share/dictionary.freeradius.internal

   1 # -*- text -*-
   2 #
   3 #       Non Protocol Attributes used by FreeRADIUS
   4 #
   5 #       $Id$
   6 #
   7
   8 #       The attributes number ranges are allocates as follows:
   9 #
  10 #       Range:  500-999
  11 #               server-side attributes which can go in a reply list
  12
  13 #       These attributes CAN go in the reply item list.
  14 ATTRIBUTE       Fall-Through                            500     integer
  15 ATTRIBUTE       Relax-Filter                            501     integer
  16 ATTRIBUTE       Exec-Program                            502     string
  17 ATTRIBUTE       Exec-Program-Wait                       503     string
  18
  19 #       These attributes CANNOT go in the reply item list.
  20
  21 #
  22 #       Range:  1000+
  23 #               Attributes which cannot go in a reply list.
  24 #
  25 #
  26 #       Range:  1000-1199
  27 #               Miscellaneous server attributes.
  28 #
  29 #
  30 #       Non-Protocol Attributes
  31 #       These attributes are used internally by the server
  32 #
  33 ATTRIBUTE       Auth-Type                               1000    integer
  34 ATTRIBUTE       Menu                                    1001    string
  35 ATTRIBUTE       Termination-Menu                        1002    string
  36 ATTRIBUTE       Prefix                                  1003    string
  37 ATTRIBUTE       Suffix                                  1004    string
  38 ATTRIBUTE       Group                                   1005    string
  39 ATTRIBUTE       Crypt-Password                          1006    string
  40 ATTRIBUTE       Connect-Rate                            1007    integer
  41 ATTRIBUTE       Add-Prefix                              1008    string
  42 ATTRIBUTE       Add-Suffix                              1009    string
  43 ATTRIBUTE       Expiration                              1010    date
  44 ATTRIBUTE       Autz-Type                               1011    integer
  45 ATTRIBUTE       Acct-Type                               1012    integer
  46 ATTRIBUTE       Session-Type                            1013    integer
  47 ATTRIBUTE       Post-Auth-Type                          1014    integer
  48 ATTRIBUTE       Pre-Proxy-Type                          1015    integer
  49 ATTRIBUTE       Post-Proxy-Type                         1016    integer
  50 ATTRIBUTE       Pre-Acct-Type                           1017    integer
  51
  52 #
  53 #       This is the EAP type of authentication, which is set
  54 #       by the EAP module, for informational purposes only.
  55 #
  56 ATTRIBUTE       EAP-Type                                1018    integer
  57 ATTRIBUTE       EAP-TLS-Require-Client-Cert             1019    integer
  58 ATTRIBUTE       EAP-Id                                  1020    integer
  59 ATTRIBUTE       EAP-Code                                1021    integer
  60 ATTRIBUTE       EAP-MD5-Password                        1022    string
  61 ATTRIBUTE       PEAP-Version                            1023    integer
  62 ATTRIBUTE       Client-Shortname                        1024    string
  63 ATTRIBUTE       Load-Balance-Key                        1025    string
  64 ATTRIBUTE       Raw-Attribute                           1026    octets
  65 ATTRIBUTE       TNC-VLAN-Access                         1027    string
  66 ATTRIBUTE       TNC-VLAN-Isolate                        1028    string
  67 ATTRIBUTE       User-Category                           1029    string
  68 ATTRIBUTE       Group-Name                              1030    string
  69 ATTRIBUTE       Huntgroup-Name                          1031    string
  70 ATTRIBUTE       Simultaneous-Use                        1034    integer
  71 ATTRIBUTE       Strip-User-Name                         1035    integer
  72 ATTRIBUTE       Hint                                    1040    string
  73 ATTRIBUTE       Pam-Auth                                1041    string
  74 ATTRIBUTE       Login-Time                              1042    string
  75 ATTRIBUTE       Stripped-User-Name                      1043    string
  76 ATTRIBUTE       Current-Time                            1044    string
  77 ATTRIBUTE       Realm                                   1045    string
  78 ATTRIBUTE       No-Such-Attribute                       1046    string
  79 ATTRIBUTE       Packet-Type                             1047    integer
  80 ATTRIBUTE       Proxy-To-Realm                          1048    string
  81 ATTRIBUTE       Replicate-To-Realm                      1049    string
  82 ATTRIBUTE       Acct-Session-Start-Time                 1050    date
  83 ATTRIBUTE       Acct-Unique-Session-Id                  1051    string
  84 ATTRIBUTE       Client-IP-Address                       1052    ipaddr
  85 ATTRIBUTE       Ldap-UserDn                             1053    string
  86 ATTRIBUTE       NS-MTA-MD5-Password                     1054    string
  87 ATTRIBUTE       SQL-User-Name                           1055    string
  88 ATTRIBUTE       LM-Password                             1057    octets
  89 ATTRIBUTE       NT-Password                             1058    octets
  90 ATTRIBUTE       SMB-Account-CTRL                        1059    integer
  91 ATTRIBUTE       SMB-Account-CTRL-TEXT                   1061    string
  92 ATTRIBUTE       User-Profile                            1062    string
  93 ATTRIBUTE       Digest-Realm                            1063    string
  94 ATTRIBUTE       Digest-Nonce                            1064    string
  95 ATTRIBUTE       Digest-Method                           1065    string
  96 ATTRIBUTE       Digest-URI                              1066    string
  97 ATTRIBUTE       Digest-QOP                              1067    string
  98 ATTRIBUTE       Digest-Algorithm                        1068    string
  99 ATTRIBUTE       Digest-Body-Digest                      1069    string
 100 ATTRIBUTE       Digest-CNonce                           1070    string
 101 ATTRIBUTE       Digest-Nonce-Count                      1071    string
 102 ATTRIBUTE       Digest-User-Name                        1072    string
 103 ATTRIBUTE       Pool-Name                               1073    string
 104 ATTRIBUTE       Ldap-Group                              1074    string
 105 ATTRIBUTE       Module-Success-Message                  1075    string
 106 ATTRIBUTE       Module-Failure-Message                  1076    string
 107 #               X99-Fast                1077    integer
 108 ATTRIBUTE       Rewrite-Rule                            1078    string
 109 ATTRIBUTE       Sql-Group                               1079    string
 110 ATTRIBUTE       Response-Packet-Type                    1080    integer
 111 ATTRIBUTE       Digest-HA1                              1081    string
 112 ATTRIBUTE       MS-CHAP-Use-NTLM-Auth                   1082    integer
 113 ATTRIBUTE       NTLM-User-Name                          1083    string
 114 ATTRIBUTE       MS-CHAP-User-Name                       1083    string
 115 ATTRIBUTE       Packet-Src-IP-Address                   1084    ipaddr
 116 ATTRIBUTE       Packet-Dst-IP-Address                   1085    ipaddr
 117 ATTRIBUTE       Packet-Src-Port                         1086    integer
 118 ATTRIBUTE       Packet-Dst-Port                         1087    integer
 119 ATTRIBUTE       Packet-Authentication-Vector            1088    octets
 120 ATTRIBUTE       Time-Of-Day                             1089    string
 121 ATTRIBUTE       Request-Processing-Stage                1090    string
 122 ATTRIBUTE       Cache-No-Caching                        1091    string
 123 ATTRIBUTE       Cache-Delete-Cache                      1092    string
 124 ATTRIBUTE       SHA-Password                            1093    octets
 125 ATTRIBUTE       SSHA-Password                           1094    octets
 126 ATTRIBUTE       SHA1-Password                           1093    octets
 127 ATTRIBUTE       SSHA1-Password                          1094    octets
 128 ATTRIBUTE       MD5-Password                            1095    octets
 129 ATTRIBUTE       SMD5-Password                           1096    octets
 130 ATTRIBUTE       Packet-Src-IPv6-Address                 1097    ipv6addr
 131 ATTRIBUTE       Packet-Dst-IPv6-Address                 1098    ipv6addr
 132 ATTRIBUTE       Virtual-Server                          1099    string
 133 ATTRIBUTE       Cleartext-Password                      1100    string
 134 ATTRIBUTE       Password-With-Header                    1101    string
 135 ATTRIBUTE       Inner-Tunnel-User-Name                  1102    string
 136 #
 137 #       EAP-IKEv2 is experimental.
 138 #
 139 ATTRIBUTE       EAP-IKEv2-IDType                        1103    integer
 140
 141 VALUE   EAP-IKEv2-IDType                IPV4_ADDR               1
 142 VALUE   EAP-IKEv2-IDType                FQDN                    2
 143 VALUE   EAP-IKEv2-IDType                RFC822_ADDR             3
 144 VALUE   EAP-IKEv2-IDType                IPV6_ADDR               5
 145 VALUE   EAP-IKEv2-IDType                DER_ASN1_DN             9
 146 VALUE   EAP-IKEv2-IDType                DER_ASN1_GN             10
 147 VALUE   EAP-IKEv2-IDType                KEY_ID                  11
 148
 149 ATTRIBUTE       EAP-IKEv2-ID                            1104    string
 150 ATTRIBUTE       EAP-IKEv2-Secret                        1105    string
 151 ATTRIBUTE       EAP-IKEv2-AuthType                      1106    integer
 152
 153 VALUE   EAP-IKEv2-AuthType              none                    0
 154 VALUE   EAP-IKEv2-AuthType              secret                  1
 155 VALUE   EAP-IKEv2-AuthType              cert                    2
 156 VALUE   EAP-IKEv2-AuthType              both                    3
 157
 158 ATTRIBUTE       Send-Disconnect-Request                 1107    integer
 159 ATTRIBUTE       Send-CoA-Request                        1107    integer
 160
 161 VALUE   Send-CoA-Request                No                      0
 162 VALUE   Send-CoA-Request                Yes                     1
 163
 164 ATTRIBUTE       Module-Return-Code                      1108    integer
 165
 166 VALUE   Module-Return-Code              reject                  0
 167 VALUE   Module-Return-Code              fail                    1
 168 VALUE   Module-Return-Code              ok                      2
 169 VALUE   Module-Return-Code              handled                 3
 170 VALUE   Module-Return-Code              invalid                 4
 171 VALUE   Module-Return-Code              userlock                5
 172 VALUE   Module-Return-Code              notfound                6
 173 VALUE   Module-Return-Code              noop                    7
 174 VALUE   Module-Return-Code              updated                 8
 175
 176 ATTRIBUTE       Packet-Original-Timestamp               1109    date
 177 ATTRIBUTE       SQL-Table-Name                          1110    string
 178 ATTRIBUTE       Home-Server-Pool                        1111    string
 179
 180 ATTRIBUTE       FreeRADIUS-Client-IP-Address            1120    ipaddr
 181 ATTRIBUTE       FreeRADIUS-Client-IPv6-Address          1121    ipv6addr
 182 ATTRIBUTE       FreeRADIUS-Client-Require-MA            1122    integer
 183
 184 VALUE   FreeRADIUS-Client-Require-MA    no                      0
 185 VALUE   FreeRADIUS-Client-Require-MA    yes                     1
 186
 187 ATTRIBUTE       FreeRADIUS-Client-Secret                1123    string
 188 ATTRIBUTE       FreeRADIUS-Client-Shortname             1124    string
 189 ATTRIBUTE       FreeRADIUS-Client-NAS-Type              1125    string
 190 ATTRIBUTE       FreeRADIUS-Client-Virtual-Server        1126    string
 191
 192 # For session resumption
 193 ATTRIBUTE       Allow-Session-Resumption                1127    integer
 194
 195 VALUE   Allow-Session-Resumption        no                      0
 196 VALUE   Allow-Session-Resumption        yes                     1
 197
 198 ATTRIBUTE       EAP-Session-Resumed                     1128    integer
 199
 200 VALUE   EAP-Session-Resumed             no                      0
 201 VALUE   EAP-Session-Resumed             yes                     1
 202
 203 #
 204 #       Expose EAP keys in the reply.
 205 #
 206 ATTRIBUTE       EAP-MSK                                 1129    octets
 207 ATTRIBUTE       EAP-EMSK                                1130    octets
 208
 209 #
 210 #       For send/recv CoA packets (like Auth-Type, Acct-Type, etc.)
 211 #
 212 ATTRIBUTE       Recv-CoA-Type                           1131    integer
 213 ATTRIBUTE       Send-CoA-Type                           1132    integer
 214
 215 ATTRIBUTE       MS-CHAP-Password                        1133    string
 216 ATTRIBUTE       Packet-Transmit-Counter                 1134    integer
 217 ATTRIBUTE       Cached-Session-Policy                   1135    string
 218 ATTRIBUTE       MS-CHAP-New-Cleartext-Password          1136    string
 219 ATTRIBUTE       MS-CHAP-New-NT-Password                 1137    octets
 220
 221 #       For default policies
 222
 223 ATTRIBUTE       Stripped-User-Domain                    1138    string
 224 ATTRIBUTE       Called-Station-SSID                     1139    string
 225
 226 #
 227 #       Range:  1200-1279
 228 #               EAP-SIM (and other EAP type) weirdness.
 229 #
 230 #       For EAP-SIM, some attribute definitions for database interface
 231 #
 232 ATTRIBUTE       EAP-Sim-Subtype                         1200    integer
 233
 234 ATTRIBUTE       EAP-Sim-Rand1                           1201    octets
 235 ATTRIBUTE       EAP-Sim-Rand2                           1202    octets
 236 ATTRIBUTE       EAP-Sim-Rand3                           1203    octets
 237
 238 ATTRIBUTE       EAP-Sim-SRES1                           1204    octets
 239 ATTRIBUTE       EAP-Sim-SRES2                           1205    octets
 240 ATTRIBUTE       EAP-Sim-SRES3                           1206    octets
 241
 242 VALUE   EAP-Sim-Subtype                 Start                   10
 243 VALUE   EAP-Sim-Subtype                 Challenge               11
 244 VALUE   EAP-Sim-Subtype                 Notification            12
 245 VALUE   EAP-Sim-Subtype                 Re-authentication       13
 246
 247 # this attribute is used internally by the client code.
 248 ATTRIBUTE       EAP-Sim-State                           1207    integer
 249
 250 ATTRIBUTE       EAP-Sim-IMSI                            1208    string
 251 ATTRIBUTE       EAP-Sim-HMAC                            1209    string
 252 ATTRIBUTE       EAP-Sim-KEY                             1210    octets
 253 ATTRIBUTE       EAP-Sim-EXTRA                           1211    octets
 254
 255 ATTRIBUTE       EAP-Sim-KC1                             1212    octets
 256 ATTRIBUTE       EAP-Sim-KC2                             1213    octets
 257 ATTRIBUTE       EAP-Sim-KC3                             1214    octets
 258
 259 #
 260 #       Range:  1280 - 1535
 261 #               EAP-type specific attributes
 262 #
 263
 264 # these are PW_EAP_X  + 1280
 265 ATTRIBUTE       EAP-Type-Identity                       1281    string
 266 ATTRIBUTE       EAP-Type-Notification                   1282    string
 267 ATTRIBUTE       EAP-Type-NAK                            1283    string
 268 ATTRIBUTE       EAP-Type-MD5                            1284    octets
 269 ATTRIBUTE       EAP-Type-OTP                            1285    string
 270 ATTRIBUTE       EAP-Type-GTC                            1286    string
 271 ATTRIBUTE       EAP-Type-TLS                            1297    octets
 272 ATTRIBUTE       EAP-Type-SIM                            1298    octets
 273 ATTRIBUTE       EAP-Type-LEAP                           1301    octets
 274 ATTRIBUTE       EAP-Type-SIM2                           1302    octets
 275 ATTRIBUTE       EAP-Type-TTLS                           1305    octets
 276 ATTRIBUTE       EAP-Type-PEAP                           1309    octets
 277
 278 #
 279 #       Range:  1536 - 1791
 280 #               EAP Sim sub-types.
 281 #
 282
 283 # these are PW_EAP_SIM_X + 1536
 284 ATTRIBUTE       EAP-Sim-RAND                            1537    octets
 285 ATTRIBUTE       EAP-Sim-PADDING                         1542    octets
 286 ATTRIBUTE       EAP-Sim-NONCE_MT                        1543    octets
 287 ATTRIBUTE       EAP-Sim-PERMANENT_ID_REQ                1546    octets
 288 ATTRIBUTE       EAP-Sim-MAC                             1547    octets
 289 ATTRIBUTE       EAP-Sim-NOTIFICATION                    1548    octets
 290 ATTRIBUTE       EAP-Sim-ANY_ID_REQ                      1549    octets
 291 ATTRIBUTE       EAP-Sim-IDENTITY                        1550    octets
 292 ATTRIBUTE       EAP-Sim-VERSION_LIST                    1551    octets
 293 ATTRIBUTE       EAP-Sim-SELECTED_VERSION                1552    octets
 294 ATTRIBUTE       EAP-Sim-FULLAUTH_ID_REQ                 1553    octets
 295 ATTRIBUTE       EAP-Sim-COUNTER                         1555    octets
 296 ATTRIBUTE       EAP-Sim-COUNTER_TOO_SMALL               1556    octets
 297 ATTRIBUTE       EAP-Sim-NONCE_S                         1557    octets
 298 ATTRIBUTE       EAP-Sim-IV                              1665    octets
 299 ATTRIBUTE       EAP-Sim-ENCR_DATA                       1666    octets
 300 ATTRIBUTE       EAP-Sim-NEXT_PSEUDONUM                  1668    octets
 301 ATTRIBUTE       EAP-Sim-NEXT_REAUTH_ID                  1669    octets
 302 ATTRIBUTE       EAP-Sim-CHECKCODE                       1670    octets
 303
 304 #
 305 #       Range: 1800-1899
 306 #              Temporary attributes, for local storage.
 307 #
 308 ATTRIBUTE       Tmp-String-0                            1800    string
 309 ATTRIBUTE       Tmp-String-1                            1801    string
 310 ATTRIBUTE       Tmp-String-2                            1802    string
 311 ATTRIBUTE       Tmp-String-3                            1803    string
 312 ATTRIBUTE       Tmp-String-4                            1804    string
 313 ATTRIBUTE       Tmp-String-5                            1805    string
 314 ATTRIBUTE       Tmp-String-6                            1806    string
 315 ATTRIBUTE       Tmp-String-7                            1807    string
 316 ATTRIBUTE       Tmp-String-8                            1808    string
 317 ATTRIBUTE       Tmp-String-9                            1809    string
 318
 319 ATTRIBUTE       Tmp-Integer-0                           1810    integer
 320 ATTRIBUTE       Tmp-Integer-1                           1811    integer
 321 ATTRIBUTE       Tmp-Integer-2                           1812    integer
 322 ATTRIBUTE       Tmp-Integer-3                           1813    integer
 323 ATTRIBUTE       Tmp-Integer-4                           1814    integer
 324 ATTRIBUTE       Tmp-Integer-5                           1815    integer
 325 ATTRIBUTE       Tmp-Integer-6                           1816    integer
 326 ATTRIBUTE       Tmp-Integer-7                           1817    integer
 327 ATTRIBUTE       Tmp-Integer-8                           1818    integer
 328 ATTRIBUTE       Tmp-Integer-9                           1819    integer
 329
 330 ATTRIBUTE       Tmp-IP-Address-0                        1820    ipaddr
 331 ATTRIBUTE       Tmp-IP-Address-1                        1821    ipaddr
 332 ATTRIBUTE       Tmp-IP-Address-2                        1822    ipaddr
 333 ATTRIBUTE       Tmp-IP-Address-3                        1823    ipaddr
 334 ATTRIBUTE       Tmp-IP-Address-4                        1824    ipaddr
 335 ATTRIBUTE       Tmp-IP-Address-5                        1825    ipaddr
 336 ATTRIBUTE       Tmp-IP-Address-6                        1826    ipaddr
 337 ATTRIBUTE       Tmp-IP-Address-7                        1827    ipaddr
 338 ATTRIBUTE       Tmp-IP-Address-8                        1828    ipaddr
 339 ATTRIBUTE       Tmp-IP-Address-9                        1829    ipaddr
 340
 341 #       Range:  1900-1909
 342 #       WiMAX server-side attributes.
 343 #
 344 #       These are NOT sent in a packet, but are otherwise
 345 #       available for testing and validation.  The various
 346 #       things that *are* sent in a packet are derived from
 347 #       these attributes.
 348 #
 349 ATTRIBUTE       WiMAX-MN-NAI                            1900    string
 350
 351 ATTRIBUTE       TLS-Cert-Serial                         1910    string
 352 ATTRIBUTE       TLS-Cert-Expiration                     1911    string
 353 ATTRIBUTE       TLS-Cert-Issuer                         1912    string
 354 ATTRIBUTE       TLS-Cert-Subject                        1913    string
 355 ATTRIBUTE       TLS-Cert-Common-Name                    1914    string
 356 # 1915 - 1919: reserved for future cert attributes
 357 ATTRIBUTE       TLS-Client-Cert-Serial                  1920    string
 358 ATTRIBUTE       TLS-Client-Cert-Expiration              1921    string
 359 ATTRIBUTE       TLS-Client-Cert-Issuer                  1922    string
 360 ATTRIBUTE       TLS-Client-Cert-Subject                 1923    string
 361 ATTRIBUTE       TLS-Client-Cert-Common-Name             1924    string
 362 ATTRIBUTE       TLS-Client-Cert-Filename                1925    string
 363
 364 #
 365 #       Range:  1910-2099
 366 #               Free
 367 #
 368 #       Range:  2100-2199
 369 #       SoH attributes; FIXME: these should really be protocol attributes
 370 #       so that the SoH radius request can be proxied, but from which
 371 #       vendor? Sigh...
 372 #
 373 ATTRIBUTE       SoH-MS-Machine-OS-vendor                2100    integer
 374 VALUE           SoH-MS-Machine-OS-vendor        Microsoft       311
 375
 376 ATTRIBUTE       SoH-MS-Machine-OS-version               2101    integer
 377 ATTRIBUTE       SoH-MS-Machine-OS-release               2102    integer
 378 ATTRIBUTE       SoH-MS-Machine-OS-build                 2103    integer
 379 ATTRIBUTE       SoH-MS-Machine-SP-version               2104    integer
 380 ATTRIBUTE       SoH-MS-Machine-SP-release               2105    integer
 381
 382 ATTRIBUTE       SoH-MS-Machine-Processor                2106    integer
 383 VALUE           SoH-MS-Machine-Processor        x86     0
 384 VALUE           SoH-MS-Machine-Processor        i64     6
 385 VALUE           SoH-MS-Machine-Processor        x86_64  9
 386
 387 ATTRIBUTE       SoH-MS-Machine-Name                     2107    string
 388 ATTRIBUTE       SoH-MS-Correlation-Id                   2108    octets
 389 ATTRIBUTE       SoH-MS-Machine-Role                     2109    integer
 390 VALUE           SoH-MS-Machine-Role             client  1
 391 VALUE           SoH-MS-Machine-Role             dc      2
 392 VALUE           SoH-MS-Machine-Role             server  3
 393
 394
 395 ATTRIBUTE       SoH-Supported                           2119    integer
 396 VALUE           SoH-Supported                   no      0
 397 VALUE           SoH-Supported                   yes     1
 398
 399 ATTRIBUTE       SoH-MS-Windows-Health-Status            2120    string
 400 ATTRIBUTE       SoH-MS-Health-Other                     2129    string
 401
 402 #
 403 #       Range:  2200-2999
 404 #               Free
 405 #
 406 #       Range:  3000-3999
 407 #               Site-local attributes (see raddb/dictionary.in)
 408 #               Do NOT define attributes in this range!
 409 #
 410 #       Range:  4000-65535
 411 #               Unused
 412 #
 413 #       Range:  65536-
 414 #               Invalid.  Don't use.
 415 #
 416
 417 #
 418 #       Non-Protocol Integer Translations
 419 #
 420
 421 #       The values for these attributes are defined by the various subsections
 422 #       configured within the primary sections.
 423
 424 VALUE   Auth-Type                       Local                   0
 425 VALUE   Autz-Type                       Local                   0
 426 VALUE   Acct-Type                       Local                   0
 427 VALUE   Session-Type                    Local                   0
 428 VALUE   Post-Auth-Type                  Local                   0
 429
 430 #
 431 #       Experimental Non-Protocol Integer Translations for FreeRADIUS
 432 #
 433 VALUE   Fall-Through                    No                      0
 434 VALUE   Fall-Through                    Yes                     1
 435
 436 VALUE   Relax-Filter                    No                      0
 437 VALUE   Relax-Filter                    Yes                     1
 438
 439 VALUE   Strip-User-Name                 No                      0
 440 VALUE   Strip-User-Name                 Yes                     1
 441
 442 VALUE   Packet-Type                     Access-Request          1
 443 VALUE   Packet-Type                     Access-Accept           2
 444 VALUE   Packet-Type                     Access-Reject           3
 445 VALUE   Packet-Type                     Accounting-Request      4
 446 VALUE   Packet-Type                     Accounting-Response     5
 447 VALUE   Packet-Type                     Accounting-Status       6
 448 VALUE   Packet-Type                     Password-Request        7
 449 VALUE   Packet-Type                     Password-Accept         8
 450 VALUE   Packet-Type                     Password-Reject         9
 451 VALUE   Packet-Type                     Accounting-Message      10
 452 VALUE   Packet-Type                     Access-Challenge        11
 453 VALUE   Packet-Type                     Status-Server           12
 454 VALUE   Packet-Type                     Status-Client           13
 455
 456 #
 457 #       The following packet types are described in RFC 2882,
 458 #       but they are NOT part of the RADIUS standard.  Instead,
 459 #       they are informational about vendor-specific extensions
 460 #       to the RADIUS standard.
 461 #
 462 VALUE   Packet-Type                     Resource-Free-Request   21
 463 VALUE   Packet-Type                     Resource-Free-Response  22
 464 VALUE   Packet-Type                     Resource-Query-Request  23
 465 VALUE   Packet-Type                     Resource-Query-Response 24
 466 VALUE   Packet-Type                     Alternate-Resource-Reclaim-Request 25
 467 VALUE   Packet-Type                     NAS-Reboot-Request      26
 468 VALUE   Packet-Type                     NAS-Reboot-Response     27
 469 VALUE   Packet-Type                     Next-Passcode           29
 470 VALUE   Packet-Type                     New-Pin                 30
 471 VALUE   Packet-Type                     Terminate-Session       31
 472 VALUE   Packet-Type                     Password-Expired        32
 473 VALUE   Packet-Type                     Event-Request           33
 474 VALUE   Packet-Type                     Event-Response          34
 475
 476 #       RFC 3576 allocates packet types 40-45
 477
 478 VALUE   Packet-Type                     Disconnect-Request      40
 479 VALUE   Packet-Type                     Disconnect-ACK          41
 480 VALUE   Packet-Type                     Disconnect-NAK          42
 481 VALUE   Packet-Type                     CoA-Request             43
 482 VALUE   Packet-Type                     CoA-ACK                 44
 483 VALUE   Packet-Type                     CoA-NAK                 45
 484
 485 VALUE   Packet-Type                     IP-Address-Allocate     50
 486 VALUE   Packet-Type                     IP-Address-Release      51
 487
 488 VALUE   Response-Packet-Type            Access-Request          1
 489 VALUE   Response-Packet-Type            Access-Accept           2
 490 VALUE   Response-Packet-Type            Access-Reject           3
 491 VALUE   Response-Packet-Type            Accounting-Request      4
 492 VALUE   Response-Packet-Type            Accounting-Response     5
 493 VALUE   Response-Packet-Type            Accounting-Status       6
 494 VALUE   Response-Packet-Type            Password-Request        7
 495 VALUE   Response-Packet-Type            Password-Accept         8
 496 VALUE   Response-Packet-Type            Password-Reject         9
 497 VALUE   Response-Packet-Type            Accounting-Message      10
 498 VALUE   Response-Packet-Type            Access-Challenge        11
 499 VALUE   Response-Packet-Type            Status-Server           12
 500 VALUE   Response-Packet-Type            Status-Client           13
 501
 502 VALUE   Response-Packet-Type            Disconnect-Request      40
 503 VALUE   Response-Packet-Type            Disconnect-ACK          41
 504 VALUE   Response-Packet-Type            Disconnect-NAK          42
 505 VALUE   Response-Packet-Type            CoA-Request             43
 506 VALUE   Response-Packet-Type            CoA-ACK                 44
 507 VALUE   Response-Packet-Type            CoA-NAK                 45
 508 #
 509 #  Special value
 510 #
 511 VALUE   Response-Packet-Type            Do-Not-Respond          256
 512
 513 #
 514 #       EAP Sub-types, inside of Request and Response packets
 515 #
 516 #       http://www.iana.org/assignments/ppp-numbers
 517 #               "PPP EAP REQUEST/RESPONSE TYPES"
 518 #
 519 #
 520 #       See dictionary.microsoft, MS-Acct-EAP-Type for similar definitions
 521 #
 522 VALUE   EAP-Type                        None                    0
 523 VALUE   EAP-Type                        Identity                1
 524 VALUE   EAP-Type                        Notification            2
 525 VALUE   EAP-Type                        NAK                     3
 526 VALUE   EAP-Type                        MD5-Challenge           4
 527 VALUE   EAP-Type                        One-Time-Password       5
 528 VALUE   EAP-Type                        Generic-Token-Card      6
 529 VALUE   EAP-Type                        RSA-Public-Key          9
 530 VALUE   EAP-Type                        DSS-Unilateral          10
 531 VALUE   EAP-Type                        KEA                     11
 532 VALUE   EAP-Type                        KEA-Validate            12
 533 VALUE   EAP-Type                        EAP-TLS                 13
 534 VALUE   EAP-Type                        Defender-Token          14
 535 VALUE   EAP-Type                        RSA-SecurID-EAP         15
 536 VALUE   EAP-Type                        Arcot-Systems-EAP       16
 537 VALUE   EAP-Type                        Cisco-LEAP              17
 538 VALUE   EAP-Type                        Nokia-IP-Smart-Card     18
 539 VALUE   EAP-Type                        SIM                     18
 540 VALUE   EAP-Type                        SRP-SHA1-Part-1         19
 541 VALUE   EAP-Type                        SRP-SHA1-Part-2         20
 542 VALUE   EAP-Type                        EAP-TTLS                21
 543 VALUE   EAP-Type                        Remote-Access-Service   22
 544 VALUE   EAP-Type                        UMTS                    23
 545 VALUE   EAP-Type                        EAP-3Com-Wireless       24
 546 VALUE   EAP-Type                        PEAP                    25
 547 VALUE   EAP-Type                        MS-EAP-Authentication   26
 548 VALUE   EAP-Type                        MAKE                    27
 549 VALUE   EAP-Type                        CRYPTOCard              28
 550 VALUE   EAP-Type                        EAP-MSCHAP-V2           29
 551 VALUE   EAP-Type                        DynamID                 30
 552 VALUE   EAP-Type                        Rob-EAP                 31
 553 VALUE   EAP-Type                        SecurID-EAP             32
 554 VALUE   EAP-Type                        MS-Authentication-TLV   33
 555 VALUE   EAP-Type                        SentriNET               34
 556 VALUE   EAP-Type                        EAP-Actiontec-Wireless  35
 557 VALUE   EAP-Type                        Cogent-Biomentric-EAP   36
 558 VALUE   EAP-Type                        AirFortress-EAP         37
 559 VALUE   EAP-Type                        EAP-HTTP-Digest         38
 560 VALUE   EAP-Type                        SecuriSuite-EAP         39
 561 VALUE   EAP-Type                        DeviceConnect-EAP       40
 562 VALUE   EAP-Type                        EAP-SPEKE               41
 563 VALUE   EAP-Type                        EAP-MOBAC               42
 564
 565 #
 566 #       These are duplicate values, to get around the problem of
 567 #       having two MS-CHAPv2 EAP types.
 568 #
 569 VALUE   EAP-Type                        Microsoft-MS-CHAPv2     26
 570 VALUE   EAP-Type                        Cisco-MS-CHAPv2         29
 571
 572 #
 573 #       And this is what most people mean by MS-CHAPv2
 574 #
 575 VALUE   EAP-Type                        MS-CHAP-V2              26
 576
 577 #
 578 #       This says TLS, but it's only valid for TTLS & PEAP.
 579 #       EAP-TLS *always* requires a client certificate.
 580 #
 581 VALUE   EAP-TLS-Require-Client-Cert     No                      0
 582 VALUE   EAP-TLS-Require-Client-Cert     Yes                     1
 583
 584 #
 585 #       These are the EAP-Code values.
 586 #
 587 VALUE   EAP-Code                        Request                 1
 588 VALUE   EAP-Code                        Response                2
 589 VALUE   EAP-Code                        Success                 3
 590 VALUE   EAP-Code                        Failure                 4
 591
 592 #
 593 #  For MS-CHAP, do we run ntlm_auth, or not.
 594 #
 595 VALUE   MS-CHAP-Use-NTLM-Auth           No                      0
 596 VALUE   MS-CHAP-Use-NTLM-Auth           Yes                     1