 $INCLUDE dictionary.bay
45 $INCLUDE dictionary.cisco
46 $INCLUDE dictionary.livingston
47 $INCLUDE dictionary.microsoft
48 $INCLUDE dictionary.redback
49 $INCLUDE dictionary.shasta
50 $INCLUDE dictionary.shiva
51 $INCLUDE dictionary.tunnel
52 $INCLUDE dictionary.usr
53 $INCLUDE dictionary.versanet
54 $INCLUDE dictionary.erx
57 # Following are the proper new names. Use these.
59 ATTRIBUTE User-Name 1 string
60 ATTRIBUTE User-Password 2 string
61 ATTRIBUTE CHAP-Password 3 string
62 ATTRIBUTE NAS-IP-Address 4 ipaddr
63 ATTRIBUTE NAS-Port 5 integer
64 ATTRIBUTE Service-Type 6 integer
65 ATTRIBUTE Framed-Protocol 7 integer
66 ATTRIBUTE Framed-IP-Address 8 ipaddr
67 ATTRIBUTE Framed-IP-Netmask 9 ipaddr
68 ATTRIBUTE Framed-Routing 10 integer
69 ATTRIBUTE Filter-Id 11 string
70 ATTRIBUTE Framed-MTU 12 integer
71 ATTRIBUTE Framed-Compression 13 integer
72 ATTRIBUTE Login-IP-Host 14 ipaddr
73 ATTRIBUTE Login-Service 15 integer
74 ATTRIBUTE Login-TCP-Port 16 integer
75 ATTRIBUTE Reply-Message 18 string
76 ATTRIBUTE Callback-Number 19 string
77 ATTRIBUTE Callback-Id 20 string
78 ATTRIBUTE Framed-Route 22 string
79 ATTRIBUTE Framed-IPX-Network 23 ipaddr
80 ATTRIBUTE State 24 octets
81 ATTRIBUTE Class 25 octets
82 ATTRIBUTE Vendor-Specific 26 octets
83 ATTRIBUTE Session-Timeout 27 integer
84 ATTRIBUTE Idle-Timeout 28 integer
85 ATTRIBUTE Termination-Action 29 integer
86 ATTRIBUTE Called-Station-Id 30 string
87 ATTRIBUTE Calling-Station-Id 31 string
88 ATTRIBUTE NAS-Identifier 32 string
89 ATTRIBUTE Proxy-State 33 octets
90 ATTRIBUTE Login-LAT-Service 34 string
91 ATTRIBUTE Login-LAT-Node 35 string
92 ATTRIBUTE Login-LAT-Group 36 octets
93 ATTRIBUTE Framed-AppleTalk-Link 37 integer
94 ATTRIBUTE Framed-AppleTalk-Network 38 integer
95 ATTRIBUTE Framed-AppleTalk-Zone 39 string
97 ATTRIBUTE Acct-Status-Type 40 integer
98 ATTRIBUTE Acct-Delay-Time 41 integer
99 ATTRIBUTE Acct-Input-Octets 42 integer
100 ATTRIBUTE Acct-Output-Octets 43 integer
101 ATTRIBUTE Acct-Session-Id 44 string
102 ATTRIBUTE Acct-Authentic 45 integer
103 ATTRIBUTE Acct-Session-Time 46 integer
104 ATTRIBUTE Acct-Input-Packets 47 integer
105 ATTRIBUTE Acct-Output-Packets 48 integer
106 ATTRIBUTE Acct-Terminate-Cause 49 integer
107 ATTRIBUTE Acct-Multi-Session-Id 50 string
108 ATTRIBUTE Acct-Link-Count 51 integer
109 ATTRIBUTE Acct-Input-Gigawords 52 integer
110 ATTRIBUTE Acct-Output-Gigawords 53 integer
111 ATTRIBUTE Event-Timestamp 55 date
113 ATTRIBUTE CHAP-Challenge 60 string
114 ATTRIBUTE NAS-Port-Type 61 integer
115 ATTRIBUTE Port-Limit 62 integer
116 ATTRIBUTE Login-LAT-Port 63 integer
118 ATTRIBUTE Acct-Tunnel-Connection 68 string
120 ATTRIBUTE ARAP-Password 70 string
121 ATTRIBUTE ARAP-Features 71 string
122 ATTRIBUTE ARAP-Zone-Access 72 integer
123 ATTRIBUTE ARAP-Security 73 integer
124 ATTRIBUTE ARAP-Security-Data 74 string
125 ATTRIBUTE Password-Retry 75 integer
126 ATTRIBUTE Prompt 76 integer
127 ATTRIBUTE Connect-Info 77 string
128 ATTRIBUTE Configuration-Token 78 string
129 ATTRIBUTE EAP-Message 79 string
130 ATTRIBUTE Message-Authenticator 80 octets
131 ATTRIBUTE ARAP-Challenge-Response 84 string # 10 octets
132 ATTRIBUTE Acct-Interim-Interval 85 integer
133 ATTRIBUTE NAS-Port-Id 87 string
134 ATTRIBUTE Framed-Pool 88 string
138 # Experimental Non Protocol Attributes used by Cistron-Radiusd
141 # These attributes CAN go in the reply item list.
142 ATTRIBUTE Fall-Through 500 integer
143 ATTRIBUTE Exec-Program 502 string
144 ATTRIBUTE Exec-Program-Wait 503 string
146 # These attributes CANNOT go in the reply item list.
147 ATTRIBUTE User-Category 1029 string
148 ATTRIBUTE Group-Name 1030 string
149 ATTRIBUTE Huntgroup-Name 1031 string
150 ATTRIBUTE Simultaneous-Use 1034 integer
151 ATTRIBUTE Strip-User-Name 1035 integer
152 ATTRIBUTE Hint 1040 string
153 ATTRIBUTE Pam-Auth 1041 string
154 ATTRIBUTE Login-Time 1042 string
155 ATTRIBUTE Stripped-User-Name 1043 string
156 ATTRIBUTE Current-Time 1044 string
157 ATTRIBUTE Realm 1045 string
158 ATTRIBUTE No-Such-Attribute 1046 string
159 ATTRIBUTE Packet-Type 1047 integer
160 ATTRIBUTE Proxy-To-Realm 1048 string
161 ATTRIBUTE Replicate-To-Realm 1049 string
162 ATTRIBUTE Acct-Session-Start-Time 1050 date
163 ATTRIBUTE Acct-Unique-Session-Id 1051 string
164 ATTRIBUTE Client-IP-Address 1052 ipaddr
165 ATTRIBUTE Ldap-UserDn 1053 string
166 ATTRIBUTE NS-MTA-MD5-Password 1054 string
167 ATTRIBUTE SQL-User-Name 1055 string
168 ATTRIBUTE Module-Message 1056 string
169 ATTRIBUTE LM-Password 1057 octets
170 ATTRIBUTE NT-Password 1058 octets
171 ATTRIBUTE SMB-Account-CTRL 1059 integer
175 # Non-Protocol Attributes
176 # These attributes are used internally by the server
178 ATTRIBUTE Auth-Type 1000 integer
179 ATTRIBUTE Menu 1001 string
180 ATTRIBUTE Termination-Menu 1002 string
181 ATTRIBUTE Prefix 1003 string
182 ATTRIBUTE Suffix 1004 string
183 ATTRIBUTE Group 1005 string
184 ATTRIBUTE Crypt-Password 1006 string
185 ATTRIBUTE Connect-Rate 1007 integer
186 ATTRIBUTE Add-Prefix 1008 string
187 ATTRIBUTE Add-Suffix 1009 string
188 ATTRIBUTE Expiration 1010 date
191 # Integer Translations
196 VALUE Service-Type Login-User 1
197 VALUE Service-Type Framed-User 2
198 VALUE Service-Type Callback-Login-User 3
199 VALUE Service-Type Callback-Framed-User 4
200 VALUE Service-Type Outbound-User 5
201 VALUE Service-Type Administrative-User 6
202 VALUE Service-Type NAS-Prompt-User 7
203 VALUE Service-Type Authenticate-Only 8
204 VALUE Service-Type Callback-NAS-Prompt 9
205 VALUE Service-Type Call-Check 10
206 VALUE Service-Type Callback-Administrative 11
210 VALUE Framed-Protocol PPP 1
211 VALUE Framed-Protocol SLIP 2
212 VALUE Framed-Protocol ARAP 3
213 VALUE Framed-Protocol Gandalf-SLML 4
214 VALUE Framed-Protocol Xylogics-IPX-SLIP 5
215 VALUE Framed-Protocol X.75-Synchronous 6
217 # Framed Routing Values
219 VALUE Framed-Routing None 0
220 VALUE Framed-Routing Broadcast 1
221 VALUE Framed-Routing Listen 2
222 VALUE Framed-Routing Broadcast-Listen 3
224 # Framed Compression Types
226 VALUE Framed-Compression None 0
227 VALUE Framed-Compression Van-Jacobson-TCP-IP 1
228 VALUE Framed-Compression IPX-Header-Compression 2
229 VALUE Framed-Compression Stac-LZS 3
233 VALUE Login-Service Telnet 0
234 VALUE Login-Service Rlogin 1
235 VALUE Login-Service TCP-Clear 2
236 VALUE Login-Service PortMaster 3
237 VALUE Login-Service LAT 4
238 VALUE Login-Service X25-PAD 5
239 VALUE Login-Service X25-T3POS 6
240 VALUE Login-Service TCP-Clear-Quiet 7
242 # Login-TCP-Port (see /etc/services for more examples)
244 VALUE Login-TCP-Port Telnet 23
245 VALUE Login-TCP-Port Rlogin 513
246 VALUE Login-TCP-Port Rsh 514
250 VALUE Acct-Status-Type Start 1
251 VALUE Acct-Status-Type Stop 2
252 VALUE Acct-Status-Type Interim-Update 3
253 VALUE Acct-Status-Type Alive 3
254 VALUE Acct-Status-Type Accounting-On 7
255 VALUE Acct-Status-Type Accounting-Off 8
256 # RFC 2867 Additional Status-Type Values
257 VALUE Acct-Status-Type Tunnel-Start 9
258 VALUE Acct-Status-Type Tunnel-Stop 10
259 VALUE Acct-Status-Type Tunnel-Reject 11
260 VALUE Acct-Status-Type Tunnel-Link-Start 12
261 VALUE Acct-Status-Type Tunnel-Link-Stop 13
262 VALUE Acct-Status-Type Tunnel-Link-Reject 14
264 # Authentication Types
266 VALUE Acct-Authentic RADIUS 1
267 VALUE Acct-Authentic Local 2
269 # Termination Options
271 VALUE Termination-Action Default 0
272 VALUE Termination-Action RADIUS-Request 1
276 VALUE NAS-Port-Type Async 0
277 VALUE NAS-Port-Type Sync 1
278 VALUE NAS-Port-Type ISDN 2
279 VALUE NAS-Port-Type ISDN-V120 3
280 VALUE NAS-Port-Type ISDN-V110 4
281 VALUE NAS-Port-Type Virtual 5
282 VALUE NAS-Port-Type PIAFS 6
283 VALUE NAS-Port-Type HDLC-Clear-Channel 7
284 VALUE NAS-Port-Type X.25 8
285 VALUE NAS-Port-Type X.75 9
286 VALUE NAS-Port-Type G.3-Fax 10
287 VALUE NAS-Port-Type SDSL 11
288 VALUE NAS-Port-Type ADSL-CAP 12
289 VALUE NAS-Port-Type ADSL-DMT 13
290 VALUE NAS-Port-Type IDSL 14
291 VALUE NAS-Port-Type Ethernet 15
292 VALUE NAS-Port-Type xDSL 16
293 VALUE NAS-Port-Type Cable 17
294 VALUE NAS-Port-Type Wireless-Other 18
295 VALUE NAS-Port-Type Wireless-802.11 19
297 # Acct Terminate Causes, available in 3.3.2 and later
299 VALUE Acct-Terminate-Cause User-Request 1
300 VALUE Acct-Terminate-Cause Lost-Carrier 2
301 VALUE Acct-Terminate-Cause Lost-Service 3
302 VALUE Acct-Terminate-Cause Idle-Timeout 4
303 VALUE Acct-Terminate-Cause Session-Timeout 5
304 VALUE Acct-Terminate-Cause Admin-Reset 6
305 VALUE Acct-Terminate-Cause Admin-Reboot 7
306 VALUE Acct-Terminate-Cause Port-Error 8
307 VALUE Acct-Terminate-Cause NAS-Error 9
308 VALUE Acct-Terminate-Cause NAS-Request 10
309 VALUE Acct-Terminate-Cause NAS-Reboot 11
310 VALUE Acct-Terminate-Cause Port-Unneeded 12
311 VALUE Acct-Terminate-Cause Port-Preempted 13
312 VALUE Acct-Terminate-Cause Port-Suspended 14
313 VALUE Acct-Terminate-Cause Service-Unavailable 15
314 VALUE Acct-Terminate-Cause Callback 16
315 VALUE Acct-Terminate-Cause User-Error 17
316 VALUE Acct-Terminate-Cause Host-Request 18
318 #VALUE Tunnel-Type L2TP 3
319 #VALUE Tunnel-Medium-Type IP 1
321 VALUE Prompt No-Echo 0
325 # Non-Protocol Integer Translations
328 VALUE Auth-Type Local 0
329 VALUE Auth-Type System 1
330 VALUE Auth-Type SecurID 2
331 VALUE Auth-Type Crypt-Local 3
332 VALUE Auth-Type Reject 4
333 VALUE Auth-Type ActivCard 5
338 VALUE Auth-Type EAP 6
339 VALUE Auth-Type ARAP 7
340 VALUE Auth-Type Ldap 252
341 VALUE Auth-Type Pam 253
342 VALUE Auth-Type Accept 254
345 # Experimental Non-Protocol Integer Translations for Cistron-Radiusd
347 VALUE Fall-Through No 0
348 VALUE Fall-Through Yes 1
350 VALUE Packet-Type Access-Request 1
351 VALUE Packet-Type Access-Accept 2
352 VALUE Packet-Type Access-Reject 3
353 VALUE Packet-Type Accounting-Request 4
354 VALUE Packet-Type Accounting-Response 5
355 VALUE Packet-Type Accounting-Status 6
356 VALUE Packet-Type Password-Request 7
357 VALUE Packet-Type Password-Accept 8
358 VALUE Packet-Type Password-Reject 9
359 VALUE Packet-Type Accounting-Message 10
360 VALUE Packet-Type Access-Challenge 11
361 VALUE Packet-Type Status-Server 12
362 VALUE Packet-Type Status-Client 13