4 # This file contains dictionary translations for parsing
5 # requests and generating responses. All transactions are
6 # composed of Attribute/Value Pairs. The value of each attribute
7 # is specified as one of 4 data types. Valid data types are:
9 # string - 0-253 octets
10 # ipaddr - 4 octets in network byte order
11 # integer - 32 bit value in big endian order (high byte first)
12 # date - 32 bit value in big endian order - seconds since
13 # 00:00:00 GMT, Jan. 1, 1970
15 # FreeRADIUS includes extended data types which are not defined
16 # in RFC 2865 or RFC 2866. These data types are:
18 # abinary - Ascend's binary filter format.
19 # octets - raw octets, printed and input as hex strings.
20 # e.g.: 0x123456789abcdef
23 # Enumerated values are stored in the user file with dictionary
24 # VALUE translations for easy administration.
29 # --------------- -----
30 # Framed-Protocol = PPP
31 # 7 = 1 (integer encoding)
35 # Include compatibility dictionary for older users file. Move this
36 # directive to the end of the file if you want to see the old names
37 # in the logfiles too.
39 $INCLUDE dictionary.compat # compability issues
40 $INCLUDE dictionary.acc
41 $INCLUDE dictionary.alcatel
42 $INCLUDE dictionary.alteon
43 $INCLUDE dictionary.ascend
44 $INCLUDE dictionary.bay
45 $INCLUDE dictionary.bintec
46 $INCLUDE dictionary.cabletron
47 $INCLUDE dictionary.cisco
49 # This is the same as the altiga dictionary.
51 #$INCLUDE dictionary.cisco.vpn3000
52 $INCLUDE dictionary.cisco.vpn5000
53 $INCLUDE dictionary.cisco.bbsm
54 $INCLUDE dictionary.colubris
55 $INCLUDE dictionary.erx
56 $INCLUDE dictionary.extreme
57 $INCLUDE dictionary.freeradius
58 $INCLUDE dictionary.itk
59 $INCLUDE dictionary.juniper
60 $INCLUDE dictionary.livingston
61 $INCLUDE dictionary.microsoft
62 $INCLUDE dictionary.nomadix
63 $INCLUDE dictionary.quintum
64 $INCLUDE dictionary.redback
65 $INCLUDE dictionary.redcreek
66 $INCLUDE dictionary.shasta
67 $INCLUDE dictionary.shiva
68 $INCLUDE dictionary.springtide
69 $INCLUDE dictionary.telebit
70 $INCLUDE dictionary.tunnel
71 $INCLUDE dictionary.usr
72 $INCLUDE dictionary.versanet
73 $INCLUDE dictionary.xedia
76 # Following are the proper new names. Use these.
78 # http://www.iana.org/assignments/radius-types
80 ATTRIBUTE User-Name 1 string
81 ATTRIBUTE User-Password 2 string encrypt=1
82 ATTRIBUTE CHAP-Password 3 octets
83 ATTRIBUTE NAS-IP-Address 4 ipaddr
84 ATTRIBUTE NAS-Port 5 integer
85 ATTRIBUTE Service-Type 6 integer
86 ATTRIBUTE Framed-Protocol 7 integer
87 ATTRIBUTE Framed-IP-Address 8 ipaddr
88 ATTRIBUTE Framed-IP-Netmask 9 ipaddr
89 ATTRIBUTE Framed-Routing 10 integer
90 ATTRIBUTE Filter-Id 11 string
91 ATTRIBUTE Framed-MTU 12 integer
92 ATTRIBUTE Framed-Compression 13 integer
93 ATTRIBUTE Login-IP-Host 14 ipaddr
94 ATTRIBUTE Login-Service 15 integer
95 ATTRIBUTE Login-TCP-Port 16 integer
96 ATTRIBUTE Reply-Message 18 string
97 ATTRIBUTE Callback-Number 19 string
98 ATTRIBUTE Callback-Id 20 string
99 ATTRIBUTE Framed-Route 22 string
100 ATTRIBUTE Framed-IPX-Network 23 ipaddr
101 ATTRIBUTE State 24 octets
102 ATTRIBUTE Class 25 octets
103 ATTRIBUTE Vendor-Specific 26 octets
104 ATTRIBUTE Session-Timeout 27 integer
105 ATTRIBUTE Idle-Timeout 28 integer
106 ATTRIBUTE Termination-Action 29 integer
107 ATTRIBUTE Called-Station-Id 30 string
108 ATTRIBUTE Calling-Station-Id 31 string
109 ATTRIBUTE NAS-Identifier 32 string
110 ATTRIBUTE Proxy-State 33 octets
111 ATTRIBUTE Login-LAT-Service 34 string
112 ATTRIBUTE Login-LAT-Node 35 string
113 ATTRIBUTE Login-LAT-Group 36 octets
114 ATTRIBUTE Framed-AppleTalk-Link 37 integer
115 ATTRIBUTE Framed-AppleTalk-Network 38 integer
116 ATTRIBUTE Framed-AppleTalk-Zone 39 string
118 ATTRIBUTE Acct-Status-Type 40 integer
119 ATTRIBUTE Acct-Delay-Time 41 integer
120 ATTRIBUTE Acct-Input-Octets 42 integer
121 ATTRIBUTE Acct-Output-Octets 43 integer
122 ATTRIBUTE Acct-Session-Id 44 string
123 ATTRIBUTE Acct-Authentic 45 integer
124 ATTRIBUTE Acct-Session-Time 46 integer
125 ATTRIBUTE Acct-Input-Packets 47 integer
126 ATTRIBUTE Acct-Output-Packets 48 integer
127 ATTRIBUTE Acct-Terminate-Cause 49 integer
128 ATTRIBUTE Acct-Multi-Session-Id 50 string
129 ATTRIBUTE Acct-Link-Count 51 integer
130 ATTRIBUTE Acct-Input-Gigawords 52 integer
131 ATTRIBUTE Acct-Output-Gigawords 53 integer
132 ATTRIBUTE Event-Timestamp 55 date
134 ATTRIBUTE CHAP-Challenge 60 string
135 ATTRIBUTE NAS-Port-Type 61 integer
136 ATTRIBUTE Port-Limit 62 integer
137 ATTRIBUTE Login-LAT-Port 63 integer
139 ATTRIBUTE Acct-Tunnel-Connection 68 string
141 ATTRIBUTE ARAP-Password 70 string
142 ATTRIBUTE ARAP-Features 71 string
143 ATTRIBUTE ARAP-Zone-Access 72 integer
144 ATTRIBUTE ARAP-Security 73 integer
145 ATTRIBUTE ARAP-Security-Data 74 string
146 ATTRIBUTE Password-Retry 75 integer
147 ATTRIBUTE Prompt 76 integer
148 ATTRIBUTE Connect-Info 77 string
149 ATTRIBUTE Configuration-Token 78 string
150 ATTRIBUTE EAP-Message 79 octets
151 ATTRIBUTE Message-Authenticator 80 octets
152 ATTRIBUTE ARAP-Challenge-Response 84 string # 10 octets
153 ATTRIBUTE Acct-Interim-Interval 85 integer
154 ATTRIBUTE NAS-Port-Id 87 string
155 ATTRIBUTE Framed-Pool 88 string
156 ATTRIBUTE NAS-IPv6-Address 95 octets # really IPv6
157 ATTRIBUTE Framed-Interface-Id 96 octets # 8 octets
158 ATTRIBUTE Framed-IPv6-Prefix 97 octets # stupid format
159 ATTRIBUTE Login-IPv6-Host 98 octets # really IPv6
160 ATTRIBUTE Framed-IPv6-Route 99 string
161 ATTRIBUTE Framed-IPv6-Pool 100 string
163 ATTRIBUTE Digest-Response 206 string
164 ATTRIBUTE Digest-Attributes 207 octets # stupid format
167 # Experimental Non Protocol Attributes used by Cistron-Radiusd
170 # These attributes CAN go in the reply item list.
171 ATTRIBUTE Fall-Through 500 integer
172 ATTRIBUTE Exec-Program 502 string
173 ATTRIBUTE Exec-Program-Wait 503 string
175 # These attributes CANNOT go in the reply item list.
176 ATTRIBUTE User-Category 1029 string
177 ATTRIBUTE Group-Name 1030 string
178 ATTRIBUTE Huntgroup-Name 1031 string
179 ATTRIBUTE Simultaneous-Use 1034 integer
180 ATTRIBUTE Strip-User-Name 1035 integer
181 ATTRIBUTE Hint 1040 string
182 ATTRIBUTE Pam-Auth 1041 string
183 ATTRIBUTE Login-Time 1042 string
184 ATTRIBUTE Stripped-User-Name 1043 string
185 ATTRIBUTE Current-Time 1044 string
186 ATTRIBUTE Realm 1045 string
187 ATTRIBUTE No-Such-Attribute 1046 string
188 ATTRIBUTE Packet-Type 1047 integer
189 ATTRIBUTE Proxy-To-Realm 1048 string
190 ATTRIBUTE Replicate-To-Realm 1049 string
191 ATTRIBUTE Acct-Session-Start-Time 1050 date
192 ATTRIBUTE Acct-Unique-Session-Id 1051 string
193 ATTRIBUTE Client-IP-Address 1052 ipaddr
194 ATTRIBUTE Ldap-UserDn 1053 string
195 ATTRIBUTE NS-MTA-MD5-Password 1054 string
196 ATTRIBUTE SQL-User-Name 1055 string
197 ATTRIBUTE LM-Password 1057 octets
198 ATTRIBUTE NT-Password 1058 octets
199 ATTRIBUTE SMB-Account-CTRL 1059 integer
200 ATTRIBUTE SMB-Account-CTRL-TEXT 1061 string
201 ATTRIBUTE User-Profile 1062 string
202 ATTRIBUTE Digest-Realm 1063 string
203 ATTRIBUTE Digest-Nonce 1064 string
204 ATTRIBUTE Digest-Method 1065 string
205 ATTRIBUTE Digest-URI 1066 string
206 ATTRIBUTE Digest-QOP 1067 string
207 ATTRIBUTE Digest-Algorithm 1068 string
208 ATTRIBUTE Digest-Body-Digest 1069 string
209 ATTRIBUTE Digest-CNonce 1070 string
210 ATTRIBUTE Digest-Nonce-Count 1071 string
211 ATTRIBUTE Digest-User-Name 1072 string
212 ATTRIBUTE Pool-Name 1073 string
213 ATTRIBUTE Ldap-Group 1074 string
214 ATTRIBUTE Module-Success-Message 1075 string
215 ATTRIBUTE Module-Failure-Message 1076 string
216 # X99-Fast 1077 integer
217 ATTRIBUTE Rewrite-Rule 1078 string
218 ATTRIBUTE Sql-Group 1079 string
219 ATTRIBUTE Response-Packet-Type 1080 integer
222 # Non-Protocol Attributes
223 # These attributes are used internally by the server
225 ATTRIBUTE Auth-Type 1000 integer
226 ATTRIBUTE Menu 1001 string
227 ATTRIBUTE Termination-Menu 1002 string
228 ATTRIBUTE Prefix 1003 string
229 ATTRIBUTE Suffix 1004 string
230 ATTRIBUTE Group 1005 string
231 ATTRIBUTE Crypt-Password 1006 string
232 ATTRIBUTE Connect-Rate 1007 integer
233 ATTRIBUTE Add-Prefix 1008 string
234 ATTRIBUTE Add-Suffix 1009 string
235 ATTRIBUTE Expiration 1010 date
236 ATTRIBUTE Autz-Type 1011 integer
237 ATTRIBUTE Acct-Type 1012 integer
238 ATTRIBUTE Session-Type 1013 integer
239 ATTRIBUTE Post-Auth-Type 1014 integer
240 ATTRIBUTE Pre-Proxy-Type 1015 integer
241 ATTRIBUTE Post-Proxy-Type 1016 integer
242 ATTRIBUTE Pre-Acct-Type 1017 integer
245 # Integer Translations
250 VALUE Service-Type Login-User 1
251 VALUE Service-Type Framed-User 2
252 VALUE Service-Type Callback-Login-User 3
253 VALUE Service-Type Callback-Framed-User 4
254 VALUE Service-Type Outbound-User 5
255 VALUE Service-Type Administrative-User 6
256 VALUE Service-Type NAS-Prompt-User 7
257 VALUE Service-Type Authenticate-Only 8
258 VALUE Service-Type Callback-NAS-Prompt 9
259 VALUE Service-Type Call-Check 10
260 VALUE Service-Type Callback-Administrative 11
261 VALUE Service-Type Voice 12
262 VALUE Service-Type Fax 13
263 VALUE Service-Type Modem-Relay 14
264 VALUE Service-Type IAPP-Register 15
265 VALUE Service-Type IAPP-AP-Check 16
269 VALUE Framed-Protocol PPP 1
270 VALUE Framed-Protocol SLIP 2
271 VALUE Framed-Protocol ARAP 3
272 VALUE Framed-Protocol Gandalf-SLML 4
273 VALUE Framed-Protocol Xylogics-IPX-SLIP 5
274 VALUE Framed-Protocol X.75-Synchronous 6
275 VALUE Framed-Protocol GPRS-PDP-Context 7
277 # Framed Routing Values
279 VALUE Framed-Routing None 0
280 VALUE Framed-Routing Broadcast 1
281 VALUE Framed-Routing Listen 2
282 VALUE Framed-Routing Broadcast-Listen 3
284 # Framed Compression Types
286 VALUE Framed-Compression None 0
287 VALUE Framed-Compression Van-Jacobson-TCP-IP 1
288 VALUE Framed-Compression IPX-Header-Compression 2
289 VALUE Framed-Compression Stac-LZS 3
293 VALUE Login-Service Telnet 0
294 VALUE Login-Service Rlogin 1
295 VALUE Login-Service TCP-Clear 2
296 VALUE Login-Service PortMaster 3
297 VALUE Login-Service LAT 4
298 VALUE Login-Service X25-PAD 5
299 VALUE Login-Service X25-T3POS 6
300 VALUE Login-Service TCP-Clear-Quiet 7
302 # Login-TCP-Port (see /etc/services for more examples)
304 VALUE Login-TCP-Port Telnet 23
305 VALUE Login-TCP-Port Rlogin 513
306 VALUE Login-TCP-Port Rsh 514
310 VALUE Acct-Status-Type Start 1
311 VALUE Acct-Status-Type Stop 2
312 VALUE Acct-Status-Type Interim-Update 3
313 VALUE Acct-Status-Type Alive 3
314 VALUE Acct-Status-Type Accounting-On 7
315 VALUE Acct-Status-Type Accounting-Off 8
316 # RFC 2867 Additional Status-Type Values
317 VALUE Acct-Status-Type Tunnel-Start 9
318 VALUE Acct-Status-Type Tunnel-Stop 10
319 VALUE Acct-Status-Type Tunnel-Reject 11
320 VALUE Acct-Status-Type Tunnel-Link-Start 12
321 VALUE Acct-Status-Type Tunnel-Link-Stop 13
322 VALUE Acct-Status-Type Tunnel-Link-Reject 14
323 VALUE Acct-Status-Type Failed 15
325 # Authentication Types
327 VALUE Acct-Authentic RADIUS 1
328 VALUE Acct-Authentic Local 2
329 VALUE Acct-Authentic Remote 3
330 VALUE Acct-Authentic Diameter 4
332 # Termination Options
334 VALUE Termination-Action Default 0
335 VALUE Termination-Action RADIUS-Request 1
339 VALUE NAS-Port-Type Async 0
340 VALUE NAS-Port-Type Sync 1
341 VALUE NAS-Port-Type ISDN 2
342 VALUE NAS-Port-Type ISDN-V120 3
343 VALUE NAS-Port-Type ISDN-V110 4
344 VALUE NAS-Port-Type Virtual 5
345 VALUE NAS-Port-Type PIAFS 6
346 VALUE NAS-Port-Type HDLC-Clear-Channel 7
347 VALUE NAS-Port-Type X.25 8
348 VALUE NAS-Port-Type X.75 9
349 VALUE NAS-Port-Type G.3-Fax 10
350 VALUE NAS-Port-Type SDSL 11
351 VALUE NAS-Port-Type ADSL-CAP 12
352 VALUE NAS-Port-Type ADSL-DMT 13
353 VALUE NAS-Port-Type IDSL 14
354 VALUE NAS-Port-Type Ethernet 15
355 VALUE NAS-Port-Type xDSL 16
356 VALUE NAS-Port-Type Cable 17
357 VALUE NAS-Port-Type Wireless-Other 18
358 VALUE NAS-Port-Type Wireless-802.11 19
359 VALUE NAS-Port-Type Token-Ring 20
360 VALUE NAS-Port-Type FDDI 21
361 VALUE NAS-Port-Type Wireless-CDMA2000 22
362 VALUE NAS-Port-Type Wireless-UMTS 23
363 VALUE NAS-Port-Type Wireless-1X-EV 24
364 VALUE NAS-Port-Type IAPP 25
366 # Acct Terminate Causes, available in 3.3.2 and later
368 VALUE Acct-Terminate-Cause User-Request 1
369 VALUE Acct-Terminate-Cause Lost-Carrier 2
370 VALUE Acct-Terminate-Cause Lost-Service 3
371 VALUE Acct-Terminate-Cause Idle-Timeout 4
372 VALUE Acct-Terminate-Cause Session-Timeout 5
373 VALUE Acct-Terminate-Cause Admin-Reset 6
374 VALUE Acct-Terminate-Cause Admin-Reboot 7
375 VALUE Acct-Terminate-Cause Port-Error 8
376 VALUE Acct-Terminate-Cause NAS-Error 9
377 VALUE Acct-Terminate-Cause NAS-Request 10
378 VALUE Acct-Terminate-Cause NAS-Reboot 11
379 VALUE Acct-Terminate-Cause Port-Unneeded 12
380 VALUE Acct-Terminate-Cause Port-Preempted 13
381 VALUE Acct-Terminate-Cause Port-Suspended 14
382 VALUE Acct-Terminate-Cause Service-Unavailable 15
383 VALUE Acct-Terminate-Cause Callback 16
384 VALUE Acct-Terminate-Cause User-Error 17
385 VALUE Acct-Terminate-Cause Host-Request 18
386 VALUE Acct-Terminate-Cause Supplicant-Restart 19
387 VALUE Acct-Terminate-Cause Reauthentication-Failure 20
388 VALUE Acct-Terminate-Cause Port-Reinit 21
389 VALUE Acct-Terminate-Cause Port-Disabled 22
391 #VALUE Tunnel-Type L2TP 3
392 #VALUE Tunnel-Medium-Type IP 1
394 VALUE Prompt No-Echo 0
398 # Non-Protocol Integer Translations
401 VALUE Auth-Type Local 0
402 VALUE Auth-Type System 1
403 VALUE Auth-Type SecurID 2
404 VALUE Auth-Type Crypt-Local 3
405 VALUE Auth-Type Reject 4
406 VALUE Auth-Type ActivCard 5
407 VALUE Auth-Type EAP 6
408 VALUE Auth-Type ARAP 7
413 VALUE Auth-Type Ldap 252
414 VALUE Auth-Type Pam 253
415 VALUE Auth-Type Accept 254
417 VALUE Auth-Type PAP 1024
418 VALUE Auth-Type CHAP 1025
419 VALUE Auth-Type LDAP 1026
420 VALUE Auth-Type PAM 1027
421 VALUE Auth-Type MS-CHAP 1028
422 VALUE Auth-Type Kerberos 1029
423 VALUE Auth-Type CRAM 1030
424 VALUE Auth-Type NS-MTA-MD5 1031
425 VALUE Auth-Type CRAM 1032
426 VALUE Auth-Type SMB 1033
429 # Authorization type, too.
431 VALUE Autz-Type Local 0
436 VALUE Acct-Type Local 0
439 # And Session handling
441 VALUE Session-Type Local 0
445 VALUE Post-Auth-Type Local 0
448 # Experimental Non-Protocol Integer Translations for Cistron-Radiusd
450 VALUE Fall-Through No 0
451 VALUE Fall-Through Yes 1
453 VALUE Packet-Type Access-Request 1
454 VALUE Packet-Type Access-Accept 2
455 VALUE Packet-Type Access-Reject 3
456 VALUE Packet-Type Accounting-Request 4
457 VALUE Packet-Type Accounting-Response 5
458 VALUE Packet-Type Accounting-Status 6
459 VALUE Packet-Type Password-Request 7
460 VALUE Packet-Type Password-Accept 8
461 VALUE Packet-Type Password-Reject 9
462 VALUE Packet-Type Accounting-Message 10
463 VALUE Packet-Type Access-Challenge 11
464 VALUE Packet-Type Status-Server 12
465 VALUE Packet-Type Status-Client 13
468 # The following packet types are described in RFC 2882,
469 # but they are NOT part of the RADIUS standard. Instead,
470 # they are informational about vendor-specific extensions
471 # to the RADIUS standard.
473 VALUE Packet-Type Resource-Free-Request 21
474 VALUE Packet-Type Resource-Free-Response 22
475 VALUE Packet-Type Resource-Query-Request 23
476 VALUE Packet-Type Resource-Query-Response 24
477 VALUE Packet-Type Alternate-Resource-Reclaim-Request 25
478 VALUE Packet-Type NAS-Reboot-Request 26
479 VALUE Packet-Type NAS-Reboot-Response 27
480 VALUE Packet-Type Next-Passcode 29
481 VALUE Packet-Type New-Pin 30
482 VALUE Packet-Type Terminate-Session 31
483 VALUE Packet-Type Password-Expired 32
484 VALUE Packet-Type Event-Request 33
485 VALUE Packet-Type Event-Response 34
486 VALUE Packet-Type Disconnect-Request 40
487 VALUE Packet-Type Disconnect-ACK 41
488 VALUE Packet-Type Disconnect-NAK 42
489 VALUE Packet-Type CoF-Request 43
490 VALUE Packet-Type CoF-ACK 44
491 VALUE Packet-Type CoF-NAK 45
492 VALUE Packet-Type IP-Address-Allocate 50
493 VALUE Packet-Type IP-Address-Release 51
495 VALUE Response-Packet-Type Access-Request 1
496 VALUE Response-Packet-Type Access-Accept 2
497 VALUE Response-Packet-Type Access-Reject 3
498 VALUE Response-Packet-Type Accounting-Request 4
499 VALUE Response-Packet-Type Accounting-Response 5
500 VALUE Response-Packet-Type Accounting-Status 6
501 VALUE Response-Packet-Type Password-Request 7
502 VALUE Response-Packet-Type Password-Accept 8
503 VALUE Response-Packet-Type Password-Reject 9
504 VALUE Response-Packet-Type Accounting-Message 10
505 VALUE Response-Packet-Type Access-Challenge 11
506 VALUE Response-Packet-Type Status-Server 12
507 VALUE Response-Packet-Type Status-Client 13