Add FreeRadius v2.1.6 dictionary.freeradius.internal (for completeness).

This file contains "Non Protocol Attributes used by FreeRADIUS".
The "$inlude dictionary.freeradius.internal" line in 
the Radius "dictionary" file is commented out and thus the 
dictionary.freeradius.internal file is not 
read by Wireshark as part of the Radius dictionary files load.

svn path=/trunk/; revision=29040
This commit is contained in:
Bill Meier 2009-07-09 20:10:39 +00:00
parent 59cc6f3e61
commit 8c953bc707
1 changed files with 564 additions and 0 deletions

View File

@ -0,0 +1,564 @@
# -*- text -*-
#
# Non Protocol Attributes used by FreeRADIUS
#
# $Id$
#
# The attributes number ranges are allocates as follows:
#
# Range: 500-999
# server-side attributes which can go in a reply list
# These attributes CAN go in the reply item list.
ATTRIBUTE Fall-Through 500 integer
ATTRIBUTE Exec-Program 502 string
ATTRIBUTE Exec-Program-Wait 503 string
# These attributes CANNOT go in the reply item list.
#
# Range: 1000+
# Attributes which cannot go in a reply list.
#
#
# Range: 1000-1199
# Miscellaneous server attributes.
#
#
# Non-Protocol Attributes
# These attributes are used internally by the server
#
ATTRIBUTE Auth-Type 1000 integer
ATTRIBUTE Menu 1001 string
ATTRIBUTE Termination-Menu 1002 string
ATTRIBUTE Prefix 1003 string
ATTRIBUTE Suffix 1004 string
ATTRIBUTE Group 1005 string
ATTRIBUTE Crypt-Password 1006 string
ATTRIBUTE Connect-Rate 1007 integer
ATTRIBUTE Add-Prefix 1008 string
ATTRIBUTE Add-Suffix 1009 string
ATTRIBUTE Expiration 1010 date
ATTRIBUTE Autz-Type 1011 integer
ATTRIBUTE Acct-Type 1012 integer
ATTRIBUTE Session-Type 1013 integer
ATTRIBUTE Post-Auth-Type 1014 integer
ATTRIBUTE Pre-Proxy-Type 1015 integer
ATTRIBUTE Post-Proxy-Type 1016 integer
ATTRIBUTE Pre-Acct-Type 1017 integer
#
# This is the EAP type of authentication, which is set
# by the EAP module, for informational purposes only.
#
ATTRIBUTE EAP-Type 1018 integer
ATTRIBUTE EAP-TLS-Require-Client-Cert 1019 integer
ATTRIBUTE EAP-Id 1020 integer
ATTRIBUTE EAP-Code 1021 integer
# Attribute 1022 unused, was EAP-MD5-Password, which was
# used only be radeapclient. It's been replaced by Cleartext-Password
ATTRIBUTE PEAP-Version 1023 integer
ATTRIBUTE Client-Shortname 1024 string
ATTRIBUTE Load-Balance-Key 1025 string
ATTRIBUTE Raw-Attribute 1026 octets
ATTRIBUTE TNC-VLAN-Access 1027 string
ATTRIBUTE TNC-VLAN-Isolate 1028 string
ATTRIBUTE User-Category 1029 string
ATTRIBUTE Group-Name 1030 string
ATTRIBUTE Huntgroup-Name 1031 string
ATTRIBUTE Simultaneous-Use 1034 integer
ATTRIBUTE Strip-User-Name 1035 integer
ATTRIBUTE Hint 1040 string
ATTRIBUTE Pam-Auth 1041 string
ATTRIBUTE Login-Time 1042 string
ATTRIBUTE Stripped-User-Name 1043 string
ATTRIBUTE Current-Time 1044 string
ATTRIBUTE Realm 1045 string
ATTRIBUTE No-Such-Attribute 1046 string
ATTRIBUTE Packet-Type 1047 integer
ATTRIBUTE Proxy-To-Realm 1048 string
ATTRIBUTE Replicate-To-Realm 1049 string
ATTRIBUTE Acct-Session-Start-Time 1050 date
ATTRIBUTE Acct-Unique-Session-Id 1051 string
ATTRIBUTE Client-IP-Address 1052 ipaddr
ATTRIBUTE Ldap-UserDn 1053 string
ATTRIBUTE NS-MTA-MD5-Password 1054 string
ATTRIBUTE SQL-User-Name 1055 string
ATTRIBUTE LM-Password 1057 octets
ATTRIBUTE NT-Password 1058 octets
ATTRIBUTE SMB-Account-CTRL 1059 integer
ATTRIBUTE SMB-Account-CTRL-TEXT 1061 string
ATTRIBUTE User-Profile 1062 string
ATTRIBUTE Digest-Realm 1063 string
ATTRIBUTE Digest-Nonce 1064 string
ATTRIBUTE Digest-Method 1065 string
ATTRIBUTE Digest-URI 1066 string
ATTRIBUTE Digest-QOP 1067 string
ATTRIBUTE Digest-Algorithm 1068 string
ATTRIBUTE Digest-Body-Digest 1069 string
ATTRIBUTE Digest-CNonce 1070 string
ATTRIBUTE Digest-Nonce-Count 1071 string
ATTRIBUTE Digest-User-Name 1072 string
ATTRIBUTE Pool-Name 1073 string
ATTRIBUTE Ldap-Group 1074 string
ATTRIBUTE Module-Success-Message 1075 string
ATTRIBUTE Module-Failure-Message 1076 string
# X99-Fast 1077 integer
ATTRIBUTE Rewrite-Rule 1078 string
ATTRIBUTE Sql-Group 1079 string
ATTRIBUTE Response-Packet-Type 1080 integer
ATTRIBUTE Digest-HA1 1081 string
ATTRIBUTE MS-CHAP-Use-NTLM-Auth 1082 integer
ATTRIBUTE NTLM-User-Name 1083 string
ATTRIBUTE Packet-Src-IP-Address 1084 ipaddr
ATTRIBUTE Packet-Dst-IP-Address 1085 ipaddr
ATTRIBUTE Packet-Src-Port 1086 integer
ATTRIBUTE Packet-Dst-Port 1087 integer
ATTRIBUTE Packet-Authentication-Vector 1088 octets
ATTRIBUTE Time-Of-Day 1089 string
ATTRIBUTE Request-Processing-Stage 1090 string
ATTRIBUTE Cache-No-Caching 1091 string
ATTRIBUTE Cache-Delete-Cache 1092 string
ATTRIBUTE SHA-Password 1093 octets
ATTRIBUTE SSHA-Password 1094 octets
ATTRIBUTE SHA1-Password 1093 octets
ATTRIBUTE SSHA1-Password 1094 octets
ATTRIBUTE MD5-Password 1095 octets
ATTRIBUTE SMD5-Password 1096 octets
ATTRIBUTE Packet-Src-IPv6-Address 1097 ipv6addr
ATTRIBUTE Packet-Dst-IPv6-Address 1098 ipv6addr
ATTRIBUTE Virtual-Server 1099 string
ATTRIBUTE Cleartext-Password 1100 string
ATTRIBUTE Password-With-Header 1101 string
ATTRIBUTE Inner-Tunnel-User-Name 1102 string
#
# EAP-IKEv2 is experimental.
#
ATTRIBUTE EAP-IKEv2-IDType 1103 integer
VALUE EAP-IKEv2-IDType IPV4_ADDR 1
VALUE EAP-IKEv2-IDType FQDN 2
VALUE EAP-IKEv2-IDType RFC822_ADDR 3
VALUE EAP-IKEv2-IDType IPV6_ADDR 5
VALUE EAP-IKEv2-IDType DER_ASN1_DN 9
VALUE EAP-IKEv2-IDType DER_ASN1_GN 10
VALUE EAP-IKEv2-IDType KEY_ID 11
ATTRIBUTE EAP-IKEv2-ID 1104 string
ATTRIBUTE EAP-IKEv2-Secret 1105 string
ATTRIBUTE EAP-IKEv2-AuthType 1106 integer
VALUE EAP-IKEv2-AuthType none 0
VALUE EAP-IKEv2-AuthType secret 1
VALUE EAP-IKEv2-AuthType cert 2
VALUE EAP-IKEv2-AuthType both 3
ATTRIBUTE Send-Disconnect-Request 1107 integer
ATTRIBUTE Send-CoA-Request 1107 integer
VALUE Send-CoA-Request No 0
VALUE Send-CoA-Request Yes 1
ATTRIBUTE Module-Return-Code 1108 integer
VALUE Module-Return-Code reject 0
VALUE Module-Return-Code fail 1
VALUE Module-Return-Code ok 2
VALUE Module-Return-Code handled 3
VALUE Module-Return-Code invalid 4
VALUE Module-Return-Code userlock 5
VALUE Module-Return-Code notfound 6
VALUE Module-Return-Code noop 7
VALUE Module-Return-Code updated 8
ATTRIBUTE Packet-Original-Timestamp 1109 date
ATTRIBUTE SQL-Table-Name 1110 string
ATTRIBUTE Home-Server-Pool 1111 string
ATTRIBUTE FreeRADIUS-Client-IP-Address 1120 ipaddr
ATTRIBUTE FreeRADIUS-Client-IPv6-Address 1121 ipv6addr
ATTRIBUTE FreeRADIUS-Client-Require-MA 1122 integer
VALUE FreeRADIUS-Client-Require-MA no 0
VALUE FreeRADIUS-Client-Require-MA yes 1
ATTRIBUTE FreeRADIUS-Client-Secret 1123 string
ATTRIBUTE FreeRADIUS-Client-Shortname 1124 string
ATTRIBUTE FreeRADIUS-Client-NAS-Type 1125 string
ATTRIBUTE FreeRADIUS-Client-Virtual-Server 1126 string
# For session resumption
ATTRIBUTE Allow-Session-Resumption 1127 integer
VALUE Allow-Session-Resumption no 0
VALUE Allow-Session-Resumption yes 1
ATTRIBUTE EAP-Session-Resumed 1128 integer
VALUE EAP-Session-Resumed no 0
VALUE EAP-Session-Resumed yes 1
#
# Expose EAP keys in the reply.
#
ATTRIBUTE EAP-MSK 1129 octets
ATTRIBUTE EAP-EMSK 1130 octets
#
# Range: 1200-1279
# EAP-SIM (and other EAP type) weirdness.
#
# For EAP-SIM, some attribute definitions for database interface
#
ATTRIBUTE EAP-Sim-Subtype 1200 integer
ATTRIBUTE EAP-Sim-Rand1 1201 octets
ATTRIBUTE EAP-Sim-Rand2 1202 octets
ATTRIBUTE EAP-Sim-Rand3 1203 octets
ATTRIBUTE EAP-Sim-SRES1 1204 octets
ATTRIBUTE EAP-Sim-SRES2 1205 octets
ATTRIBUTE EAP-Sim-SRES3 1206 octets
VALUE EAP-Sim-Subtype Start 10
VALUE EAP-Sim-Subtype Challenge 11
VALUE EAP-Sim-Subtype Notification 12
VALUE EAP-Sim-Subtype Re-authentication 13
# this attribute is used internally by the client code.
ATTRIBUTE EAP-Sim-State 1207 integer
ATTRIBUTE EAP-Sim-IMSI 1208 string
ATTRIBUTE EAP-Sim-HMAC 1209 string
ATTRIBUTE EAP-Sim-KEY 1210 octets
ATTRIBUTE EAP-Sim-EXTRA 1211 octets
ATTRIBUTE EAP-Sim-KC1 1212 octets
ATTRIBUTE EAP-Sim-KC2 1213 octets
ATTRIBUTE EAP-Sim-KC3 1214 octets
#
# Range: 1280 - 1535
# EAP-type specific attributes
#
# these are PW_EAP_X + 1280
ATTRIBUTE EAP-Type-Identity 1281 string
ATTRIBUTE EAP-Type-Notification 1282 string
ATTRIBUTE EAP-Type-NAK 1283 string
ATTRIBUTE EAP-Type-MD5 1284 octets
ATTRIBUTE EAP-Type-OTP 1285 string
ATTRIBUTE EAP-Type-GTC 1286 string
ATTRIBUTE EAP-Type-TLS 1297 octets
ATTRIBUTE EAP-Type-SIM 1298 octets
ATTRIBUTE EAP-Type-LEAP 1301 octets
ATTRIBUTE EAP-Type-SIM2 1302 octets
ATTRIBUTE EAP-Type-TTLS 1305 octets
ATTRIBUTE EAP-Type-PEAP 1309 octets
#
# Range: 1536 - 1791
# EAP Sim sub-types.
#
# these are PW_EAP_SIM_X + 1536
ATTRIBUTE EAP-Sim-RAND 1537 octets
ATTRIBUTE EAP-Sim-PADDING 1542 octets
ATTRIBUTE EAP-Sim-NONCE_MT 1543 octets
ATTRIBUTE EAP-Sim-PERMANENT_ID_REQ 1546 octets
ATTRIBUTE EAP-Sim-MAC 1547 octets
ATTRIBUTE EAP-Sim-NOTIFICATION 1548 octets
ATTRIBUTE EAP-Sim-ANY_ID_REQ 1549 octets
ATTRIBUTE EAP-Sim-IDENTITY 1550 octets
ATTRIBUTE EAP-Sim-VERSION_LIST 1551 octets
ATTRIBUTE EAP-Sim-SELECTED_VERSION 1552 octets
ATTRIBUTE EAP-Sim-FULLAUTH_ID_REQ 1553 octets
ATTRIBUTE EAP-Sim-COUNTER 1555 octets
ATTRIBUTE EAP-Sim-COUNTER_TOO_SMALL 1556 octets
ATTRIBUTE EAP-Sim-NONCE_S 1557 octets
ATTRIBUTE EAP-Sim-IV 1665 octets
ATTRIBUTE EAP-Sim-ENCR_DATA 1666 octets
ATTRIBUTE EAP-Sim-NEXT_PSEUDONUM 1668 octets
ATTRIBUTE EAP-Sim-NEXT_REAUTH_ID 1669 octets
ATTRIBUTE EAP-Sim-CHECKCODE 1670 octets
#
# Range: 1800-1899
# Temporary attributes, for local storage.
#
ATTRIBUTE Tmp-String-0 1800 string
ATTRIBUTE Tmp-String-1 1801 string
ATTRIBUTE Tmp-String-2 1802 string
ATTRIBUTE Tmp-String-3 1803 string
ATTRIBUTE Tmp-String-4 1804 string
ATTRIBUTE Tmp-String-5 1805 string
ATTRIBUTE Tmp-String-6 1806 string
ATTRIBUTE Tmp-String-7 1807 string
ATTRIBUTE Tmp-String-8 1808 string
ATTRIBUTE Tmp-String-9 1809 string
ATTRIBUTE Tmp-Integer-0 1810 integer
ATTRIBUTE Tmp-Integer-1 1811 integer
ATTRIBUTE Tmp-Integer-2 1812 integer
ATTRIBUTE Tmp-Integer-3 1813 integer
ATTRIBUTE Tmp-Integer-4 1814 integer
ATTRIBUTE Tmp-Integer-5 1815 integer
ATTRIBUTE Tmp-Integer-6 1816 integer
ATTRIBUTE Tmp-Integer-7 1817 integer
ATTRIBUTE Tmp-Integer-8 1818 integer
ATTRIBUTE Tmp-Integer-9 1819 integer
ATTRIBUTE Tmp-IP-Address-0 1820 ipaddr
ATTRIBUTE Tmp-IP-Address-1 1821 ipaddr
ATTRIBUTE Tmp-IP-Address-2 1822 ipaddr
ATTRIBUTE Tmp-IP-Address-3 1823 ipaddr
ATTRIBUTE Tmp-IP-Address-4 1824 ipaddr
ATTRIBUTE Tmp-IP-Address-5 1825 ipaddr
ATTRIBUTE Tmp-IP-Address-6 1826 ipaddr
ATTRIBUTE Tmp-IP-Address-7 1827 ipaddr
ATTRIBUTE Tmp-IP-Address-8 1828 ipaddr
ATTRIBUTE Tmp-IP-Address-9 1829 ipaddr
# Range: 1900-1909
# WiMAX server-side attributes.
#
# These are NOT sent in a packet, but are otherwise
# available for testing and validation. The various
# things that *are* sent in a packet are derived from
# these attributes.
#
ATTRIBUTE WiMAX-MN-NAI 1900 string
ATTRIBUTE WiMAX-FA-IP-Address 1901 ipaddr
ATTRIBUTE WiMAX-MN-FA 1902 octets
#
# Range: 1910-2999
# Free
#
# Range: 3000-3999
# Site-local attributes (see raddb/dictionary.in)
# Do NOT define attributes in this range!
#
# Range: 4000-65535
# Unused
#
# Range: 65536-
# Invalid. Don't use.
#
#
# Non-Protocol Integer Translations
#
VALUE Auth-Type Local 0
VALUE Auth-Type System 1
VALUE Auth-Type SecurID 2
VALUE Auth-Type Crypt-Local 3
VALUE Auth-Type Reject 4
VALUE Auth-Type ActivCard 5
VALUE Auth-Type EAP 6
VALUE Auth-Type ARAP 7
#
# FreeRADIUS extensions (most originally from Cistron)
#
VALUE Auth-Type Accept 254
VALUE Auth-Type PAP 1024
VALUE Auth-Type CHAP 1025
# 1026 was LDAP, but we deleted it. Adding it back will break the
# ldap module.
VALUE Auth-Type PAM 1027
VALUE Auth-Type MS-CHAP 1028
VALUE Auth-Type MSCHAP 1028
VALUE Auth-Type Kerberos 1029
VALUE Auth-Type CRAM 1030
VALUE Auth-Type NS-MTA-MD5 1031
# 1032 is unused (was a duplicate of CRAM)
VALUE Auth-Type SMB 1033
#
# Authorization type, too.
#
VALUE Autz-Type Local 0
#
# And accounting
#
VALUE Acct-Type Local 0
#
# And Session handling
#
VALUE Session-Type Local 0
#
# And Post-Auth
VALUE Post-Auth-Type Local 0
#
# Experimental Non-Protocol Integer Translations for FreeRADIUS
#
VALUE Fall-Through No 0
VALUE Fall-Through Yes 1
VALUE Strip-User-Name No 0
VALUE Strip-User-Name Yes 1
VALUE Packet-Type Access-Request 1
VALUE Packet-Type Access-Accept 2
VALUE Packet-Type Access-Reject 3
VALUE Packet-Type Accounting-Request 4
VALUE Packet-Type Accounting-Response 5
VALUE Packet-Type Accounting-Status 6
VALUE Packet-Type Password-Request 7
VALUE Packet-Type Password-Accept 8
VALUE Packet-Type Password-Reject 9
VALUE Packet-Type Accounting-Message 10
VALUE Packet-Type Access-Challenge 11
VALUE Packet-Type Status-Server 12
VALUE Packet-Type Status-Client 13
#
# The following packet types are described in RFC 2882,
# but they are NOT part of the RADIUS standard. Instead,
# they are informational about vendor-specific extensions
# to the RADIUS standard.
#
VALUE Packet-Type Resource-Free-Request 21
VALUE Packet-Type Resource-Free-Response 22
VALUE Packet-Type Resource-Query-Request 23
VALUE Packet-Type Resource-Query-Response 24
VALUE Packet-Type Alternate-Resource-Reclaim-Request 25
VALUE Packet-Type NAS-Reboot-Request 26
VALUE Packet-Type NAS-Reboot-Response 27
VALUE Packet-Type Next-Passcode 29
VALUE Packet-Type New-Pin 30
VALUE Packet-Type Terminate-Session 31
VALUE Packet-Type Password-Expired 32
VALUE Packet-Type Event-Request 33
VALUE Packet-Type Event-Response 34
# RFC 3576 allocates packet types 40-45
VALUE Packet-Type Disconnect-Request 40
VALUE Packet-Type Disconnect-ACK 41
VALUE Packet-Type Disconnect-NAK 42
VALUE Packet-Type CoA-Request 43
VALUE Packet-Type CoA-ACK 44
VALUE Packet-Type CoA-NAK 45
VALUE Packet-Type IP-Address-Allocate 50
VALUE Packet-Type IP-Address-Release 51
VALUE Response-Packet-Type Access-Request 1
VALUE Response-Packet-Type Access-Accept 2
VALUE Response-Packet-Type Access-Reject 3
VALUE Response-Packet-Type Accounting-Request 4
VALUE Response-Packet-Type Accounting-Response 5
VALUE Response-Packet-Type Accounting-Status 6
VALUE Response-Packet-Type Password-Request 7
VALUE Response-Packet-Type Password-Accept 8
VALUE Response-Packet-Type Password-Reject 9
VALUE Response-Packet-Type Accounting-Message 10
VALUE Response-Packet-Type Access-Challenge 11
VALUE Response-Packet-Type Status-Server 12
VALUE Response-Packet-Type Status-Client 13
VALUE Response-Packet-Type Disconnect-Request 40
VALUE Response-Packet-Type Disconnect-ACK 41
VALUE Response-Packet-Type Disconnect-NAK 42
VALUE Response-Packet-Type CoA-Request 43
VALUE Response-Packet-Type CoA-ACK 44
VALUE Response-Packet-Type CoA-NAK 45
#
# Special value
#
VALUE Response-Packet-Type Do-Not-Respond 256
#
# EAP Sub-types, inside of Request and Response packets
#
# http://www.iana.org/assignments/ppp-numbers
# "PPP EAP REQUEST/RESPONSE TYPES"
#
#
# See dictionary.microsoft, MS-Acct-EAP-Type for similar definitions
#
VALUE EAP-Type None 0
VALUE EAP-Type Identity 1
VALUE EAP-Type Notification 2
VALUE EAP-Type NAK 3
VALUE EAP-Type MD5-Challenge 4
VALUE EAP-Type One-Time-Password 5
VALUE EAP-Type Generic-Token-Card 6
VALUE EAP-Type RSA-Public-Key 9
VALUE EAP-Type DSS-Unilateral 10
VALUE EAP-Type KEA 11
VALUE EAP-Type KEA-Validate 12
VALUE EAP-Type EAP-TLS 13
VALUE EAP-Type Defender-Token 14
VALUE EAP-Type RSA-SecurID-EAP 15
VALUE EAP-Type Arcot-Systems-EAP 16
VALUE EAP-Type Cisco-LEAP 17
VALUE EAP-Type Nokia-IP-Smart-Card 18
VALUE EAP-Type SIM 18
VALUE EAP-Type SRP-SHA1-Part-1 19
VALUE EAP-Type SRP-SHA1-Part-2 20
VALUE EAP-Type EAP-TTLS 21
VALUE EAP-Type Remote-Access-Service 22
VALUE EAP-Type UMTS 23
VALUE EAP-Type EAP-3Com-Wireless 24
VALUE EAP-Type PEAP 25
VALUE EAP-Type MS-EAP-Authentication 26
VALUE EAP-Type MAKE 27
VALUE EAP-Type CRYPTOCard 28
VALUE EAP-Type EAP-MSCHAP-V2 29
VALUE EAP-Type DynamID 30
VALUE EAP-Type Rob-EAP 31
VALUE EAP-Type SecurID-EAP 32
VALUE EAP-Type MS-Authentication-TLV 33
VALUE EAP-Type SentriNET 34
VALUE EAP-Type EAP-Actiontec-Wireless 35
VALUE EAP-Type Cogent-Biomentric-EAP 36
VALUE EAP-Type AirFortress-EAP 37
VALUE EAP-Type EAP-HTTP-Digest 38
VALUE EAP-Type SecuriSuite-EAP 39
VALUE EAP-Type DeviceConnect-EAP 40
VALUE EAP-Type EAP-SPEKE 41
VALUE EAP-Type EAP-MOBAC 42
#
# These are duplicate values, to get around the problem of
# having two MS-CHAPv2 EAP types.
#
VALUE EAP-Type Microsoft-MS-CHAPv2 26
VALUE EAP-Type Cisco-MS-CHAPv2 29
#
# And this is what most people mean by MS-CHAPv2
#
VALUE EAP-Type MS-CHAP-V2 26
#
# This says TLS, but it's only valid for TTLS & PEAP.
# EAP-TLS *always* requires a client certificate.
#
VALUE EAP-TLS-Require-Client-Cert No 0
VALUE EAP-TLS-Require-Client-Cert Yes 1
#
# These are the EAP-Code values.
#
VALUE EAP-Code Request 1
VALUE EAP-Code Response 2
VALUE EAP-Code Success 3
VALUE EAP-Code Failure 4
#
# For MS-CHAP, do we run ntlm_auth, or not.
#
VALUE MS-CHAP-Use-NTLM-Auth No 0
VALUE MS-CHAP-Use-NTLM-Auth Yes 1