Updated dictionary files released as part of FreeRadius v2.1.7 thru v…

…2.1.10

svn path=/trunk/; revision=37377

radius/dictionary.cisco

@@ -125,6 +125,7 @@ ATTRIBUTE	Cisco-Maximum-Channels			235	integer
 ATTRIBUTE	Cisco-Data-Filter			242	integer
 ATTRIBUTE	Cisco-Call-Filter			243	integer
 ATTRIBUTE	Cisco-Idle-Limit			244	integer
+ATTRIBUTE	Cisco-Subscriber-Password		249	string
 ATTRIBUTE	Cisco-Account-Info			250	string
 ATTRIBUTE	Cisco-Service-Info			251	string
 ATTRIBUTE	Cisco-Command-Code			252	string

radius/dictionary.compat

@@ -26,6 +26,7 @@ VALUE	Service-Type			Shell-User		6
 VALUE	Auth-Type			Unix			1
 VALUE	Service-Type			Dialback-Login-User	3
 VALUE	Service-Type			Dialback-Framed-User	4
+VALUE	Service-Type			Dialout-Framed-User	5
 
 #
 #	For compatibility with MERIT users files.

radius/dictionary.erx

@@ -7,6 +7,15 @@
 #
 # Version:	$Id$
 #
+
+# This dictionary applies to access services on Juniper JUNOS (M/MX)
+# based platforms as well as JUNOSe, although some of the attributes
+# have been given new names on JUNOS:
+#	http://www.juniper.net/techpubs/en_US/junos10.3/topics/reference/general/aaa-subscriber-access-radius-vsa.html
+#
+# In this file, we keep the ERX prefix and the JUNOSe attribute names
+# for backwards compatibility
+#
 # Juniper ERX dictionaries are available at:
 #	http://www.juniper.net/techpubs/software/erx/junose71/unisphere7-1.dct
 #	http://www.juniper.net/techpubs/software/erx/junose700/unisphere7-0.dct
@@ -156,6 +165,10 @@ ATTRIBUTE	ERX-IGMP-No-Tracking-V2-Grps		103	integer
 ATTRIBUTE	ERX-MLD-Explicit-Tracking		104	integer
 ATTRIBUTE	ERX-MLD-No-Tracking-V1-Grps		105	integer
 
+ATTRIBUTE	ERX-IPv6-Ingress-Policy-Name		106	string
+ATTRIBUTE	ERX-IPv6-Egress-Policy-Name		107	string
+ATTRIBUTE	ERX-CoS-Shaping-Pmt-Type		108	string
+
 ATTRIBUTE	ERX-Acc-Loop-Cir-Id			110	string
 ATTRIBUTE	ERX-Acc-Aggr-Cir-Id-Bin			111	octets
 ATTRIBUTE	ERX-Acc-Aggr-Cir-Id-Asc			112	string
@@ -187,6 +200,16 @@ ATTRIBUTE	ERX-Max-Clients-Per-Interface		143	integer
 
 ATTRIBUTE	ERX-PPP-Monitor-Ingress-Only		144	integer
 
+ATTRIBUTE	ERX-CoS-Scheduler-Pmt-Type		146	string
+
+ATTRIBUTE	ERX-IPv6-Acct-Input-Octets		151	integer
+ATTRIBUTE	ERX-IPv6-Acct-Output-Octets		152	integer
+ATTRIBUTE	ERX-IPv6-Acct-Input-Packets		153	integer
+ATTRIBUTE	ERX-IPv6-Acct-Output-Packets		154	integer
+ATTRIBUTE	ERX-IPv6-Acct-Input-Gigawords		155	integer
+ATTRIBUTE	ERX-IPv6-Acct-Output-Gigawords		156	integer
+ATTRIBUTE	ERX-IPv6-NdRa-Pool-Name			157	string
+
 
 #
 #  Values	Attribute		Name			Number

radius/dictionary.extreme

@@ -17,6 +17,8 @@ ATTRIBUTE	Extreme-Netlogin-Url-Desc		205	string
 ATTRIBUTE	Extreme-Netlogin-Only			206	integer
 ATTRIBUTE	Extreme-User-Location			208	string
 ATTRIBUTE	Extreme-Netlogin-Vlan-Tag		209	integer
+ATTRIBUTE	Extreme-Netlogin-Extended-Vlan		211	string
+ATTRIBUTE	Extreme-Security-Profile		212	string
 
 VALUE	Extreme-CLI-Authorization	Disabled		0
 VALUE	Extreme-CLI-Authorization	Enabled			1

radius/dictionary.foundry

@@ -15,6 +15,11 @@ ATTRIBUTE	Foundry-Privilege-Level			1	integer
 ATTRIBUTE	Foundry-Command-String			2	string
 ATTRIBUTE	Foundry-Command-Exception-Flag		3	integer
 ATTRIBUTE	Foundry-INM-Privilege			4	integer
+ATTRIBUTE	Foundry-Access-List			5	string
+ATTRIBUTE	Foundry-MAC-Authent-needs-802.1x	6	integer
+ATTRIBUTE	Foundry-802.1x-Valid-Lookup		7	integer
+ATTRIBUTE	Foundry-MAC-Based-Vlan-QoS		8	integer
+ATTRIBUTE	Foundry-INM-Role-Aor-List		9	string
 
 VALUE	Foundry-INM-Privilege		AAA_pri_0		0
 VALUE	Foundry-INM-Privilege		AAA_pri_1		1
@@ -33,4 +38,13 @@ VALUE	Foundry-INM-Privilege		AAA_pri_13		13
 VALUE	Foundry-INM-Privilege		AAA_pri_14		14
 VALUE	Foundry-INM-Privilege		AAA_pri_15		15
 
+VALUE	Foundry-MAC-Based-Vlan-QoS	QoS_priority_0		0
+VALUE	Foundry-MAC-Based-Vlan-QoS	QoS_priority_1		1
+VALUE	Foundry-MAC-Based-Vlan-QoS	QoS_priority_2		2
+VALUE	Foundry-MAC-Based-Vlan-QoS	QoS_priority_3		3
+VALUE	Foundry-MAC-Based-Vlan-QoS	QoS_priority_4		4
+VALUE	Foundry-MAC-Based-Vlan-QoS	QoS_priority_5		5
+VALUE	Foundry-MAC-Based-Vlan-QoS	QoS_priority_6		6
+VALUE	Foundry-MAC-Based-Vlan-QoS	QoS_priority_7		7
+
 END-VENDOR	Foundry

radius/dictionary.freeradius

@@ -14,6 +14,7 @@ VENDOR		FreeRADIUS			11344
 BEGIN-VENDOR	FreeRADIUS
 
 ATTRIBUTE	FreeRADIUS-Proxied-To			1	ipaddr
+ATTRIBUTE	FreeRADIUS-Acct-Session-Start-Time	2	date
 
 
 #

radius/dictionary.freeradius.internal

@@ -111,6 +111,7 @@ ATTRIBUTE	Response-Packet-Type			1080	integer
 ATTRIBUTE	Digest-HA1				1081	string
 ATTRIBUTE	MS-CHAP-Use-NTLM-Auth			1082	integer
 ATTRIBUTE	NTLM-User-Name				1083	string
+ATTRIBUTE	MS-CHAP-User-Name			1083	string
 ATTRIBUTE	Packet-Src-IP-Address			1084	ipaddr
 ATTRIBUTE	Packet-Dst-IP-Address			1085	ipaddr
 ATTRIBUTE	Packet-Src-Port				1086	integer
@@ -206,6 +207,16 @@ VALUE	EAP-Session-Resumed		yes			1
 ATTRIBUTE	EAP-MSK					1129	octets
 ATTRIBUTE	EAP-EMSK				1130	octets
 
+#
+#	For send/recv CoA packets (like Auth-Type, Acct-Type, etc.)
+#
+ATTRIBUTE	Recv-CoA-Type				1131	integer
+ATTRIBUTE	Send-CoA-Type				1132	integer
+
+ATTRIBUTE	MS-CHAP-Password			1133	string
+ATTRIBUTE	Packet-Transmit-Counter			1134	integer
+ATTRIBUTE	Cached-Session-Policy			1135	string
+
 #
 #	Range:	1200-1279
 #		EAP-SIM (and other EAP type) weirdness.
@@ -333,6 +344,19 @@ ATTRIBUTE	WiMAX-MN-NAI				1900	string
 ATTRIBUTE	WiMAX-FA-IP-Address			1901	ipaddr
 ATTRIBUTE	WiMAX-MN-FA				1902	octets
 
+ATTRIBUTE	TLS-Cert-Serial				1910	string
+ATTRIBUTE	TLS-Cert-Expiration			1911	string
+ATTRIBUTE	TLS-Cert-Issuer				1912	string
+ATTRIBUTE	TLS-Cert-Subject			1913	string
+ATTRIBUTE	TLS-Cert-Common-Name			1914	string
+# 1915 - 1919: reserved for future cert attributes
+ATTRIBUTE	TLS-Client-Cert-Serial			1920	string
+ATTRIBUTE	TLS-Client-Cert-Expiration		1921	string
+ATTRIBUTE	TLS-Client-Cert-Issuer			1922	string
+ATTRIBUTE	TLS-Client-Cert-Subject			1923	string
+ATTRIBUTE	TLS-Client-Cert-Common-Name		1924	string
+ATTRIBUTE	TLS-Client-Cert-Filename		1925	string
+
 #
 #	Range:	1910-2999
 #		Free

radius/dictionary.hp

@@ -9,20 +9,25 @@
 
 VENDOR		HP				11
 
-# Management authorization
+#
+# Attributes supported by HP ProCurve wired networking devices
+#
 BEGIN-VENDOR	HP
 
+# Management authorization
 ATTRIBUTE	HP-Privilege-Level			1	integer
 ATTRIBUTE	HP-Command-String			2	string
 ATTRIBUTE	HP-Command-Exception			3	integer
 ATTRIBUTE	HP-Management-Protocol			26	integer
 
-#
-#  HP's names for some attributes
-#
-ATTRIBUTE	HP-port-priority-regeneration-table	40	string
-ATTRIBUTE	HP-EI-Status				47	string
-ATTRIBUTE	HP-nas-filter-rule			61	string
+# Dynamic port-access attributes
+ATTRIBUTE	HP-Port-Client-Limit-Dot1x		10	integer
+ATTRIBUTE	HP-Port-Client-Limit-MA			11	integer
+ATTRIBUTE	HP-Port-Client-Limit-WA			12	integer
+ATTRIBUTE	HP-Port-Auth-Mode-Dot1x			13	integer
+
+# Client QoS attributes
+ATTRIBUTE	HP-Port-Priority-Regeneration-Table	40	string
 
 # Access control
 ATTRIBUTE	HP-Cos					40	string
@@ -33,6 +38,21 @@ ATTRIBUTE	HP-Bandwidth-Max-Egress			48	integer
 
 ATTRIBUTE	HP-Ip-Filter-Raw			61	string
 
+# Client ACL attributes
+ATTRIBUTE	HP-Nas-Filter-Rule			61	string
+ATTRIBUTE	HP-Nas-Rules-IPv6			63	integer
+
+# VLAN assignment attributes
+ATTRIBUTE	HP-Egress-VLANID			64	integer
+ATTRIBUTE	HP-Egress-VLAN-Name			65	string
+
+# See http://wiki.freeradius.org/HP#Capability_advertisements
+ATTRIBUTE	HP-Capability-Advert			255	octets
+
+# HP-Port-Auth-Mode-Dot1x Attribute Values
+VALUE	HP-Port-Auth-Mode-Dot1x		Port-Based		1
+VALUE	HP-Port-Auth-Mode-Dot1x		User-Based		2
+
 # HP-Command-Exception Attribute Values
 VALUE	HP-Command-Exception		Permit-List		0
 VALUE	HP-Command-Exception		Deny-List		1

radius/dictionary.huawei

@@ -11,10 +11,10 @@ VENDOR		Huawei				2011
 
 BEGIN-VENDOR	Huawei
 
-# 1 - Unused
+ATTRIBUTE	Huawei-Input-Burst-Size			1	integer
 ATTRIBUTE	Huawei-Input-Average-Rate		2	integer
 ATTRIBUTE	Huawei-Input-Peak-Rate			3	integer
-# 4 - Unused
+ATTRIBUTE	Huawei-Output-Burst-Size		4	integer
 ATTRIBUTE	Huawei-Output-Average-Rate		5	integer
 ATTRIBUTE	Huawei-Output-Peak-Rate			6	integer
 ATTRIBUTE	Huawei-In-Kb-Before-T-Switch		7	integer
@@ -43,13 +43,42 @@ ATTRIBUTE	Huawei-Destnation-IP-Addr		39	string
 ATTRIBUTE	Huawei-Destnation-Volume		40	string
 ATTRIBUTE	Huawei-Startup-Stamp			59	integer
 ATTRIBUTE	Huawei-IPHost-Addr			60	string
+ATTRIBUTE	Huawei-VT-Name				64	integer
+ATTRIBUTE	Huawei-PPP-NCP-Type			70	integer
+ATTRIBUTE	Huawei-VSI-Name				71	string
+ATTRIBUTE	Huawei-Subnet-Mask			72	ipaddr
+ATTRIBUTE	Huawei-Gateway-Address			73	ipaddr
+ATTRIBUTE	Huawei-Lease-Time			74	integer
+ATTRIBUTE	Huawei-Primary-WINS			75	ipaddr
+ATTRIBUTE	Huawei-Secondary-WINS			76	ipaddr
+ATTRIBUTE	Huawei-Input-Peak-Burst-Size		77	integer
+ATTRIBUTE	Huawei-Output-Peak-Burst-Size		78	integer
+ATTRIBUTE	Huawei-Reduced-CIR			79	integer
+ATTRIBUTE	Huawei-Tunnel-Session-Limit		80	integer
+ATTRIBUTE	Huawei-Zone-Name			81	string
+ATTRIBUTE	Huawei-Data-Filter			82	string
+ATTRIBUTE	Huawei-Access-Service			83	string
+ATTRIBUTE	Huawei-HW-Accounting-Level		84	integer
 ATTRIBUTE	Huawei-HW-Portal-Mode			85	integer
+ATTRIBUTE	Huawei-HW-DPI-Policy-Name		86	string
+ATTRIBUTE	huawei-Policy-Route			87	ipaddr
+ATTRIBUTE	Huawei-Framed-Pool			88	string
+ATTRIBUTE	Huawei-HW-L2TP-Terminate-Cause		89	string
+ATTRIBUTE	Huawei-HW-Multi-Account-Mode		90	integer
+ATTRIBUTE	Huawei-Queue-Profile			91	string
+ATTRIBUTE	Huawei-Layer4-Session-Limit		92	integer
+ATTRIBUTE	Huawei-Multicast-Profile		93	string
 ATTRIBUTE	Huawei-VPN-Instance			94	string
 ATTRIBUTE	Huawei-Policy-Name			95	string
 ATTRIBUTE	Huawei-Tunnel-Group-Name		96	string
 ATTRIBUTE	Huawei-Multicast-Source-Group		97	string
 ATTRIBUTE	Huawei-Multicast-Receive-Group		98	ipaddr
 ATTRIBUTE	Huawei-User-Multicast-Type		99	integer
+ATTRIBUTE	Huawei-Reduced-PIR			100	integer
+ATTRIBUTE	Huawei-LI-ID				101	string
+ATTRIBUTE	Huawei-LI-Md-Address			102	ipaddr
+ATTRIBUTE	Huawei-LI-Md-Port			103	integer
+ATTRIBUTE	Huawei-LI-Md-VpnInstance		104	string
 ATTRIBUTE	Huawei-Service-Chg-Cmd			105	integer
 ATTRIBUTE	Huawei-Acct-Packet-Type			106	integer
 ATTRIBUTE	Huawei-Call-Reference			107	integer
@@ -72,6 +101,11 @@ ATTRIBUTE	Huawei-Primary-DNS			135	ipaddr
 ATTRIBUTE	Huawei-Secondary-DNS			136	ipaddr
 ATTRIBUTE	Huawei-ONLY-Account-Type		137	integer
 ATTRIBUTE	Huawei-Domain-Name			138	string
+ATTRIBUTE	Huawei-ANCP-Profile			139	string
+ATTRIBUTE	Huawei-HTTP-Redirect-URL		140	string
+ATTRIBUTE	Huawei-Loopback-Address			141	string
+ATTRIBUTE	Huawei-QoS-Profile-Type			142	integer
+ATTRIBUTE	Huawei-HW-Max-List-Num			143	integer
 ATTRIBUTE	Huawei-Version				254	string
 ATTRIBUTE	Huawei-Product-ID			255	string
 

radius/dictionary.juniper

@@ -16,5 +16,8 @@ ATTRIBUTE	Juniper-Allow-Commands			2	string
 ATTRIBUTE	Juniper-Deny-Commands			3	string
 ATTRIBUTE	Juniper-Allow-Configuration		4	string
 ATTRIBUTE	Juniper-Deny-Configuration		5	string
+ATTRIBUTE	Juniper-Interactive-Command		8	string
+ATTRIBUTE	Juniper-Configuration-Change		9	string
+ATTRIBUTE	Juniper-User-Permissions		10	string
 
 END-VENDOR	Juniper