share/dictionary.freeradius.internal

   1 # -*- text -*-
   2 #
   3 #       Non Protocol Attributes used by FreeRADIUS
   4 #
   5 #       $Id$
   6 #
   7
   8 #       The attributes number ranges are allocates as follows:
   9 #
  10 #       Range:  500-999
  11 #               server-side attributes which can go in a reply list
  12
  13 #       These attributes CAN go in the reply item list.
  14 ATTRIBUTE       Fall-Through                            500     integer
  15 ATTRIBUTE       Exec-Program                            502     string
  16 ATTRIBUTE       Exec-Program-Wait                       503     string
  17
  18 #       These attributes CANNOT go in the reply item list.
  19
  20 #
  21 #       Range:  1000+
  22 #               Attributes which cannot go in a reply list.
  23 #
  24 #
  25 #       Range:  1000-1199
  26 #               Miscellaneous server attributes.
  27 #
  28 #
  29 #       Non-Protocol Attributes
  30 #       These attributes are used internally by the server
  31 #
  32 ATTRIBUTE       Auth-Type                               1000    integer
  33 ATTRIBUTE       Menu                                    1001    string
  34 ATTRIBUTE       Termination-Menu                        1002    string
  35 ATTRIBUTE       Prefix                                  1003    string
  36 ATTRIBUTE       Suffix                                  1004    string
  37 ATTRIBUTE       Group                                   1005    string
  38 ATTRIBUTE       Crypt-Password                          1006    string
  39 ATTRIBUTE       Connect-Rate                            1007    integer
  40 ATTRIBUTE       Add-Prefix                              1008    string
  41 ATTRIBUTE       Add-Suffix                              1009    string
  42 ATTRIBUTE       Expiration                              1010    date
  43 ATTRIBUTE       Autz-Type                               1011    integer
  44 ATTRIBUTE       Acct-Type                               1012    integer
  45 ATTRIBUTE       Session-Type                            1013    integer
  46 ATTRIBUTE       Post-Auth-Type                          1014    integer
  47 ATTRIBUTE       Pre-Proxy-Type                          1015    integer
  48 ATTRIBUTE       Post-Proxy-Type                         1016    integer
  49 ATTRIBUTE       Pre-Acct-Type                           1017    integer
  50
  51 #
  52 #       This is the EAP type of authentication, which is set
  53 #       by the EAP module, for informational purposes only.
  54 #
  55 ATTRIBUTE       EAP-Type                                1018    integer
  56 ATTRIBUTE       EAP-TLS-Require-Client-Cert             1019    integer
  57 ATTRIBUTE       EAP-Id                                  1020    integer
  58 ATTRIBUTE       EAP-Code                                1021    integer
  59 ATTRIBUTE       EAP-MD5-Password                        1022    string
  60 ATTRIBUTE       PEAP-Version                            1023    integer
  61
  62 #
  63 #       Range:  1023-1028
  64 #               unused
  65 #
  66 ATTRIBUTE       User-Category                           1029    string
  67 ATTRIBUTE       Group-Name                              1030    string
  68 ATTRIBUTE       Huntgroup-Name                          1031    string
  69 ATTRIBUTE       Simultaneous-Use                        1034    integer
  70 ATTRIBUTE       Strip-User-Name                         1035    integer
  71 ATTRIBUTE       Hint                                    1040    string
  72 ATTRIBUTE       Pam-Auth                                1041    string
  73 ATTRIBUTE       Login-Time                              1042    string
  74 ATTRIBUTE       Stripped-User-Name                      1043    string
  75 ATTRIBUTE       Current-Time                            1044    string
  76 ATTRIBUTE       Realm                                   1045    string
  77 ATTRIBUTE       No-Such-Attribute                       1046    string
  78 ATTRIBUTE       Packet-Type                             1047    integer
  79 ATTRIBUTE       Proxy-To-Realm                          1048    string
  80 ATTRIBUTE       Replicate-To-Realm                      1049    string
  81 ATTRIBUTE       Acct-Session-Start-Time                 1050    date
  82 ATTRIBUTE       Acct-Unique-Session-Id                  1051    string
  83 ATTRIBUTE       Client-IP-Address                       1052    ipaddr
  84 ATTRIBUTE       Ldap-UserDn                             1053    string
  85 ATTRIBUTE       NS-MTA-MD5-Password                     1054    string
  86 ATTRIBUTE       SQL-User-Name                           1055    string
  87 ATTRIBUTE       LM-Password                             1057    octets
  88 ATTRIBUTE       NT-Password                             1058    octets
  89 ATTRIBUTE       SMB-Account-CTRL                        1059    integer
  90 ATTRIBUTE       SMB-Account-CTRL-TEXT                   1061    string
  91 ATTRIBUTE       User-Profile                            1062    string
  92 ATTRIBUTE       Digest-Realm                            1063    string
  93 ATTRIBUTE       Digest-Nonce                            1064    string
  94 ATTRIBUTE       Digest-Method                           1065    string
  95 ATTRIBUTE       Digest-URI                              1066    string
  96 ATTRIBUTE       Digest-QOP                              1067    string
  97 ATTRIBUTE       Digest-Algorithm                        1068    string
  98 ATTRIBUTE       Digest-Body-Digest                      1069    string
  99 ATTRIBUTE       Digest-CNonce                           1070    string
 100 ATTRIBUTE       Digest-Nonce-Count                      1071    string
 101 ATTRIBUTE       Digest-User-Name                        1072    string
 102 ATTRIBUTE       Pool-Name                               1073    string
 103 ATTRIBUTE       Ldap-Group                              1074    string
 104 ATTRIBUTE       Module-Success-Message                  1075    string
 105 ATTRIBUTE       Module-Failure-Message                  1076    string
 106 #               X99-Fast                1077    integer
 107 ATTRIBUTE       Rewrite-Rule                            1078    string
 108 ATTRIBUTE       Sql-Group                               1079    string
 109 ATTRIBUTE       Response-Packet-Type                    1080    integer
 110 ATTRIBUTE       Digest-HA1                              1081    string
 111 ATTRIBUTE       MS-CHAP-Use-NTLM-Auth                   1082    integer
 112 ATTRIBUTE       NTLM-User-Name                          1083    string
 113 ATTRIBUTE       Packet-Src-IP-Address                   1084    ipaddr
 114 ATTRIBUTE       Packet-Dst-IP-Address                   1085    ipaddr
 115 ATTRIBUTE       Packet-Src-Port                         1086    integer
 116 ATTRIBUTE       Packet-Dst-Port                         1087    integer
 117 ATTRIBUTE       Packet-Authentication-Vector            1088    octets
 118 ATTRIBUTE       Time-Of-Day                             1089    string
 119 ATTRIBUTE       Request-Processing-Stage                1090    string
 120 ATTRIBUTE       Cache-No-Caching                        1091    string
 121 ATTRIBUTE       Cache-Delete-Cache                      1092    string
 122 ATTRIBUTE       SHA-Password                            1093    octets
 123 ATTRIBUTE       SSHA-Password                           1094    octets
 124 ATTRIBUTE       MD5-Password                            1095    octets
 125 ATTRIBUTE       SMD5-Password                           1096    octets
 126 ATTRIBUTE       Packet-Src-IPv6-Address                 1097    ipv6addr
 127 ATTRIBUTE       Packet-Dst-IPv6-Address                 1098    ipv6addr
 128 ATTRIBUTE       Server-Identity                         1099    string
 129 ATTRIBUTE       Cleartext-Password                      1100    string
 130 ATTRIBUTE       Password-With-Header                    1101    string
 131
 132 #
 133 #       Range:  1200-1279
 134 #               EAP-SIM (and other EAP type) weirdness.
 135 #
 136 #       For EAP-SIM, some attribute definitions for database interface
 137 #
 138 ATTRIBUTE       EAP-Sim-Subtype                         1200    integer
 139
 140 ATTRIBUTE       EAP-Sim-Rand1                           1201    octets
 141 ATTRIBUTE       EAP-Sim-Rand2                           1202    octets
 142 ATTRIBUTE       EAP-Sim-Rand3                           1203    octets
 143
 144 ATTRIBUTE       EAP-Sim-SRES1                           1204    octets
 145 ATTRIBUTE       EAP-Sim-SRES2                           1205    octets
 146 ATTRIBUTE       EAP-Sim-SRES3                           1206    octets
 147
 148 VALUE   EAP-Sim-Subtype                 Start                   10
 149 VALUE   EAP-Sim-Subtype                 Challenge               11
 150 VALUE   EAP-Sim-Subtype                 Notification            12
 151 VALUE   EAP-Sim-Subtype                 Re-authentication       13
 152
 153 # this attribute is used internally by the client code.
 154 ATTRIBUTE       EAP-Sim-State                           1207    integer
 155
 156 ATTRIBUTE       EAP-Sim-IMSI                            1208    string
 157 ATTRIBUTE       EAP-Sim-HMAC                            1209    string
 158 ATTRIBUTE       EAP-Sim-KEY                             1210    octets
 159 ATTRIBUTE       EAP-Sim-EXTRA                           1211    octets
 160
 161 ATTRIBUTE       EAP-Sim-KC1                             1212    octets
 162 ATTRIBUTE       EAP-Sim-KC2                             1213    octets
 163 ATTRIBUTE       EAP-Sim-KC3                             1214    octets
 164
 165 #
 166 #       Range:  1280 - 1535
 167 #               EAP-type specific attributes
 168 #
 169
 170 # these are PW_EAP_X  + 1280
 171 ATTRIBUTE       EAP-Type-Identity                       1281    string
 172 ATTRIBUTE       EAP-Type-Notification                   1282    string
 173 ATTRIBUTE       EAP-Type-NAK                            1283    string
 174 ATTRIBUTE       EAP-Type-MD5                            1284    octets
 175 ATTRIBUTE       EAP-Type-OTP                            1285    string
 176 ATTRIBUTE       EAP-Type-GTC                            1286    string
 177 ATTRIBUTE       EAP-Type-TLS                            1297    octets
 178 ATTRIBUTE       EAP-Type-SIM                            1298    octets
 179 ATTRIBUTE       EAP-Type-LEAP                           1301    octets
 180 ATTRIBUTE       EAP-Type-SIM2                           1302    octets
 181 ATTRIBUTE       EAP-Type-TTLS                           1305    octets
 182 ATTRIBUTE       EAP-Type-PEAP                           1309    octets
 183
 184 #
 185 #       Range:  1536 - 1791
 186 #               EAP Sim sub-types.
 187 #
 188
 189 # these are PW_EAP_SIM_X + 1536
 190 ATTRIBUTE       EAP-Sim-RAND                            1537    octets
 191 ATTRIBUTE       EAP-Sim-PADDING                         1542    octets
 192 ATTRIBUTE       EAP-Sim-NONCE_MT                        1543    octets
 193 ATTRIBUTE       EAP-Sim-PERMANENT_ID_REQ                1546    octets
 194 ATTRIBUTE       EAP-Sim-MAC                             1547    octets
 195 ATTRIBUTE       EAP-Sim-NOTIFICATION                    1548    octets
 196 ATTRIBUTE       EAP-Sim-ANY_ID_REQ                      1549    octets
 197 ATTRIBUTE       EAP-Sim-IDENTITY                        1550    octets
 198 ATTRIBUTE       EAP-Sim-VERSION_LIST                    1551    octets
 199 ATTRIBUTE       EAP-Sim-SELECTED_VERSION                1552    octets
 200 ATTRIBUTE       EAP-Sim-FULLAUTH_ID_REQ                 1553    octets
 201 ATTRIBUTE       EAP-Sim-COUNTER                         1555    octets
 202 ATTRIBUTE       EAP-Sim-COUNTER_TOO_SMALL               1556    octets
 203 ATTRIBUTE       EAP-Sim-NONCE_S                         1557    octets
 204 ATTRIBUTE       EAP-Sim-IV                              1665    octets
 205 ATTRIBUTE       EAP-Sim-ENCR_DATA                       1666    octets
 206 ATTRIBUTE       EAP-Sim-NEXT_PSEUDONUM                  1668    octets
 207 ATTRIBUTE       EAP-Sim-NEXT_REAUTH_ID                  1669    octets
 208 ATTRIBUTE       EAP-Sim-CHECKCODE                       1670    octets
 209
 210 #
 211 #       Range: 1800-1899
 212 #              Temporary attributes, for local storage.
 213 #
 214 ATTRIBUTE       Tmp-String-0                            1800    string
 215 ATTRIBUTE       Tmp-String-1                            1801    string
 216 ATTRIBUTE       Tmp-String-2                            1802    string
 217 ATTRIBUTE       Tmp-String-3                            1803    string
 218 ATTRIBUTE       Tmp-String-4                            1804    string
 219 ATTRIBUTE       Tmp-String-5                            1805    string
 220 ATTRIBUTE       Tmp-String-6                            1806    string
 221 ATTRIBUTE       Tmp-String-7                            1807    string
 222 ATTRIBUTE       Tmp-String-8                            1808    string
 223 ATTRIBUTE       Tmp-String-9                            1809    string
 224
 225 ATTRIBUTE       Tmp-Integer-0                           1810    integer
 226 ATTRIBUTE       Tmp-Integer-1                           1811    integer
 227 ATTRIBUTE       Tmp-Integer-2                           1812    integer
 228 ATTRIBUTE       Tmp-Integer-3                           1813    integer
 229 ATTRIBUTE       Tmp-Integer-4                           1814    integer
 230 ATTRIBUTE       Tmp-Integer-5                           1815    integer
 231 ATTRIBUTE       Tmp-Integer-6                           1816    integer
 232 ATTRIBUTE       Tmp-Integer-7                           1817    integer
 233 ATTRIBUTE       Tmp-Integer-8                           1818    integer
 234 ATTRIBUTE       Tmp-Integer-9                           1819    integer
 235
 236 ATTRIBUTE       Tmp-IP-Address-0                        1820    ipaddr
 237 ATTRIBUTE       Tmp-IP-Address-1                        1821    ipaddr
 238 ATTRIBUTE       Tmp-IP-Address-2                        1822    ipaddr
 239 ATTRIBUTE       Tmp-IP-Address-3                        1823    ipaddr
 240 ATTRIBUTE       Tmp-IP-Address-4                        1824    ipaddr
 241 ATTRIBUTE       Tmp-IP-Address-5                        1825    ipaddr
 242 ATTRIBUTE       Tmp-IP-Address-6                        1826    ipaddr
 243 ATTRIBUTE       Tmp-IP-Address-7                        1827    ipaddr
 244 ATTRIBUTE       Tmp-IP-Address-8                        1828    ipaddr
 245 ATTRIBUTE       Tmp-IP-Address-9                        1829    ipaddr
 246
 247 #
 248 #       Range:  1900-2999
 249 #               Free
 250 #
 251 #       Range:  3000-3999
 252 #               Site-local attributes (see raddb/dictionary.in)
 253 #               Do NOT define attributes in this range!
 254 #
 255 #       Range:  4000-65535
 256 #               Unused
 257 #
 258 #       Range:  65536-
 259 #               Invalid.  Don't use.
 260 #
 261
 262 #
 263 #       Non-Protocol Integer Translations
 264 #
 265
 266 VALUE   Auth-Type                       Local                   0
 267 VALUE   Auth-Type                       System                  1
 268 VALUE   Auth-Type                       SecurID                 2
 269 VALUE   Auth-Type                       Crypt-Local             3
 270 VALUE   Auth-Type                       Reject                  4
 271 VALUE   Auth-Type                       ActivCard               5
 272 VALUE   Auth-Type                       EAP                     6
 273 VALUE   Auth-Type                       ARAP                    7
 274
 275 #
 276 #       FreeRADIUS extensions (most originally from Cistron)
 277 #
 278 VALUE   Auth-Type                       Accept                  254
 279
 280 VALUE   Auth-Type                       PAP                     1024
 281 VALUE   Auth-Type                       CHAP                    1025
 282 # 1026 was LDAP, but we deleted it.  Adding it back will break the
 283 # ldap module.
 284 VALUE   Auth-Type                       PAM                     1027
 285 VALUE   Auth-Type                       MS-CHAP                 1028
 286 VALUE   Auth-Type                       Kerberos                1029
 287 VALUE   Auth-Type                       CRAM                    1030
 288 VALUE   Auth-Type                       NS-MTA-MD5              1031
 289 # 1032 is unused (was a duplicate of CRAM)
 290 VALUE   Auth-Type                       SMB                     1033
 291
 292 #
 293 #       Authorization type, too.
 294 #
 295 VALUE   Autz-Type                       Local                   0
 296
 297 #
 298 #       And accounting
 299 #
 300 VALUE   Acct-Type                       Local                   0
 301
 302 #
 303 #       And Session handling
 304 #
 305 VALUE   Session-Type                    Local                   0
 306
 307 #
 308 #       And Post-Auth
 309 VALUE   Post-Auth-Type                  Local                   0
 310
 311 #
 312 #       Experimental Non-Protocol Integer Translations for FreeRADIUS
 313 #
 314 VALUE   Fall-Through                    No                      0
 315 VALUE   Fall-Through                    Yes                     1
 316
 317 #VALUE          Strip-User-Name         No                      0
 318 #VALUE          Strip-User-Name         Yes                     1
 319
 320 VALUE   Packet-Type                     Access-Request          1
 321 VALUE   Packet-Type                     Access-Accept           2
 322 VALUE   Packet-Type                     Access-Reject           3
 323 VALUE   Packet-Type                     Accounting-Request      4
 324 VALUE   Packet-Type                     Accounting-Response     5
 325 VALUE   Packet-Type                     Accounting-Status       6
 326 VALUE   Packet-Type                     Password-Request        7
 327 VALUE   Packet-Type                     Password-Accept         8
 328 VALUE   Packet-Type                     Password-Reject         9
 329 VALUE   Packet-Type                     Accounting-Message      10
 330 VALUE   Packet-Type                     Access-Challenge        11
 331 VALUE   Packet-Type                     Status-Server           12
 332 VALUE   Packet-Type                     Status-Client           13
 333
 334 #
 335 #       The following packet types are described in RFC 2882,
 336 #       but they are NOT part of the RADIUS standard.  Instead,
 337 #       they are informational about vendor-specific extensions
 338 #       to the RADIUS standard.
 339 #
 340 VALUE   Packet-Type                     Resource-Free-Request   21
 341 VALUE   Packet-Type                     Resource-Free-Response  22
 342 VALUE   Packet-Type                     Resource-Query-Request  23
 343 VALUE   Packet-Type                     Resource-Query-Response 24
 344 VALUE   Packet-Type                     Alternate-Resource-Reclaim-Request 25
 345 VALUE   Packet-Type                     NAS-Reboot-Request      26
 346 VALUE   Packet-Type                     NAS-Reboot-Response     27
 347 VALUE   Packet-Type                     Next-Passcode           29
 348 VALUE   Packet-Type                     New-Pin                 30
 349 VALUE   Packet-Type                     Terminate-Session       31
 350 VALUE   Packet-Type                     Password-Expired        32
 351 VALUE   Packet-Type                     Event-Request           33
 352 VALUE   Packet-Type                     Event-Response          34
 353 VALUE   Packet-Type                     Disconnect-Request      40
 354 VALUE   Packet-Type                     Disconnect-ACK          41
 355 VALUE   Packet-Type                     Disconnect-NAK          42
 356
 357 # Old names, if no one uses them, they should be deleted.
 358 VALUE   Packet-Type                     CoF-Request             43
 359 VALUE   Packet-Type                     CoF-ACK                 44
 360 VALUE   Packet-Type                     CoF-NAK                 45
 361
 362 VALUE   Packet-Type                     CoA-Request             43
 363 VALUE   Packet-Type                     CoA-ACK                 44
 364 VALUE   Packet-Type                     CoA-NAK                 45
 365 VALUE   Packet-Type                     IP-Address-Allocate     50
 366 VALUE   Packet-Type                     IP-Address-Release      51
 367
 368 VALUE   Response-Packet-Type            Access-Request          1
 369 VALUE   Response-Packet-Type            Access-Accept           2
 370 VALUE   Response-Packet-Type            Access-Reject           3
 371 VALUE   Response-Packet-Type            Accounting-Request      4
 372 VALUE   Response-Packet-Type            Accounting-Response     5
 373 VALUE   Response-Packet-Type            Accounting-Status       6
 374 VALUE   Response-Packet-Type            Password-Request        7
 375 VALUE   Response-Packet-Type            Password-Accept         8
 376 VALUE   Response-Packet-Type            Password-Reject         9
 377 VALUE   Response-Packet-Type            Accounting-Message      10
 378 VALUE   Response-Packet-Type            Access-Challenge        11
 379 VALUE   Response-Packet-Type            Status-Server           12
 380 VALUE   Response-Packet-Type            Status-Client           13
 381
 382 #
 383 #       EAP Sub-types, inside of Request and Response packets
 384 #
 385 #       http://www.iana.org/assignments/ppp-numbers
 386 #               "PPP EAP REQUEST/RESPONSE TYPES"
 387 #
 388 #
 389 #       See dictionary.microsoft, MS-Acct-EAP-Type for similar definitions
 390 #
 391 VALUE   EAP-Type                        None                    0
 392 VALUE   EAP-Type                        Identity                1
 393 VALUE   EAP-Type                        Notification            2
 394 VALUE   EAP-Type                        NAK                     3
 395 VALUE   EAP-Type                        MD5-Challenge           4
 396 VALUE   EAP-Type                        One-Time-Password       5
 397 VALUE   EAP-Type                        Generic-Token-Card      6
 398 VALUE   EAP-Type                        RSA-Public-Key          9
 399 VALUE   EAP-Type                        DSS-Unilateral          10
 400 VALUE   EAP-Type                        KEA                     11
 401 VALUE   EAP-Type                        KEA-Validate            12
 402 VALUE   EAP-Type                        EAP-TLS                 13
 403 VALUE   EAP-Type                        Defender-Token          14
 404 VALUE   EAP-Type                        RSA-SecurID-EAP         15
 405 VALUE   EAP-Type                        Arcot-Systems-EAP       16
 406 VALUE   EAP-Type                        Cisco-LEAP              17
 407 VALUE   EAP-Type                        Nokia-IP-Smart-Card     18
 408 VALUE   EAP-Type                        SIM                     18
 409 VALUE   EAP-Type                        SRP-SHA1-Part-1         19
 410 VALUE   EAP-Type                        SRP-SHA1-Part-2         20
 411 VALUE   EAP-Type                        EAP-TTLS                21
 412 VALUE   EAP-Type                        Remote-Access-Service   22
 413 VALUE   EAP-Type                        UMTS                    23
 414 VALUE   EAP-Type                        EAP-3Com-Wireless       24
 415 VALUE   EAP-Type                        PEAP                    25
 416 VALUE   EAP-Type                        MS-EAP-Authentication   26
 417 VALUE   EAP-Type                        MAKE                    27
 418 VALUE   EAP-Type                        CRYPTOCard              28
 419 VALUE   EAP-Type                        EAP-MSCHAP-V2           29
 420 VALUE   EAP-Type                        DynamID                 30
 421 VALUE   EAP-Type                        Rob-EAP                 31
 422 VALUE   EAP-Type                        SecurID-EAP             32
 423 VALUE   EAP-Type                        MS-Authentication-TLV   33
 424 VALUE   EAP-Type                        SentriNET               34
 425 VALUE   EAP-Type                        EAP-Actiontec-Wireless  35
 426 VALUE   EAP-Type                        Cogent-Biomentric-EAP   36
 427 VALUE   EAP-Type                        AirFortress-EAP         37
 428 VALUE   EAP-Type                        EAP-HTTP-Digest         38
 429 VALUE   EAP-Type                        SecuriSuite-EAP         39
 430 VALUE   EAP-Type                        DeviceConnect-EAP       40
 431 VALUE   EAP-Type                        EAP-SPEKE               41
 432 VALUE   EAP-Type                        EAP-MOBAC               42
 433
 434 #
 435 #       These are duplicate values, to get around the problem of
 436 #       having two MS-CHAPv2 EAP types.
 437 #
 438 VALUE   EAP-Type                        Microsoft-MS-CHAPv2     26
 439 VALUE   EAP-Type                        Cisco-MS-CHAPv2         29
 440
 441 #
 442 #       And this is what most people mean by MS-CHAPv2
 443 #
 444 VALUE   EAP-Type                        MS-CHAP-V2              26
 445
 446 #
 447 #       This says TLS, but it's only valid for TTLS & PEAP.
 448 #       EAP-TLS *always* requires a client certificate.
 449 #
 450 VALUE   EAP-TLS-Require-Client-Cert     No                      0
 451 VALUE   EAP-TLS-Require-Client-Cert     Yes                     1
 452
 453 #
 454 #       These are the EAP-Code values.
 455 #
 456 VALUE   EAP-Code                        Request                 1
 457 VALUE   EAP-Code                        Response                2
 458 VALUE   EAP-Code                        Success                 3
 459 VALUE   EAP-Code                        Failure                 4
 460
 461 #
 462 #  For MS-CHAP, do we run ntlm_auth, or not.
 463 #
 464 VALUE   MS-CHAP-Use-NTLM-Auth           No                      0
 465 VALUE   MS-CHAP-Use-NTLM-Auth           Yes                     1