dictionary

RADIUS协议的认证计费服务

#
# Copyright [C] The Regents of the University of Michigan and Merit Network,
# Inc. 1993, 1994, 1995, 1996, 1997, 1998 All Rights Reserved.
#

#
# RCSID:	$Id: dictionary,v 1.1.1.1 2001/08/10 20:49:27 bonze Exp $
#

%DICTID 1.14

#	This file contains dictionary translations for parsing
#	requests and generating responses.  All transactions are
#	composed of Attribute/Value Pairs (AVP).  The value of each
#	attribute is specified as one of several data types.  Valid
#	data types are listed below:
#
#	string - 0-253 octets
#	octets - 0-253 undistinguished octets (experimental, for display only)
#	vendor - octet #0 is zero, then three octets IANA #, then the rest
#	tag-int - single octet followed by three octets of integer value
#	tag-str - single octet followed by 0-252 octets
#	abinary - 0-254 Ascend binary filter octets
#	ipaddr - 4 octets in network byte order
#	integer - 32 bit value in big endian order (high byte first)
#	octet - 8 bit unsigned integer value
#	short - 16 bit unsigned integer value
#	date - 32 bit value in big endian order - the number of seconds since
#					00:00:00 GMT, Jan. 1, 1970
#
#	Note: integer, short, octet and tag-int types may have
#		named (ASCII) enumerated VALUEs in the dictionary.
#
#	Enumerated values are stored in the users file with dictionary
#	VALUE translations for easy administration.
#
#	Example:
#
#				ATTRIBUTE	  VALUE
#				---------------   -----
#	(as written)		Framed-Protocol = PPP
#	(integer encoding)	7		= 1
#
#	Attribute lines may contain an optional parenthesized expression
#	at the end of the line which controls two features:
#
#		a) whether the attribute is ever sent to the NAS
#		b) how the NAS reacts to a reply which contains the attribute
#
#	The syntax of this expressions is as folows:
#
#	[ ( [<ack>] [ [ [,] [<nak>] ] [ [,] [ MAY | MUST | CONFIG ] ] ] ) ]
#	    \______________________/        \_____________________/
#		feature "a" above		feature "b" above
#
#	In "a" above, <ack> and <nak> are one of '0', '1' or '*'.  The <ack>
#	and <nak> values affect Access-Accept and Access-Reject replies,
#	respectively.  These values represent:
#
#		"0"	-	no attributes of this kind are part of
#					the final reply (DEFAULT)
#		"1"	-	at most, one attribute of this kind may
#					be part of the final reply
#		"*"	-	any number of attributes of this kind may
#					be part of the final reply
#
#	The default values for both <ack> and <nak> are '0'!  Keep this in
#	mind when adding vendor specific attributes since they will not be
#	returned to the NAS in any replies unless this expression exists.
#
#	In "b" above, the keywords define how the NAS reacts to the attribute:
#
#		"MUST"	 -	the NAS must reject the request if it does
#					not recognize this attribute
#
#		"MAY"	 -	the NAS may ignore the attribute if not
#					recognized (DEFAULT)
#
#		"CONFIG" -	the attribute is a configuration item
#
#		"NOLOG" -	the attribute is not allowed to be logged
#
#		"ENCAPS" -	the attribute is always encapsulated within
#					the Vendor-Specific attribute (26)
#					regardless of the vendor (DEFAULT)
#
#		"NOENCAPS" -	the attribute is not encapsulated within
#					the Vendor-Specific attribute (26)
#
#	CONFIG is only for the internal use of this RADIUS server and must be
#	given by itself (i.e., "(config)" at the end of line).
#
#	The keywords MAY and MUST only are meaningful for RADIUS Version Two.
#
#	If the whole expression is omitted, the defaults are assumed.
#	If any value is omitted, but the comma is present for that value,
#	then just that omitted value takes on the default.
#
#	The syntax for handling vendor specific attributes is as follows:
#
#		<vendor>:<attribute-string>
#
#	where <vendor> is the vendor's name and <attribute-string> is a
#	unique string (for that vendor).  There is an alternate syntax
#	available for specifying vendor specific attributes and values.
#	Vendor specific attribute and value identifier strings may be
#	defined in the vendors file which may be used in place of the
#	default strings ATTRIBUTE and VALUE.
#
ATTRIBUTE	User-Name		1	string # comment
ATTRIBUTE	User-Password		2	string
ATTRIBUTE	CHAP-Password		3	string
ATTRIBUTE	NAS-IP-Address		4	ipaddr
ATTRIBUTE	NAS-Port		5	integer
ATTRIBUTE	Service-Type		6	integer	(1, 0)
ATTRIBUTE	Framed-Protocol		7	integer	(1, 0)
ATTRIBUTE	Framed-IP-Address	8	ipaddr	(1, 0)
ATTRIBUTE	Framed-IP-Netmask	9	ipaddr	(1, 0)
ATTRIBUTE	Framed-Routing		10	integer	(1, 0)
ATTRIBUTE	Filter-Id		11	string	(*, 0)
ATTRIBUTE	Framed-MTU		12	integer	(1, 0)
ATTRIBUTE	Framed-Compression	13	integer	(*, 0)
ATTRIBUTE	Login-IP-Host		14	ipaddr	(*, 0)
ATTRIBUTE	Login-Service		15	integer	(1, 0)
ATTRIBUTE	Login-TCP-Port		16	integer	(1, 0)
ATTRIBUTE	Old-Password		17	string  ### deprecated
ATTRIBUTE	Reply-Message		18	string	(*, *)
ATTRIBUTE	Callback-Number		19	string	(1, 0)
ATTRIBUTE	Callback-Id		20	string	(1, 0)
#ATTRIBUTE	Expiration		21	date    ### deprecated
ATTRIBUTE	Framed-Route		22	string	(*, 0)
ATTRIBUTE	Framed-IPX-Network	23	integer	(0, 0)
ATTRIBUTE	State			24	string	(1, 0)
ATTRIBUTE	Class			25	string	(*, 0)
ATTRIBUTE	Vendor-Specific		26	vendor  ### Send as needed
ATTRIBUTE	Session-Timeout		27	integer	(1, 0)
ATTRIBUTE	Idle-Timeout		28	integer	(1, 0)
ATTRIBUTE	Termination-Action	29	integer	(1, 0)
ATTRIBUTE	Called-Station-Id	30	string
ATTRIBUTE	Calling-Station-Id	31	string
ATTRIBUTE	NAS-Identifier		32	string
ATTRIBUTE	Proxy-State		33	string	(*, *)
ATTRIBUTE	Login-LAT-Service	34	string	(1, 0)
ATTRIBUTE	Login-LAT-Node 		35	string	(1, 0)
ATTRIBUTE	Login-LAT-Group		36	string	(1, 0)
ATTRIBUTE	Framed-AppleTalk-Link	37	integer	(1, 0)
ATTRIBUTE	Framed-AppleTalk-Network 38	integer	(*, 0)
ATTRIBUTE	Framed-AppleTalk-Zone	39	string	(1, 0)
ATTRIBUTE	CHAP-Challenge		60	string
ATTRIBUTE	NAS-Port-Type		61	integer
ATTRIBUTE	Port-Limit		62	integer	(1, 0)
ATTRIBUTE	Login-LAT-Port		63	string	(1, 0)
ATTRIBUTE	Tunnel-Type		64	tag-int	(*, 0)
ATTRIBUTE	Tunnel-Medium-Type	65	tag-int	(*, 0)
ATTRIBUTE	Tunnel-Client-Endpoint	66	tag-str	(*, 0)
ATTRIBUTE	Tunnel-Server-Endpoint	67	tag-str	(*, 0)
ATTRIBUTE	Acct-Tunnel-Connection	68	string	(1, 0)
ATTRIBUTE	Tunnel-Password		69	tag-str	(*, 0)
ATTRIBUTE	ARAP-Password		70	string
ATTRIBUTE	ARAP-Features		71	string	(1, 0)
ATTRIBUTE	ARAP-Zone-Access	72	integer	(1, 0)
ATTRIBUTE	ARAP-Security		73	integer
ATTRIBUTE	ARAP-Security-Data	74	string
ATTRIBUTE	Password-Retry		75	integer	(0, 1)
ATTRIBUTE	Prompt			76	integer
ATTRIBUTE	Connect-Info		77	string
ATTRIBUTE	Configuration-Token	78	string	(*, 0)
ATTRIBUTE	EAP-Message		79	string	(*, *)
ATTRIBUTE	Signature		80	string
ATTRIBUTE	Tunnel-Private-Group-Id	81	tag-str	(*, 0)
ATTRIBUTE	Tunnel-Assignment-Id	82	tag-str	(*, 0)
ATTRIBUTE	Tunnel-Preference	83	tag-int	(*, 0)
ATTRIBUTE	ARAP-Challenge-Response	84	string
ATTRIBUTE	Acct-Interim-Interval	85	string
#
#	Accounting Extensions
#
ATTRIBUTE	Acct-Status-Type	40	integer
ATTRIBUTE	Acct-Delay-Time		41	integer
ATTRIBUTE	Acct-Input-Octets	42	integer
ATTRIBUTE	Acct-Output-Octets	43	integer
ATTRIBUTE	Acct-Session-Id		44	string
ATTRIBUTE	Acct-Authentic		45	integer
ATTRIBUTE	Acct-Session-Time	46	integer
ATTRIBUTE	Acct-Input-Packets	47	integer
ATTRIBUTE	Acct-Output-Packets	48	integer
ATTRIBUTE	Acct-Terminate-Cause	49	integer
ATTRIBUTE	Acct-Multi-Session-Id	50	string
ATTRIBUTE	Acct-Link-Count		51	integer
ATTRIBUTE	Acct-Input-Gigawords	52	integer
ATTRIBUTE	Acct-Output-Gigawords	53	integer
#ATTRIBUTE	Unused			54	???
ATTRIBUTE	Event-Time		55	date
#
#	Merit Vendor Specific Extensions
#
Merit.ATTRIBUTE	Reply-If-Ack-Message	144	string	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	LAS-Start-Time		145	integer	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	LAS-Code		146	integer	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	LAS-Duration		147	integer	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	Local-Duration		148	integer	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	Huntgroup-Service	149	string	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	Port-Entry		150	octets	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	Proxy-Action		211	string	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	Token			213	string	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	Ownership		219	integer	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	Subgroup		220	string	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	Huntgroup-Name		221	string	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	User-Id			222	string	(*, 0, NOENCAPS)
Merit.ATTRIBUTE	User-Realm		223	string	(*, 0, NOENCAPS)
#
#	Configuration Only Attributes (for check-items)
#
ATTRIBUTE	Comment			1024	string	(Config)
ATTRIBUTE	Xvalue			1025	integer	(Config)
ATTRIBUTE	Xstring			1026	string	(Config)
ATTRIBUTE	Authentication-Type	1027	integer	(Config)
ATTRIBUTE	Prohibit		1028	integer	(Config)
ATTRIBUTE	User-Category		1029	string	(Config)
ATTRIBUTE	Group-Name		1030	string	(Config)
ATTRIBUTE	Encrypted-Password	1031	string	(Config)
ATTRIBUTE	Expiration		1032	date	(Config)
ATTRIBUTE	Password		1033	string	(Config)
ATTRIBUTE	Simultaneous-Use	1034	integer	(Config)
# A synonym for USR
ATTRIBUTE	Session-Limit		1034	integer	(Config)
ATTRIBUTE	Server-Name		1035	string	(Config)
ATTRIBUTE	Framed-IP-Address-Pool-Name	1036	string	(Config)
ATTRIBUTE	Service-Class		1037	string	(Config)
ATTRIBUTE	Deny-Message		1038	string	(Config)

#
#	Examples of Vendor Syntax
#

ATTRIBUTE	Merit:Blow-Up		42	integer	(1, 0)

VALUE		MERIT:BLOW-UP		IMMEDIATELY 	1	
Value		Merit:Blow-Up		Tomorrow	2

Attribute	Usr:Crash		42	integer	(0, 1)

Value		USR:Crash		Immediately 	1	
Value		USR:Crash		Later		2

#
#	Integer Translations
#

#	Service Type Values

VALUE		Service-Type		Login			1
VALUE		Service-Type		Framed			2
VALUE		Service-Type		Callback-Login		3
VALUE		Service-Type		Callback-Framed		4
VALUE		Service-Type		Outbound		5
VALUE		Service-Type		Administrative		6
VALUE		Service-Type		NAS-Prompt		7
VALUE		Service-Type		Authenticate-Only	8
VALUE		Service-Type		Callback-NAS-Prompt	9
VALUE		Service-Type		Call-Check-User		129
VALUE		Service-Type		Annex-Authorize-Only	0x06300001
VALUE		Service-Type		Annex-Framed-Tunnel	0x06300002

#	Framed Protocol Values

VALUE		Framed-Protocol		PPP			1
VALUE		Framed-Protocol		SLIP			2
VALUE		Framed-Protocol		ARA			3
VALUE		Framed-Protocol		Gandalf			4
VALUE		Framed-Protocol		Xylogics		5

#	ASCEND extensions to Framed Protocol Values

VALUE		Framed-Protocol		Ascend-ARA		255
VALUE		Framed-Protocol		MPP			256
VALUE		Framed-Protocol		EURAW			257
VALUE		Framed-Protocol		EUUI			258
VALUE		Framed-Protocol		X25			259
VALUE		Framed-Protocol		COMB			260
VALUE		Framed-Protocol		FR			261


#	Framed Routing Values

VALUE		Framed-Routing		None			0
VALUE		Framed-Routing		Broadcast		1
VALUE		Framed-Routing		Listen			2
VALUE		Framed-Routing		Broadcast-Listen	3

#	Framed Compression Values

VALUE		Framed-Compression	None			0
VALUE		Framed-Compression	Van-Jacobson-TCP-IP	1
VALUE		Framed-Compression	IPX-Header-Compression	2

#	Login Service Values

VALUE		Login-Service		Telnet			0
VALUE		Login-Service		Rlogin			1
VALUE		Login-Service		TCP-Clear		2
VALUE		Login-Service		PortMaster		3
VALUE		Login-Service		LAT			4
VALUE		Login-Service		X25-PAD			5
VALUE		Login-Service		X25-T3POS		6

#	Termination Action Values

VALUE		Termination-Action	Default			0
VALUE		Termination-Action	RADIUS-Request		1

#	Accounting Status Type Values (Alive may be used for checkpointing)