## Copyright [C] The Regents of the University of Michigan and Merit Network,# Inc. 1993, 1994, 1995, 1996, 1997, 1998 All Rights Reserved.### RCSID:	$Id: dictionary,v 1.1.1.1 2001/08/10 20:49:27 bonze Exp $#%DICTID 1.14#	This file contains dictionary translations for parsing#	requests and generating responses.  All transactions are#	composed of Attribute/Value Pairs (AVP).  The value of each#	attribute is specified as one of several data types.  Valid#	data types are listed below:##	string - 0-253 octets#	octets - 0-253 undistinguished octets (experimental, for display only)#	vendor - octet #0 is zero, then three octets IANA #, then the rest#	tag-int - single octet followed by three octets of integer value#	tag-str - single octet followed by 0-252 octets#	abinary - 0-254 Ascend binary filter octets#	ipaddr - 4 octets in network byte order#	integer - 32 bit value in big endian order (high byte first)#	octet - 8 bit unsigned integer value#	short - 16 bit unsigned integer value#	date - 32 bit value in big endian order - the number of seconds since#					00:00:00 GMT, Jan. 1, 1970##	Note: integer, short, octet and tag-int types may have#		named (ASCII) enumerated VALUEs in the dictionary.##	Enumerated values are stored in the users file with dictionary#	VALUE translations for easy administration.##	Example:##				ATTRIBUTE	  VALUE#				---------------   -----#	(as written)		Framed-Protocol = PPP#	(integer encoding)	7		= 1##	Attribute lines may contain an optional parenthesized expression#	at the end of the line which controls two features:##		a) whether the attribute is ever sent to the NAS#		b) how the NAS reacts to a reply which contains the attribute##	The syntax of this expressions is as folows:##	[ ( [<ack>] [ [ [,] [<nak>] ] [ [,] [ MAY | MUST | CONFIG ] ] ] ) ]#	    \______________________/        \_____________________/#		feature "a" above		feature "b" above##	In "a" above, <ack> and <nak> are one of '0', '1' or '*'.  The <ack>#	and <nak> values affect Access-Accept and Access-Reject replies,#	respectively.  These values represent:##		"0"	-	no attributes of this kind are part of#					the final reply (DEFAULT)#		"1"	-	at most, one attribute of this kind may#					be part of the final reply#		"*"	-	any number of attributes of this kind may#					be part of the final reply##	The default values for both <ack> and <nak> are '0'!  Keep this in#	mind when adding vendor specific attributes since they will not be#	returned to the NAS in any replies unless this expression exists.##	In "b" above, the keywords define how the NAS reacts to the attribute:##		"MUST"	 -	the NAS must reject the request if it does#					not recognize this attribute##		"MAY"	 -	the NAS may ignore the attribute if not#					recognized (DEFAULT)##		"CONFIG" -	the attribute is a configuration item##		"NOLOG" -	the attribute is not allowed to be logged##		"ENCAPS" -	the attribute is always encapsulated within#					the Vendor-Specific attribute (26)#					regardless of the vendor (DEFAULT)##		"NOENCAPS" -	the attribute is not encapsulated within#					the Vendor-Specific attribute (26)##	CONFIG is only for the internal use of this RADIUS server and must be#	given by itself (i.e., "(config)" at the end of line).##	The keywords MAY and MUST only are meaningful for RADIUS Version Two.##	If the whole expression is omitted, the defaults are assumed.#	If any value is omitted, but the comma is present for that value,#	then just that omitted value takes on the default.##	The syntax for handling vendor specific attributes is as follows:##		<vendor>:<attribute-string>##	where <vendor> is the vendor's name and <attribute-string> is a#	unique string (for that vendor).  There is an alternate syntax#	available for specifying vendor specific attributes and values.#	Vendor specific attribute and value identifier strings may be#	defined in the vendors file which may be used in place of the#	default strings ATTRIBUTE and VALUE.#ATTRIBUTE	User-Name		1	string # commentATTRIBUTE	User-Password		2	stringATTRIBUTE	CHAP-Password		3	stringATTRIBUTE	NAS-IP-Address		4	ipaddrATTRIBUTE	NAS-Port		5	integerATTRIBUTE	Service-Type		6	integer	(1, 0)ATTRIBUTE	Framed-Protocol		7	integer	(1, 0)ATTRIBUTE	Framed-IP-Address	8	ipaddr	(1, 0)ATTRIBUTE	Framed-IP-Netmask	9	ipaddr	(1, 0)ATTRIBUTE	Framed-Routing		10	integer	(1, 0)ATTRIBUTE	Filter-Id		11	string	(*, 0)ATTRIBUTE	Framed-MTU		12	integer	(1, 0)ATTRIBUTE	Framed-Compression	13	integer	(*, 0)ATTRIBUTE	Login-IP-Host		14	ipaddr	(*, 0)ATTRIBUTE	Login-Service		15	integer	(1, 0)ATTRIBUTE	Login-TCP-Port		16	integer	(1, 0)ATTRIBUTE	Old-Password		17	string  ### deprecatedATTRIBUTE	Reply-Message		18	string	(*, *)ATTRIBUTE	Callback-Number		19	string	(1, 0)ATTRIBUTE	Callback-Id		20	string	(1, 0)#ATTRIBUTE	Expiration		21	date    ### deprecatedATTRIBUTE	Framed-Route		22	string	(*, 0)ATTRIBUTE	Framed-IPX-Network	23	integer	(0, 0)ATTRIBUTE	State			24	string	(1, 0)ATTRIBUTE	Class			25	string	(*, 0)ATTRIBUTE	Vendor-Specific		26	vendor  ### Send as neededATTRIBUTE	Session-Timeout		27	integer	(1, 0)ATTRIBUTE	Idle-Timeout		28	integer	(1, 0)ATTRIBUTE	Termination-Action	29	integer	(1, 0)ATTRIBUTE	Called-Station-Id	30	stringATTRIBUTE	Calling-Station-Id	31	stringATTRIBUTE	NAS-Identifier		32	stringATTRIBUTE	Proxy-State		33	string	(*, *)ATTRIBUTE	Login-LAT-Service	34	string	(1, 0)ATTRIBUTE	Login-LAT-Node 		35	string	(1, 0)ATTRIBUTE	Login-LAT-Group		36	string	(1, 0)ATTRIBUTE	Framed-AppleTalk-Link	37	integer	(1, 0)ATTRIBUTE	Framed-AppleTalk-Network 38	integer	(*, 0)ATTRIBUTE	Framed-AppleTalk-Zone	39	string	(1, 0)ATTRIBUTE	CHAP-Challenge		60	stringATTRIBUTE	NAS-Port-Type		61	integerATTRIBUTE	Port-Limit		62	integer	(1, 0)ATTRIBUTE	Login-LAT-Port		63	string	(1, 0)ATTRIBUTE	Tunnel-Type		64	tag-int	(*, 0)ATTRIBUTE	Tunnel-Medium-Type	65	tag-int	(*, 0)ATTRIBUTE	Tunnel-Client-Endpoint	66	tag-str	(*, 0)ATTRIBUTE	Tunnel-Server-Endpoint	67	tag-str	(*, 0)ATTRIBUTE	Acct-Tunnel-Connection	68	string	(1, 0)ATTRIBUTE	Tunnel-Password		69	tag-str	(*, 0)ATTRIBUTE	ARAP-Password		70	stringATTRIBUTE	ARAP-Features		71	string	(1, 0)ATTRIBUTE	ARAP-Zone-Access	72	integer	(1, 0)ATTRIBUTE	ARAP-Security		73	integerATTRIBUTE	ARAP-Security-Data	74	stringATTRIBUTE	Password-Retry		75	integer	(0, 1)ATTRIBUTE	Prompt			76	integerATTRIBUTE	Connect-Info		77	stringATTRIBUTE	Configuration-Token	78	string	(*, 0)ATTRIBUTE	EAP-Message		79	string	(*, *)ATTRIBUTE	Signature		80	stringATTRIBUTE	Tunnel-Private-Group-Id	81	tag-str	(*, 0)ATTRIBUTE	Tunnel-Assignment-Id	82	tag-str	(*, 0)ATTRIBUTE	Tunnel-Preference	83	tag-int	(*, 0)ATTRIBUTE	ARAP-Challenge-Response	84	stringATTRIBUTE	Acct-Interim-Interval	85	string##	Accounting Extensions#ATTRIBUTE	Acct-Status-Type	40	integerATTRIBUTE	Acct-Delay-Time		41	integerATTRIBUTE	Acct-Input-Octets	42	integerATTRIBUTE	Acct-Output-Octets	43	integerATTRIBUTE	Acct-Session-Id		44	stringATTRIBUTE	Acct-Authentic		45	integerATTRIBUTE	Acct-Session-Time	46	integerATTRIBUTE	Acct-Input-Packets	47	integerATTRIBUTE	Acct-Output-Packets	48	integerATTRIBUTE	Acct-Terminate-Cause	49	integerATTRIBUTE	Acct-Multi-Session-Id	50	stringATTRIBUTE	Acct-Link-Count		51	integerATTRIBUTE	Acct-Input-Gigawords	52	integerATTRIBUTE	Acct-Output-Gigawords	53	integer#ATTRIBUTE	Unused			54	???ATTRIBUTE	Event-Time		55	date##	Merit Vendor Specific Extensions#Merit.ATTRIBUTE	Reply-If-Ack-Message	144	string	(*, 0, NOENCAPS)Merit.ATTRIBUTE	LAS-Start-Time		145	integer	(*, 0, NOENCAPS)Merit.ATTRIBUTE	LAS-Code		146	integer	(*, 0, NOENCAPS)Merit.ATTRIBUTE	LAS-Duration		147	integer	(*, 0, NOENCAPS)Merit.ATTRIBUTE	Local-Duration		148	integer	(*, 0, NOENCAPS)Merit.ATTRIBUTE	Huntgroup-Service	149	string	(*, 0, NOENCAPS)Merit.ATTRIBUTE	Port-Entry		150	octets	(*, 0, NOENCAPS)Merit.ATTRIBUTE	Proxy-Action		211	string	(*, 0, NOENCAPS)Merit.ATTRIBUTE	Token			213	string	(*, 0, NOENCAPS)Merit.ATTRIBUTE	Ownership		219	integer	(*, 0, NOENCAPS)Merit.ATTRIBUTE	Subgroup		220	string	(*, 0, NOENCAPS)Merit.ATTRIBUTE	Huntgroup-Name		221	string	(*, 0, NOENCAPS)Merit.ATTRIBUTE	User-Id			222	string	(*, 0, NOENCAPS)Merit.ATTRIBUTE	User-Realm		223	string	(*, 0, NOENCAPS)##	Configuration Only Attributes (for check-items)#ATTRIBUTE	Comment			1024	string	(Config)ATTRIBUTE	Xvalue			1025	integer	(Config)ATTRIBUTE	Xstring			1026	string	(Config)ATTRIBUTE	Authentication-Type	1027	integer	(Config)ATTRIBUTE	Prohibit		1028	integer	(Config)ATTRIBUTE	User-Category		1029	string	(Config)ATTRIBUTE	Group-Name		1030	string	(Config)ATTRIBUTE	Encrypted-Password	1031	string	(Config)ATTRIBUTE	Expiration		1032	date	(Config)ATTRIBUTE	Password		1033	string	(Config)ATTRIBUTE	Simultaneous-Use	1034	integer	(Config)# A synonym for USRATTRIBUTE	Session-Limit		1034	integer	(Config)ATTRIBUTE	Server-Name		1035	string	(Config)ATTRIBUTE	Framed-IP-Address-Pool-Name	1036	string	(Config)ATTRIBUTE	Service-Class		1037	string	(Config)ATTRIBUTE	Deny-Message		1038	string	(Config)##	Examples of Vendor Syntax#ATTRIBUTE	Merit:Blow-Up		42	integer	(1, 0)VALUE		MERIT:BLOW-UP		IMMEDIATELY 	1	Value		Merit:Blow-Up		Tomorrow	2Attribute	Usr:Crash		42	integer	(0, 1)Value		USR:Crash		Immediately 	1	Value		USR:Crash		Later		2##	Integer Translations##	Service Type ValuesVALUE		Service-Type		Login			1VALUE		Service-Type		Framed			2VALUE		Service-Type		Callback-Login		3VALUE		Service-Type		Callback-Framed		4VALUE		Service-Type		Outbound		5VALUE		Service-Type		Administrative		6VALUE		Service-Type		NAS-Prompt		7VALUE		Service-Type		Authenticate-Only	8VALUE		Service-Type		Callback-NAS-Prompt	9VALUE		Service-Type		Call-Check-User		129VALUE		Service-Type		Annex-Authorize-Only	0x06300001VALUE		Service-Type		Annex-Framed-Tunnel	0x06300002#	Framed Protocol ValuesVALUE		Framed-Protocol		PPP			1VALUE		Framed-Protocol		SLIP			2VALUE		Framed-Protocol		ARA			3VALUE		Framed-Protocol		Gandalf			4VALUE		Framed-Protocol		Xylogics		5#	ASCEND extensions to Framed Protocol ValuesVALUE		Framed-Protocol		Ascend-ARA		255VALUE		Framed-Protocol		MPP			256VALUE		Framed-Protocol		EURAW			257VALUE		Framed-Protocol		EUUI			258VALUE		Framed-Protocol		X25			259VALUE		Framed-Protocol		COMB			260VALUE		Framed-Protocol		FR			261#	Framed Routing ValuesVALUE		Framed-Routing		None			0VALUE		Framed-Routing		Broadcast		1VALUE		Framed-Routing		Listen			2VALUE		Framed-Routing		Broadcast-Listen	3#	Framed Compression ValuesVALUE		Framed-Compression	None			0VALUE		Framed-Compression	Van-Jacobson-TCP-IP	1VALUE		Framed-Compression	IPX-Header-Compression	2#	Login Service ValuesVALUE		Login-Service		Telnet			0VALUE		Login-Service		Rlogin			1VALUE		Login-Service		TCP-Clear		2VALUE		Login-Service		PortMaster		3VALUE		Login-Service		LAT			4VALUE		Login-Service		X25-PAD			5VALUE		Login-Service		X25-T3POS		6#	Termination Action ValuesVALUE		Termination-Action	Default			0VALUE		Termination-Action	RADIUS-Request		1#	Accounting Status Type Values (Alive may be used for checkpointing)