3 # Microsoft's VSA's, from RFC 2548
10 BEGIN-VENDOR Microsoft
11 ATTRIBUTE MS-CHAP-Response 1 octets[50]
12 ATTRIBUTE MS-CHAP-Error 2 string
13 ATTRIBUTE MS-CHAP-CPW-1 3 octets[70]
14 ATTRIBUTE MS-CHAP-CPW-2 4 octets[84]
15 ATTRIBUTE MS-CHAP-LM-Enc-PW 5 octets
16 ATTRIBUTE MS-CHAP-NT-Enc-PW 6 octets
17 ATTRIBUTE MS-MPPE-Encryption-Policy 7 integer
19 VALUE MS-MPPE-Encryption-Policy Encryption-Allowed 1
20 VALUE MS-MPPE-Encryption-Policy Encryption-Required 2
22 # This is referred to as both singular and plural in the RFC.
23 # Plural seems to make more sense.
24 ATTRIBUTE MS-MPPE-Encryption-Type 8 integer
25 ATTRIBUTE MS-MPPE-Encryption-Types 8 integer
27 VALUE MS-MPPE-Encryption-Types RC4-40bit-Allowed 1
28 VALUE MS-MPPE-Encryption-Types RC4-128bit-Allowed 2
29 VALUE MS-MPPE-Encryption-Types RC4-40or128-bit-Allowed 6
31 ATTRIBUTE MS-RAS-Vendor 9 integer # content is Vendor-ID
32 ATTRIBUTE MS-CHAP-Domain 10 string
33 ATTRIBUTE MS-CHAP-Challenge 11 octets
34 ATTRIBUTE MS-CHAP-MPPE-Keys 12 octets encrypt=1
35 ATTRIBUTE MS-BAP-Usage 13 integer
36 ATTRIBUTE MS-Link-Utilization-Threshold 14 integer # values are 1-100
37 ATTRIBUTE MS-Link-Drop-Time-Limit 15 integer
38 ATTRIBUTE MS-MPPE-Send-Key 16 octets encrypt=2
39 ATTRIBUTE MS-MPPE-Recv-Key 17 octets encrypt=2
40 ATTRIBUTE MS-RAS-Version 18 string
41 ATTRIBUTE MS-Old-ARAP-Password 19 octets
42 ATTRIBUTE MS-New-ARAP-Password 20 octets
43 ATTRIBUTE MS-ARAP-PW-Change-Reason 21 integer
45 ATTRIBUTE MS-Filter 22 octets
46 ATTRIBUTE MS-Acct-Auth-Type 23 integer
47 ATTRIBUTE MS-Acct-EAP-Type 24 integer
49 ATTRIBUTE MS-CHAP2-Response 25 octets[50]
50 ATTRIBUTE MS-CHAP2-Success 26 octets
51 ATTRIBUTE MS-CHAP2-CPW 27 octets[68]
53 ATTRIBUTE MS-Primary-DNS-Server 28 ipaddr
54 ATTRIBUTE MS-Secondary-DNS-Server 29 ipaddr
55 ATTRIBUTE MS-Primary-NBNS-Server 30 ipaddr
56 ATTRIBUTE MS-Secondary-NBNS-Server 31 ipaddr
58 #ATTRIBUTE MS-ARAP-Challenge 33 octets[8]
62 # http://download.microsoft.com/download/9/5/E/95EF66AF-9026-4BB0-A41D-A4F81802D92C/%5BMS-RNAP%5D.pdf
64 ATTRIBUTE MS-RAS-Client-Name 34 string
65 ATTRIBUTE MS-RAS-Client-Version 35 string
66 ATTRIBUTE MS-Quarantine-IPFilter 36 octets
67 ATTRIBUTE MS-Quarantine-Session-Timeout 37 integer
68 ATTRIBUTE MS-User-Security-Identity 40 string
69 ATTRIBUTE MS-Identity-Type 41 integer
70 ATTRIBUTE MS-Service-Class 42 string
71 ATTRIBUTE MS-Quarantine-User-Class 44 string
72 ATTRIBUTE MS-Quarantine-State 45 integer
73 ATTRIBUTE MS-Quarantine-Grace-Time 46 integer
74 ATTRIBUTE MS-Network-Access-Server-Type 47 integer
75 ATTRIBUTE MS-AFW-Zone 48 integer
77 VALUE MS-AFW-Zone MS-AFW-Zone-Boundary-Policy 1
78 VALUE MS-AFW-Zone MS-AFW-Zone-Unprotected-Policy 2
79 VALUE MS-AFW-Zone MS-AFW-Zone-Protected-Policy 3
81 ATTRIBUTE MS-AFW-Protection-Level 49 integer
83 VALUE MS-AFW-Protection-Level HECP-Response-Sign-Only 1
84 VALUE MS-AFW-Protection-Level HECP-Response-Sign-And-Encrypt 2
86 ATTRIBUTE MS-Machine-Name 50 string
87 ATTRIBUTE MS-IPv6-Filter 51 octets
88 ATTRIBUTE MS-IPv4-Remediation-Servers 52 octets
89 ATTRIBUTE MS-IPv6-Remediation-Servers 53 octets
90 ATTRIBUTE MS-RNAP-Not-Quarantine-Capable 54 integer
92 VALUE MS-RNAP-Not-Quarantine-Capable SoH-Sent 0
93 VALUE MS-RNAP-Not-Quarantine-Capable SoH-Not-Sent 1
95 ATTRIBUTE MS-Quarantine-SOH 55 octets
96 ATTRIBUTE MS-RAS-Correlation 56 octets
98 # Or this might be 56?
99 ATTRIBUTE MS-Extended-Quarantine-State 57 integer
101 ATTRIBUTE MS-HCAP-User-Groups 58 string
102 ATTRIBUTE MS-HCAP-Location-Group-Name 59 string
103 ATTRIBUTE MS-HCAP-User-Name 60 string
104 ATTRIBUTE MS-User-IPv4-Address 61 ipaddr
105 ATTRIBUTE MS-User-IPv6-Address 62 ipv6addr
106 ATTRIBUTE MS-TSG-Device-Redirection 63 integer
109 # Integer Translations
112 # MS-BAP-Usage Values
114 VALUE MS-BAP-Usage Not-Allowed 0
115 VALUE MS-BAP-Usage Allowed 1
116 VALUE MS-BAP-Usage Required 2
118 # MS-ARAP-Password-Change-Reason Values
120 VALUE MS-ARAP-PW-Change-Reason Just-Change-Password 1
121 VALUE MS-ARAP-PW-Change-Reason Expired-Password 2
122 VALUE MS-ARAP-PW-Change-Reason Admin-Requires-Password-Change 3
123 VALUE MS-ARAP-PW-Change-Reason Password-Too-Short 4
125 # MS-Acct-Auth-Type Values
127 VALUE MS-Acct-Auth-Type PAP 1
128 VALUE MS-Acct-Auth-Type CHAP 2
129 VALUE MS-Acct-Auth-Type MS-CHAP-1 3
130 VALUE MS-Acct-Auth-Type MS-CHAP-2 4
131 VALUE MS-Acct-Auth-Type EAP 5
133 # MS-Acct-EAP-Type Values
135 VALUE MS-Acct-EAP-Type MD5 4
136 VALUE MS-Acct-EAP-Type OTP 5
137 VALUE MS-Acct-EAP-Type Generic-Token-Card 6
138 VALUE MS-Acct-EAP-Type TLS 13
140 # MS-Identity-Type Values
142 VALUE MS-Identity-Type Machine-Health-Check 1
143 VALUE MS-Identity-Type Ignore-User-Lookup-Failure 2
145 # MS-Quarantine-State Values
147 VALUE MS-Quarantine-State Full-Access 0
148 VALUE MS-Quarantine-State Quarantine 1
149 VALUE MS-Quarantine-State Probation 2
151 # MS-Network-Access-Server-Type Values
153 VALUE MS-Network-Access-Server-Type Unspecified 0
154 VALUE MS-Network-Access-Server-Type Terminal-Server-Gateway 1
155 VALUE MS-Network-Access-Server-Type Remote-Access-Server 2
156 VALUE MS-Network-Access-Server-Type DHCP-Server 3
157 VALUE MS-Network-Access-Server-Type Wireless-Access-Point 4
158 VALUE MS-Network-Access-Server-Type HRA 5
159 VALUE MS-Network-Access-Server-Type HCAP-Server 6
161 # MS-Extended-Quarantine-State Values
163 VALUE MS-Extended-Quarantine-State Transition 1
164 VALUE MS-Extended-Quarantine-State Infected 2
165 VALUE MS-Extended-Quarantine-State Unknown 3
166 VALUE MS-Extended-Quarantine-State No-Data 4