"Fossies" - the Fresh Open Source Software Archive

Member "freeradius-server-3.0.23/share/dictionary.freeradius.internal" (10 Jun 2021, 28743 Bytes) of package /linux/misc/freeradius-server-3.0.23.tar.bz2:


As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. See also the latest Fossies "Diffs" side-by-side code changes report for "dictionary.freeradius.internal": 3.0.22_vs_3.0.23.

    1 # -*- text -*-
    2 # Copyright (C) 2019 The FreeRADIUS Server project and contributors
    3 # This work is licensed under CC-BY version 4.0 https://creativecommons.org/licenses/by/4.0
    4 #
    5 #	Non Protocol Attributes used by FreeRADIUS
    6 #
    7 #	$Id: 8e8a868c65d8ffc05c93b04706e9a6018f57d3aa $
    8 #
    9 
   10 #	The attributes number ranges are allocates as follows:
   11 #
   12 #	Range:	500-999
   13 #		server-side attributes which can go in a reply list
   14 
   15 # 	These attributes CAN go in the reply item list.
   16 ATTRIBUTE	Fall-Through				500	integer
   17 ATTRIBUTE	Relax-Filter				501	integer
   18 ATTRIBUTE	Exec-Program				502	string
   19 ATTRIBUTE	Exec-Program-Wait			503	string
   20 
   21 #	These attributes CANNOT go in the reply item list.
   22 
   23 #
   24 #	Range:	1000+
   25 #		Attributes which cannot go in a reply list.
   26 #
   27 #
   28 #	Range:	1000-1199
   29 #		Miscellaneous server attributes.
   30 #
   31 #
   32 #	Non-Protocol Attributes
   33 #	These attributes are used internally by the server
   34 #
   35 ATTRIBUTE	Auth-Type				1000	integer
   36 ATTRIBUTE	Menu					1001	string
   37 ATTRIBUTE	Termination-Menu			1002	string
   38 ATTRIBUTE	Prefix					1003	string
   39 ATTRIBUTE	Suffix					1004	string
   40 ATTRIBUTE	Group					1005	string
   41 ATTRIBUTE	Crypt-Password				1006	string
   42 #ATTRIBUTE	Connect-Rate				1007	integer
   43 ATTRIBUTE	Add-Prefix				1008	string
   44 ATTRIBUTE	Add-Suffix				1009	string
   45 ATTRIBUTE	Expiration				1010	date
   46 ATTRIBUTE	Autz-Type				1011	integer
   47 ATTRIBUTE	Acct-Type				1012	integer
   48 ATTRIBUTE	Session-Type				1013	integer
   49 ATTRIBUTE	Post-Auth-Type				1014	integer
   50 ATTRIBUTE	Pre-Proxy-Type				1015	integer
   51 ATTRIBUTE	Post-Proxy-Type				1016	integer
   52 ATTRIBUTE	Pre-Acct-Type				1017	integer
   53 
   54 #
   55 #	This is the EAP type of authentication, which is set
   56 #	by the EAP module, for informational purposes only.
   57 #
   58 ATTRIBUTE	EAP-Type				1018	integer
   59 ATTRIBUTE	EAP-TLS-Require-Client-Cert		1019	integer
   60 ATTRIBUTE	EAP-Id					1020	integer
   61 ATTRIBUTE	EAP-Code				1021	integer
   62 ATTRIBUTE	EAP-MD5-Password			1022	string
   63 ATTRIBUTE	PEAP-Version				1023	integer
   64 ATTRIBUTE	Client-Shortname			1024	string virtual
   65 ATTRIBUTE	Load-Balance-Key			1025	string
   66 ATTRIBUTE	Raw-Attribute				1026	octets
   67 ATTRIBUTE	TNC-VLAN-Access				1027	string
   68 ATTRIBUTE	TNC-VLAN-Isolate			1028	string
   69 ATTRIBUTE	User-Category				1029	string
   70 ATTRIBUTE	Group-Name				1030	string
   71 ATTRIBUTE	Huntgroup-Name				1031	string
   72 ATTRIBUTE	Simultaneous-Use			1034	integer
   73 ATTRIBUTE	Strip-User-Name				1035	integer
   74 ATTRIBUTE	Hint					1040	string
   75 ATTRIBUTE	Pam-Auth				1041	string
   76 ATTRIBUTE	Login-Time				1042	string
   77 ATTRIBUTE	Stripped-User-Name			1043	string
   78 ATTRIBUTE	Current-Time				1044	string
   79 ATTRIBUTE	Realm					1045	string
   80 ATTRIBUTE	No-Such-Attribute			1046	string
   81 ATTRIBUTE	Packet-Type				1047	integer virtual
   82 ATTRIBUTE	Proxy-To-Realm				1048	string
   83 ATTRIBUTE	Replicate-To-Realm			1049	string
   84 ATTRIBUTE	Acct-Session-Start-Time			1050	date
   85 ATTRIBUTE	Acct-Unique-Session-Id			1051	string
   86 ATTRIBUTE	Client-IP-Address			1052	ipaddr virtual
   87 ATTRIBUTE	LDAP-UserDN				1053	string
   88 ATTRIBUTE	NS-MTA-MD5-Password			1054	string
   89 ATTRIBUTE	SQL-User-Name				1055	string
   90 ATTRIBUTE	LM-Password				1057	octets
   91 ATTRIBUTE	NT-Password				1058	octets
   92 ATTRIBUTE	SMB-Account-CTRL			1059	integer
   93 ATTRIBUTE	SMB-Account-CTRL-TEXT			1061	string
   94 ATTRIBUTE	User-Profile				1062	string
   95 ATTRIBUTE	Digest-Realm				1063	string
   96 ATTRIBUTE	Digest-Nonce				1064	string
   97 ATTRIBUTE	Digest-Method				1065	string
   98 ATTRIBUTE	Digest-URI				1066	string
   99 ATTRIBUTE	Digest-QOP				1067	string
  100 ATTRIBUTE	Digest-Algorithm			1068	string
  101 ATTRIBUTE	Digest-Body-Digest			1069	string
  102 ATTRIBUTE	Digest-CNonce				1070	string
  103 ATTRIBUTE	Digest-Nonce-Count			1071	string
  104 ATTRIBUTE	Digest-User-Name			1072	string
  105 ATTRIBUTE	Pool-Name				1073	string
  106 # LDAP-Group is now dynamically created
  107 ATTRIBUTE	Module-Success-Message			1075	string
  108 ATTRIBUTE	Module-Failure-Message			1076	string
  109 #		X99-Fast		1077	integer
  110 ATTRIBUTE	Rewrite-Rule				1078	string
  111 # SQL-Group is now dynamically created
  112 ATTRIBUTE	Response-Packet-Type			1080	integer virtual
  113 ATTRIBUTE	Digest-HA1				1081	string
  114 ATTRIBUTE	MS-CHAP-Use-NTLM-Auth			1082	integer
  115 ATTRIBUTE	NTLM-User-Name				1083	string
  116 ATTRIBUTE	MS-CHAP-User-Name			1083	string
  117 ATTRIBUTE	Packet-Src-IP-Address			1084	ipaddr virtual
  118 ATTRIBUTE	Packet-Dst-IP-Address			1085	ipaddr virtual
  119 ATTRIBUTE	Packet-Src-Port				1086	integer virtual
  120 ATTRIBUTE	Packet-Dst-Port				1087	integer virtual
  121 ATTRIBUTE	Packet-Authentication-Vector		1088	octets virtual
  122 ATTRIBUTE	Time-Of-Day				1089	string
  123 ATTRIBUTE	Request-Processing-Stage		1090	string virtual
  124 ATTRIBUTE	SHA2-Password				1092	octets
  125 ATTRIBUTE	SHA-Password				1093	octets
  126 ATTRIBUTE	SSHA-Password				1094	octets
  127 ATTRIBUTE	SHA1-Password				1093	octets
  128 ATTRIBUTE	SSHA1-Password				1094	octets
  129 ATTRIBUTE	MD5-Password				1095	octets
  130 ATTRIBUTE	SMD5-Password				1096	octets
  131 ATTRIBUTE	Packet-Src-IPv6-Address			1097	ipv6addr virtual
  132 ATTRIBUTE	Packet-Dst-IPv6-Address			1098	ipv6addr virtual
  133 ATTRIBUTE	Virtual-Server				1099	string virtual
  134 ATTRIBUTE	Cleartext-Password			1100	string
  135 ATTRIBUTE	Password-With-Header			1101	string
  136 ATTRIBUTE	Inner-Tunnel-User-Name			1102	string
  137 #
  138 #	EAP-IKEv2 is experimental.
  139 #
  140 ATTRIBUTE	EAP-IKEv2-IDType			1103	integer
  141 
  142 VALUE	EAP-IKEv2-IDType		IPV4_ADDR		1
  143 VALUE	EAP-IKEv2-IDType		FQDN			2
  144 VALUE	EAP-IKEv2-IDType		RFC822_ADDR		3
  145 VALUE	EAP-IKEv2-IDType		IPV6_ADDR		5
  146 VALUE	EAP-IKEv2-IDType		DER_ASN1_DN		9
  147 VALUE	EAP-IKEv2-IDType		DER_ASN1_GN		10
  148 VALUE	EAP-IKEv2-IDType		KEY_ID			11
  149 
  150 ATTRIBUTE	EAP-IKEv2-ID				1104	string
  151 ATTRIBUTE	EAP-IKEv2-Secret			1105	string	secret
  152 ATTRIBUTE	EAP-IKEv2-AuthType			1106	integer
  153 
  154 VALUE	EAP-IKEv2-AuthType		none			0
  155 VALUE	EAP-IKEv2-AuthType		secret			1
  156 VALUE	EAP-IKEv2-AuthType		cert			2
  157 VALUE	EAP-IKEv2-AuthType		both			3
  158 
  159 ATTRIBUTE	Send-Disconnect-Request			1107	integer
  160 ATTRIBUTE	Send-CoA-Request			1107	integer
  161 
  162 VALUE	Send-CoA-Request		No			0
  163 VALUE	Send-CoA-Request		Yes			1
  164 
  165 ATTRIBUTE	Module-Return-Code			1108	integer virtual
  166 
  167 VALUE	Module-Return-Code		reject			0
  168 VALUE	Module-Return-Code		fail			1
  169 VALUE	Module-Return-Code		ok			2
  170 VALUE	Module-Return-Code		handled			3
  171 VALUE	Module-Return-Code		invalid			4
  172 VALUE	Module-Return-Code		userlock		5
  173 VALUE	Module-Return-Code		notfound		6
  174 VALUE	Module-Return-Code		noop			7
  175 VALUE	Module-Return-Code		updated			8
  176 
  177 ATTRIBUTE	Packet-Original-Timestamp		1109	date
  178 ATTRIBUTE	SQL-Table-Name				1110	string
  179 ATTRIBUTE	Home-Server-Pool			1111	string
  180 
  181 # For delayed evaluation of maps
  182 ATTRIBUTE	Attribute-Map				1112	string
  183 
  184 # See sites-available/coa-relay
  185 ATTRIBUTE	COA-Packet-Type				1113	string
  186 ATTRIBUTE	COA-Packet-DST-IP-Address		1114	ipaddr
  187 ATTRIBUTE	COA-Packet-DST-Port			1115	integer
  188 ATTRIBUTE	COA-Acct-Session-Id			1116	string
  189 
  190 ATTRIBUTE	FreeRADIUS-Client-IP-Address		1120	ipaddr
  191 ATTRIBUTE	FreeRADIUS-Client-IPv6-Address		1121	ipv6addr
  192 # The rest of the FreeRADIUS-Client-* attributes are at 1150...
  193 
  194 ATTRIBUTE	FreeRADIUS-Client-Require-MA		1122	integer
  195 
  196 VALUE	FreeRADIUS-Client-Require-MA	no			0
  197 VALUE	FreeRADIUS-Client-Require-MA	yes			1
  198 
  199 ATTRIBUTE	FreeRADIUS-Client-Secret		1123	string secret
  200 ATTRIBUTE	FreeRADIUS-Client-Shortname		1124	string
  201 ATTRIBUTE	FreeRADIUS-Client-NAS-Type		1125	string
  202 ATTRIBUTE	FreeRADIUS-Client-Virtual-Server	1126	string
  203 
  204 # For session resumption
  205 ATTRIBUTE	Allow-Session-Resumption		1127	integer
  206 
  207 VALUE	Allow-Session-Resumption	no			0
  208 VALUE	Allow-Session-Resumption	yes			1
  209 
  210 ATTRIBUTE	EAP-Session-Resumed			1128	integer
  211 
  212 VALUE	EAP-Session-Resumed		no			0
  213 VALUE	EAP-Session-Resumed		yes			1
  214 
  215 #
  216 #	Expose EAP keys in the reply.
  217 #
  218 ATTRIBUTE	EAP-MSK					1129	octets
  219 ATTRIBUTE	EAP-EMSK				1130	octets
  220 
  221 #
  222 #	For send/recv CoA packets (like Auth-Type, Acct-Type, etc.)
  223 #
  224 ATTRIBUTE	Recv-CoA-Type				1131	integer
  225 ATTRIBUTE	Send-CoA-Type				1132	integer
  226 
  227 ATTRIBUTE	MS-CHAP-Password			1133	string
  228 ATTRIBUTE	Packet-Transmit-Counter			1134	integer
  229 ATTRIBUTE	Cached-Session-Policy			1135	string
  230 ATTRIBUTE	MS-CHAP-New-Cleartext-Password		1136	string
  231 ATTRIBUTE	MS-CHAP-New-NT-Password			1137	octets
  232 
  233 #	For default policies
  234 
  235 ATTRIBUTE	Stripped-User-Domain			1138	string
  236 ATTRIBUTE	Called-Station-SSID			1139	string
  237 
  238 ATTRIBUTE	OTP-Challenge				1145	string
  239 ATTRIBUTE	EAP-Session-Id				1146	octets
  240 ATTRIBUTE	Chbind-Response-Code			1147	integer
  241 
  242 VALUE	Chbind-Response-Code		success			2
  243 VALUE	Chbind-Response-Code		failure			3
  244 
  245 ATTRIBUTE	Acct-Input-Octets64			1148	integer64
  246 ATTRIBUTE	Acct-Output-Octets64			1149	integer64
  247 
  248 ATTRIBUTE	FreeRADIUS-Client-IP-Prefix		1150	ipv4prefix
  249 ATTRIBUTE	FreeRADIUS-Client-IPv6-Prefix		1151	ipv6prefix
  250 ATTRIBUTE	FreeRADIUS-Response-Delay		1152	integer
  251 ATTRIBUTE	FreeRADIUS-Client-Src-IP-Address	1153	ipaddr
  252 ATTRIBUTE	FreeRADIUS-Client-Src-IPv6-Address	1154	ipv6addr
  253 ATTRIBUTE	FreeRADIUS-Response-Delay-USec		1155	integer
  254 
  255 ATTRIBUTE	REST-HTTP-Header			1160	string
  256 ATTRIBUTE	REST-HTTP-Body				1161	string
  257 ATTRIBUTE	REST-HTTP-Status-Code			1162	integer
  258 
  259 ATTRIBUTE	Cache-Expires				1170	date
  260 ATTRIBUTE	Cache-Created				1171	date
  261 ATTRIBUTE	Cache-TTL				1172	signed
  262 ATTRIBUTE	Cache-Status-Only			1173	integer
  263 ATTRIBUTE	Cache-Merge				1174	integer
  264 ATTRIBUTE	Cache-Entry-Hits			1175	integer
  265 ATTRIBUTE	Cache-Read-Only				1176	integer
  266 
  267 VALUE	Cache-Status-Only		no			0
  268 VALUE	Cache-Status-Only		yes			1
  269 
  270 VALUE	Cache-Merge			no			0
  271 VALUE	Cache-Merge			yes			1
  272 
  273 VALUE	Cache-Read-Only			no			0
  274 VALUE	Cache-Read-Only			yes			1
  275 
  276 ATTRIBUTE	SSHA2-224-Password			1177	octets
  277 ATTRIBUTE	SSHA2-256-Password			1178	octets
  278 ATTRIBUTE	SSHA2-384-Password			1179	octets
  279 ATTRIBUTE	SSHA2-512-Password			1180	octets
  280 
  281 ATTRIBUTE	PBKDF2-Password				1181	octets
  282 ATTRIBUTE	SSHA3-224-Password			1182	octets
  283 ATTRIBUTE	SSHA3-256-Password			1183	octets
  284 ATTRIBUTE	SSHA3-384-Password			1184	octets
  285 ATTRIBUTE	SSHA3-512-Password			1185	octets
  286 
  287 ATTRIBUTE	MS-CHAP-Peer-Challenge			1192	octets
  288 ATTRIBUTE	Home-Server-Name			1193	string
  289 
  290 ATTRIBUTE	TOTP-Secret				1194	string # base32 encoded
  291 ATTRIBUTE	TOTP-Key				1195	octets # raw key
  292 ATTRIBUTE	TOTP-Password				1196	string
  293 
  294 ATTRIBUTE	Proxy-Tunneled-Request-As-EAP		1197	integer
  295 VALUE	Proxy-Tunneled-Request-As-EAP	No			0
  296 VALUE	Proxy-Tunneled-Request-As-EAP	Yes			1
  297 
  298 #
  299 #	Range:	1200-1279
  300 #		EAP-SIM (and other EAP type) weirdness.
  301 #
  302 #	For EAP-SIM, some attribute definitions for database interface
  303 #
  304 ATTRIBUTE	EAP-Sim-Subtype				1200	integer
  305 
  306 ATTRIBUTE	EAP-Sim-Rand1				1201	octets
  307 ATTRIBUTE	EAP-Sim-Rand2				1202	octets
  308 ATTRIBUTE	EAP-Sim-Rand3				1203	octets
  309 
  310 ATTRIBUTE	EAP-Sim-SRES1				1204	octets
  311 ATTRIBUTE	EAP-Sim-SRES2				1205	octets
  312 ATTRIBUTE	EAP-Sim-SRES3				1206	octets
  313 
  314 VALUE	EAP-Sim-Subtype			Start			10
  315 VALUE	EAP-Sim-Subtype			Challenge		11
  316 VALUE	EAP-Sim-Subtype			Notification		12
  317 VALUE	EAP-Sim-Subtype			Re-authentication	13
  318 
  319 # this attribute is used internally by the client code.
  320 ATTRIBUTE	EAP-Sim-State				1207	integer
  321 
  322 ATTRIBUTE	EAP-Sim-IMSI				1208	string
  323 ATTRIBUTE	EAP-Sim-HMAC				1209	string
  324 ATTRIBUTE	EAP-Sim-KEY				1210	octets
  325 ATTRIBUTE	EAP-Sim-EXTRA				1211	octets
  326 
  327 ATTRIBUTE	EAP-Sim-KC1				1212	octets
  328 ATTRIBUTE	EAP-Sim-KC2				1213	octets
  329 ATTRIBUTE	EAP-Sim-KC3				1214	octets
  330 
  331 ATTRIBUTE	EAP-Sim-Ki				1215	octets
  332 ATTRIBUTE	EAP-Sim-Algo-Version			1216	integer
  333 
  334 ATTRIBUTE	Outer-Realm-Name			1218	string
  335 ATTRIBUTE	Inner-Realm-Name			1219	string
  336 
  337 ATTRIBUTE	EAP-Pwd-Password-Hash			1220	octets
  338 ATTRIBUTE	EAP-Pwd-Password-Salt			1221	octets
  339 ATTRIBUTE	EAP-Pwd-Password-Prep			1222	byte
  340 
  341 #
  342 #	Range:	1280 - 1535
  343 #		EAP-type specific attributes
  344 #
  345 #		These are used mostly for radeapclient, and aren't
  346 #		that useful for anyone else.
  347 #
  348 #  egrep VALUE dictionary.freeradius.internal  | grep EAP-Type | awk '{print "ATTRIBUTE EAP-Type-" $3 " " 1280+$4 " octets"}' > foo;./format.pl foo
  349 #
  350 ATTRIBUTE	EAP-Type-Base				1280	octets
  351 ATTRIBUTE	EAP-Type-VALUE				1280	octets
  352 ATTRIBUTE	EAP-Type-None				1280	octets
  353 ATTRIBUTE	EAP-Type-Identity			1281	octets
  354 ATTRIBUTE	EAP-Type-Notification			1282	octets
  355 ATTRIBUTE	EAP-Type-NAK				1283	octets
  356 ATTRIBUTE	EAP-Type-MD5-Challenge			1284	octets
  357 ATTRIBUTE	EAP-Type-One-Time-Password		1285	octets
  358 ATTRIBUTE	EAP-Type-Generic-Token-Card		1286	octets
  359 ATTRIBUTE	EAP-Type-RSA-Public-Key			1289	octets
  360 ATTRIBUTE	EAP-Type-DSS-Unilateral			1290	octets
  361 ATTRIBUTE	EAP-Type-KEA				1291	octets
  362 ATTRIBUTE	EAP-Type-KEA-Validate			1292	octets
  363 ATTRIBUTE	EAP-Type-EAP-TLS			1293	octets
  364 ATTRIBUTE	EAP-Type-Defender-Token			1294	octets
  365 ATTRIBUTE	EAP-Type-RSA-SecurID-EAP		1295	octets
  366 ATTRIBUTE	EAP-Type-Arcot-Systems-EAP		1296	octets
  367 ATTRIBUTE	EAP-Type-Cisco-LEAP			1297	octets
  368 ATTRIBUTE	EAP-Type-Nokia-IP-Smart-Card		1298	octets
  369 ATTRIBUTE	EAP-Type-SIM				1298	octets
  370 ATTRIBUTE	EAP-Type-SRP-SHA1			1299	octets
  371 ATTRIBUTE	EAP-Type-EAP-TTLS			1301	octets
  372 ATTRIBUTE	EAP-Type-Remote-Access-Service		1302	octets
  373 ATTRIBUTE	EAP-Type-AKA				1303	octets
  374 ATTRIBUTE	EAP-Type-EAP-3Com-Wireless		1304	octets
  375 ATTRIBUTE	EAP-Type-PEAP				1305	octets
  376 ATTRIBUTE	EAP-Type-MS-EAP-Authentication		1306	octets
  377 ATTRIBUTE	EAP-Type-MAKE				1307	octets
  378 ATTRIBUTE	EAP-Type-CRYPTOCard			1308	octets
  379 ATTRIBUTE	EAP-Type-EAP-MSCHAP-V2			1309	octets
  380 ATTRIBUTE	EAP-Type-DynamID			1310	octets
  381 ATTRIBUTE	EAP-Type-Rob-EAP			1311	octets
  382 ATTRIBUTE	EAP-Type-SecurID-EAP			1312	octets
  383 ATTRIBUTE	EAP-Type-MS-Authentication-TLV		1313	octets
  384 ATTRIBUTE	EAP-Type-SentriNET			1314	octets
  385 ATTRIBUTE	EAP-Type-EAP-Actiontec-Wireless		1315	octets
  386 ATTRIBUTE	EAP-Type-Cogent-Biomentric-EAP		1316	octets
  387 ATTRIBUTE	EAP-Type-AirFortress-EAP		1317	octets
  388 ATTRIBUTE	EAP-Type-EAP-HTTP-Digest		1318	octets
  389 ATTRIBUTE	EAP-Type-SecuriSuite-EAP		1319	octets
  390 ATTRIBUTE	EAP-Type-DeviceConnect-EAP		1320	octets
  391 ATTRIBUTE	EAP-Type-EAP-SPEKE			1321	octets
  392 ATTRIBUTE	EAP-Type-EAP-MOBAC			1322	octets
  393 ATTRIBUTE	EAP-Type-EAP-FAST			1323	octets
  394 ATTRIBUTE	EAP-Type-Zonelabs			1324	octets
  395 ATTRIBUTE	EAP-Type-EAP-Link			1325	octets
  396 ATTRIBUTE	EAP-Type-EAP-PAX			1326	octets
  397 ATTRIBUTE	EAP-Type-EAP-PSK			1327	octets
  398 ATTRIBUTE	EAP-Type-EAP-SAKE			1328	octets
  399 ATTRIBUTE	EAP-Type-EAP-IKEv2			1329	octets
  400 ATTRIBUTE	EAP-Type-EAP-AKA2			1330	octets
  401 ATTRIBUTE	EAP-Type-EAP-GPSK			1331	octets
  402 ATTRIBUTE	EAP-Type-EAP-PWD			1332	octets
  403 ATTRIBUTE	EAP-Type-EAP-EVEv1			1333	octets
  404 
  405 ATTRIBUTE	EAP-Type-Microsoft-MS-CHAPv2		1306	octets
  406 ATTRIBUTE	EAP-Type-Cisco-MS-CHAPv2		1309	octets
  407 ATTRIBUTE	EAP-Type-MS-CHAP-V2			1306	octets
  408 
  409 #
  410 #	Range:	1536 - 1791
  411 #		EAP Sim sub-types.
  412 #
  413 
  414 # these are PW_EAP_SIM_X + 1536
  415 ATTRIBUTE	EAP_Sim-Base				1536	octets
  416 ATTRIBUTE	EAP-Sim-RAND				1537	octets
  417 ATTRIBUTE	EAP-Sim-PADDING				1542	octets
  418 ATTRIBUTE	EAP-Sim-NONCE_MT			1543	octets
  419 ATTRIBUTE	EAP-Sim-PERMANENT_ID_REQ		1546	octets
  420 ATTRIBUTE	EAP-Sim-MAC				1547	octets
  421 ATTRIBUTE	EAP-Sim-NOTIFICATION			1548	octets
  422 ATTRIBUTE	EAP-Sim-ANY_ID_REQ			1549	octets
  423 ATTRIBUTE	EAP-Sim-IDENTITY			1550	octets
  424 ATTRIBUTE	EAP-Sim-VERSION_LIST			1551	octets
  425 ATTRIBUTE	EAP-Sim-SELECTED_VERSION		1552	octets
  426 ATTRIBUTE	EAP-Sim-FULLAUTH_ID_REQ			1553	octets
  427 ATTRIBUTE	EAP-Sim-COUNTER				1555	octets
  428 ATTRIBUTE	EAP-Sim-COUNTER_TOO_SMALL		1556	octets
  429 ATTRIBUTE	EAP-Sim-NONCE_S				1557	octets
  430 ATTRIBUTE	EAP-Sim-IV				1665	octets
  431 ATTRIBUTE	EAP-Sim-ENCR_DATA			1666	octets
  432 ATTRIBUTE	EAP-Sim-NEXT_PSEUDONUM			1668	octets
  433 ATTRIBUTE	EAP-Sim-NEXT_REAUTH_ID			1669	octets
  434 ATTRIBUTE	EAP-Sim-CHECKCODE			1670	octets
  435 
  436 #
  437 #	Range: 1800-1899
  438 #	       Temporary attributes, for local storage.
  439 #
  440 ATTRIBUTE	Tmp-String-0				1800	string
  441 ATTRIBUTE	Tmp-String-1				1801	string
  442 ATTRIBUTE	Tmp-String-2				1802	string
  443 ATTRIBUTE	Tmp-String-3				1803	string
  444 ATTRIBUTE	Tmp-String-4				1804	string
  445 ATTRIBUTE	Tmp-String-5				1805	string
  446 ATTRIBUTE	Tmp-String-6				1806	string
  447 ATTRIBUTE	Tmp-String-7				1807	string
  448 ATTRIBUTE	Tmp-String-8				1808	string
  449 ATTRIBUTE	Tmp-String-9				1809	string
  450 
  451 ATTRIBUTE	Tmp-Integer-0				1810	integer
  452 ATTRIBUTE	Tmp-Integer-1				1811	integer
  453 ATTRIBUTE	Tmp-Integer-2				1812	integer
  454 ATTRIBUTE	Tmp-Integer-3				1813	integer
  455 ATTRIBUTE	Tmp-Integer-4				1814	integer
  456 ATTRIBUTE	Tmp-Integer-5				1815	integer
  457 ATTRIBUTE	Tmp-Integer-6				1816	integer
  458 ATTRIBUTE	Tmp-Integer-7				1817	integer
  459 ATTRIBUTE	Tmp-Integer-8				1818	integer
  460 ATTRIBUTE	Tmp-Integer-9				1819	integer
  461 
  462 ATTRIBUTE	Tmp-IP-Address-0			1820	ipaddr
  463 ATTRIBUTE	Tmp-IP-Address-1			1821	ipaddr
  464 ATTRIBUTE	Tmp-IP-Address-2			1822	ipaddr
  465 ATTRIBUTE	Tmp-IP-Address-3			1823	ipaddr
  466 ATTRIBUTE	Tmp-IP-Address-4			1824	ipaddr
  467 ATTRIBUTE	Tmp-IP-Address-5			1825	ipaddr
  468 ATTRIBUTE	Tmp-IP-Address-6			1826	ipaddr
  469 ATTRIBUTE	Tmp-IP-Address-7			1827	ipaddr
  470 ATTRIBUTE	Tmp-IP-Address-8			1828	ipaddr
  471 ATTRIBUTE	Tmp-IP-Address-9			1829	ipaddr
  472 
  473 ATTRIBUTE	Tmp-Octets-0				1830	octets
  474 ATTRIBUTE	Tmp-Octets-1				1831	octets
  475 ATTRIBUTE	Tmp-Octets-2				1832	octets
  476 ATTRIBUTE	Tmp-Octets-3				1833	octets
  477 ATTRIBUTE	Tmp-Octets-4				1834	octets
  478 ATTRIBUTE	Tmp-Octets-5				1835	octets
  479 ATTRIBUTE	Tmp-Octets-6				1836	octets
  480 ATTRIBUTE	Tmp-Octets-7				1837	octets
  481 ATTRIBUTE	Tmp-Octets-8				1838	octets
  482 ATTRIBUTE	Tmp-Octets-9				1839	octets
  483 
  484 ATTRIBUTE	Tmp-Date-0				1840	date
  485 ATTRIBUTE	Tmp-Date-1				1841	date
  486 ATTRIBUTE	Tmp-Date-2				1842	date
  487 ATTRIBUTE	Tmp-Date-3				1843	date
  488 ATTRIBUTE	Tmp-Date-4				1844	date
  489 ATTRIBUTE	Tmp-Date-5				1845	date
  490 ATTRIBUTE	Tmp-Date-6				1846	date
  491 ATTRIBUTE	Tmp-Date-7				1847	date
  492 ATTRIBUTE	Tmp-Date-8				1848	date
  493 ATTRIBUTE	Tmp-Date-9				1849	date
  494 
  495 ATTRIBUTE	Tmp-Integer64-0				1871	integer64
  496 ATTRIBUTE	Tmp-Integer64-1				1872	integer64
  497 ATTRIBUTE	Tmp-Integer64-2				1873	integer64
  498 ATTRIBUTE	Tmp-Integer64-3				1874	integer64
  499 ATTRIBUTE	Tmp-Integer64-4				1875	integer64
  500 ATTRIBUTE	Tmp-Integer64-5				1876	integer64
  501 ATTRIBUTE	Tmp-Integer64-6				1877	integer64
  502 ATTRIBUTE	Tmp-Integer64-7				1878	integer64
  503 ATTRIBUTE	Tmp-Integer64-8				1879	integer64
  504 ATTRIBUTE	Tmp-Integer64-9				1880	integer64
  505 #
  506 #  These attributes shouldn't be used anywhere.  They are defined here
  507 #  only for casting of values in conditional expressions.
  508 #
  509 #  The order and number need to be consistent with the typedefs used
  510 #  in the server source.
  511 #
  512 ATTRIBUTE	Tmp-Cast-String				1851	string
  513 ATTRIBUTE	Tmp-Cast-Integer			1852	integer
  514 ATTRIBUTE	Tmp-Cast-Ipaddr				1853	ipaddr
  515 ATTRIBUTE	Tmp-Cast-Date				1854	date
  516 ATTRIBUTE	Tmp-Cast-Abinary			1855	abinary
  517 ATTRIBUTE	Tmp-Cast-Octets				1856	octets
  518 ATTRIBUTE	Tmp-Cast-Ifid				1857	ifid
  519 ATTRIBUTE	Tmp-Cast-IPv6Addr			1858	ipv6addr
  520 ATTRIBUTE	Tmp-Cast-IPv6Prefix			1859	ipv6prefix
  521 ATTRIBUTE	Tmp-Cast-Byte				1860	byte
  522 ATTRIBUTE	Tmp-Cast-Short				1861	short
  523 ATTRIBUTE	Tmp-Cast-Ethernet			1862	ether
  524 ATTRIBUTE	Tmp-Cast-Signed				1863	signed
  525 # don't use or define these
  526 ATTRIBUTE	Tmp-Cast-Integer64			1869	integer64
  527 ATTRIBUTE	Tmp-Cast-IPv4Prefix			1870	ipv4prefix
  528 # don't use or define VSA or MAX
  529 
  530 #	Range:	1900-1909
  531 #	WiMAX server-side attributes.
  532 #
  533 #	These are NOT sent in a packet, but are otherwise
  534 #	available for testing and validation.  The various
  535 #	things that *are* sent in a packet are derived from
  536 #	these attributes.
  537 #
  538 ATTRIBUTE	WiMAX-MN-NAI				1900	string
  539 ATTRIBUTE	WiMAX-SIM-Ki				1901	octets
  540 ATTRIBUTE	WiMAX-SIM-OPc				1902	octets
  541 ATTRIBUTE	WiMAX-SIM-AMF				1903	octets
  542 ATTRIBUTE	WiMAX-SIM-SQN				1904	octets
  543 ATTRIBUTE	WiMAX-SIM-RAND				1905	octets
  544 
  545 ATTRIBUTE	TLS-Cert-Serial				1910	string
  546 ATTRIBUTE	TLS-Cert-Expiration			1911	string
  547 ATTRIBUTE	TLS-Cert-Issuer				1912	string
  548 ATTRIBUTE	TLS-Cert-Subject			1913	string
  549 ATTRIBUTE	TLS-Cert-Common-Name			1914	string
  550 ATTRIBUTE	TLS-Cert-Subject-Alt-Name-Email		1915	string
  551 ATTRIBUTE	TLS-Cert-Subject-Alt-Name-Dns		1916	string
  552 ATTRIBUTE	TLS-Cert-Subject-Alt-Name-Upn		1917	string
  553 ATTRIBUTE	TLS-Cert-Valid-Since			1918	string
  554 ATTRIBUTE	TLS-Session-Information			1919	string
  555 ATTRIBUTE	TLS-Client-Cert-Serial			1920	string
  556 ATTRIBUTE	TLS-Client-Cert-Expiration		1921	string
  557 ATTRIBUTE	TLS-Client-Cert-Issuer			1922	string
  558 ATTRIBUTE	TLS-Client-Cert-Subject			1923	string
  559 ATTRIBUTE	TLS-Client-Cert-Common-Name		1924	string
  560 ATTRIBUTE	TLS-Client-Cert-Filename		1925	string
  561 ATTRIBUTE	TLS-Client-Cert-Subject-Alt-Name-Email	1926	string
  562 ATTRIBUTE	TLS-Client-Cert-X509v3-Extended-Key-Usage 1927	string
  563 ATTRIBUTE	TLS-Client-Cert-X509v3-Subject-Key-Identifier 1928	string
  564 ATTRIBUTE	TLS-Client-Cert-X509v3-Authority-Key-Identifier 1929	string
  565 ATTRIBUTE	TLS-Client-Cert-X509v3-Basic-Constraints 1930	string
  566 ATTRIBUTE	TLS-Client-Cert-Subject-Alt-Name-Dns	1931	string
  567 ATTRIBUTE	TLS-Client-Cert-Subject-Alt-Name-Upn	1932	string
  568 ATTRIBUTE	TLS-PSK-Identity			1933	string
  569 ATTRIBUTE	TLS-Client-Cert-X509v3-Extended-Key-Usage-OID 1936	string
  570 ATTRIBUTE	TLS-Client-Cert-Valid-Since		1937	string
  571 ATTRIBUTE	TLS-Cache-Method			1938	integer
  572 VALUE	TLS-Cache-Method		save			1
  573 VALUE	TLS-Cache-Method		load			2
  574 VALUE	TLS-Cache-Method		clear			3
  575 VALUE	TLS-Cache-Method		refresh			4
  576 
  577 
  578 # 1939: reserved for future cert attributes
  579 
  580 # 1940 - 1949: reserved for TLS session caching, mostly in 4.0
  581 
  582 ATTRIBUTE	TLS-Session-ID				1940	octets
  583 ATTRIBUTE	TLS-Session-Data			1942	octets
  584 
  585 # Set by EAP-TLS code
  586 ATTRIBUTE	TLS-OCSP-Cert-Valid			1943	integer
  587 VALUE	TLS-OCSP-Cert-Valid		unknown			3
  588 VALUE	TLS-OCSP-Cert-Valid		skipped			2
  589 VALUE	TLS-OCSP-Cert-Valid		yes			1
  590 VALUE	TLS-OCSP-Cert-Valid		no			0
  591 
  592 ATTRIBUTE	TLS-Cache-Filename			1946	string
  593 
  594 ATTRIBUTE	TLS-Session-Version			1947	string
  595 ATTRIBUTE	TLS-Session-Cipher-Suite		1948	string
  596 
  597 #
  598 #	Range:	1950-2099
  599 #		Free
  600 #
  601 #	Range:	2100-2199
  602 #	SoH attributes; FIXME: these should really be protocol attributes
  603 #	so that the SoH radius request can be proxied, but from which
  604 #	vendor? Sigh...
  605 #
  606 ATTRIBUTE	SoH-MS-Machine-OS-vendor		2100	integer
  607 VALUE	SoH-MS-Machine-OS-vendor	Microsoft		311
  608 
  609 ATTRIBUTE	SoH-MS-Machine-OS-version		2101	integer
  610 ATTRIBUTE	SoH-MS-Machine-OS-release		2102	integer
  611 ATTRIBUTE	SoH-MS-Machine-OS-build			2103	integer
  612 ATTRIBUTE	SoH-MS-Machine-SP-version		2104	integer
  613 ATTRIBUTE	SoH-MS-Machine-SP-release		2105	integer
  614 
  615 ATTRIBUTE	SoH-MS-Machine-Processor		2106	integer
  616 VALUE	SoH-MS-Machine-Processor	x86			0
  617 VALUE	SoH-MS-Machine-Processor	i64			6
  618 VALUE	SoH-MS-Machine-Processor	x86_64			9
  619 
  620 ATTRIBUTE	SoH-MS-Machine-Name			2107	string
  621 ATTRIBUTE	SoH-MS-Correlation-Id			2108	octets
  622 ATTRIBUTE	SoH-MS-Machine-Role			2109	integer
  623 VALUE	SoH-MS-Machine-Role		client			1
  624 VALUE	SoH-MS-Machine-Role		dc			2
  625 VALUE	SoH-MS-Machine-Role		server			3
  626 
  627 ATTRIBUTE	SoH-Supported				2119	integer
  628 VALUE	SoH-Supported			no			0
  629 VALUE	SoH-Supported			yes			1
  630 
  631 ATTRIBUTE	SoH-MS-Windows-Health-Status		2120	string
  632 ATTRIBUTE	SoH-MS-Health-Other			2129	string
  633 
  634 #
  635 #	Range:	2200-2219
  636 #		Utilities bundled with the server
  637 #
  638 ATTRIBUTE	Radclient-Test-Name			2200	string
  639 
  640 #
  641 #	Range:	2220-2999
  642 #		Free
  643 #
  644 #	Range:	3000-3999
  645 #		Site-local attributes (see raddb/dictionary.in)
  646 #		Do NOT define attributes in this range!
  647 #
  648 #	Range:	4000-65535
  649 #		Unused
  650 #
  651 #	Range:	65536-
  652 #		Invalid.  Don't use.
  653 #
  654 
  655 #
  656 #	Non-Protocol Integer Translations
  657 #
  658 
  659 VALUE	Auth-Type			Local			1
  660 VALUE	Auth-Type			Reject			4
  661 
  662 #
  663 #	FreeRADIUS extensions (most originally from Cistron)
  664 #
  665 VALUE	Auth-Type			Accept			254
  666 
  667 #
  668 #	Authorization type, too.
  669 #
  670 VALUE	Autz-Type			Local			1
  671 
  672 #
  673 #	And accounting
  674 #
  675 VALUE	Acct-Type			Local			1
  676 
  677 #
  678 #	And Session handling
  679 #
  680 VALUE	Session-Type			Local			1
  681 
  682 #
  683 #	And Post-Auth
  684 VALUE	Post-Auth-Type			Local			1
  685 VALUE	Post-Auth-Type			Reject			2
  686 VALUE	Post-Auth-Type			Challenge		3
  687 VALUE	Post-Auth-Type			Client-Lost		4
  688 
  689 #
  690 #	And Post-Proxy
  691 VALUE	Post-Proxy-Type			Fail			1
  692 VALUE	Post-Proxy-Type			Fail-Authentication	2
  693 VALUE	Post-Proxy-Type			Fail-Accounting		3
  694 VALUE	Post-Proxy-Type			Fail-CoA		4
  695 VALUE	Post-Proxy-Type			Fail-Disconnect		5
  696 
  697 #
  698 #	Experimental Non-Protocol Integer Translations for FreeRADIUS
  699 #
  700 VALUE	Fall-Through			No			0
  701 VALUE	Fall-Through			Yes			1
  702 
  703 VALUE	Relax-Filter			No			0
  704 VALUE	Relax-Filter			Yes			1
  705 
  706 VALUE	Strip-User-Name			No			0
  707 VALUE	Strip-User-Name			Yes			1
  708 
  709 VALUE	Packet-Type			Access-Request		1
  710 VALUE	Packet-Type			Access-Accept		2
  711 VALUE	Packet-Type			Access-Reject		3
  712 VALUE	Packet-Type			Accounting-Request	4
  713 VALUE	Packet-Type			Accounting-Response	5
  714 VALUE	Packet-Type			Accounting-Status	6
  715 VALUE	Packet-Type			Password-Request	7
  716 VALUE	Packet-Type			Password-Accept		8
  717 VALUE	Packet-Type			Password-Reject		9
  718 VALUE	Packet-Type			Accounting-Message	10
  719 VALUE	Packet-Type			Access-Challenge	11
  720 VALUE	Packet-Type			Status-Server		12
  721 VALUE	Packet-Type			Status-Client		13
  722 
  723 #
  724 #	The following packet types are described in RFC 2882,
  725 #	but they are NOT part of the RADIUS standard.  Instead,
  726 #	they are informational about vendor-specific extensions
  727 #	to the RADIUS standard.
  728 #
  729 VALUE	Packet-Type			Resource-Free-Request	21
  730 VALUE	Packet-Type			Resource-Free-Response	22
  731 VALUE	Packet-Type			Resource-Query-Request	23
  732 VALUE	Packet-Type			Resource-Query-Response	24
  733 VALUE	Packet-Type			Alternate-Resource-Reclaim-Request 25
  734 VALUE	Packet-Type			NAS-Reboot-Request	26
  735 VALUE	Packet-Type			NAS-Reboot-Response	27
  736 VALUE	Packet-Type			Next-Passcode		29
  737 VALUE	Packet-Type			New-Pin			30
  738 VALUE	Packet-Type			Terminate-Session	31
  739 VALUE	Packet-Type			Password-Expired	32
  740 VALUE	Packet-Type			Event-Request		33
  741 VALUE	Packet-Type			Event-Response		34
  742 
  743 #	RFC 3576 allocates packet types 40-45
  744 
  745 VALUE	Packet-Type			Disconnect-Request	40
  746 VALUE	Packet-Type			Disconnect-ACK		41
  747 VALUE	Packet-Type			Disconnect-NAK		42
  748 VALUE	Packet-Type			CoA-Request		43
  749 VALUE	Packet-Type			CoA-ACK			44
  750 VALUE	Packet-Type			CoA-NAK			45
  751 
  752 VALUE	Packet-Type			IP-Address-Allocate	50
  753 VALUE	Packet-Type			IP-Address-Release	51
  754 
  755 VALUE	Response-Packet-Type		Access-Request		1
  756 VALUE	Response-Packet-Type		Access-Accept		2
  757 VALUE	Response-Packet-Type		Access-Reject		3
  758 VALUE	Response-Packet-Type		Accounting-Request	4
  759 VALUE	Response-Packet-Type		Accounting-Response	5
  760 VALUE	Response-Packet-Type		Accounting-Status	6
  761 VALUE	Response-Packet-Type		Password-Request	7
  762 VALUE	Response-Packet-Type		Password-Accept		8
  763 VALUE	Response-Packet-Type		Password-Reject		9
  764 VALUE	Response-Packet-Type		Accounting-Message	10
  765 VALUE	Response-Packet-Type		Access-Challenge	11
  766 VALUE	Response-Packet-Type		Status-Server		12
  767 VALUE	Response-Packet-Type		Status-Client		13
  768 
  769 VALUE	Response-Packet-Type		Disconnect-Request	40
  770 VALUE	Response-Packet-Type		Disconnect-ACK		41
  771 VALUE	Response-Packet-Type		Disconnect-NAK		42
  772 VALUE	Response-Packet-Type		CoA-Request		43
  773 VALUE	Response-Packet-Type		CoA-ACK			44
  774 VALUE	Response-Packet-Type		CoA-NAK			45
  775 #
  776 #  Special value
  777 #
  778 VALUE	Response-Packet-Type		Do-Not-Respond		256
  779 
  780 #
  781 #	EAP Sub-types, inside of Request and Response packets
  782 #
  783 #	http://www.iana.org/assignments/ppp-numbers
  784 #		"PPP EAP REQUEST/RESPONSE TYPES"
  785 #
  786 #
  787 #	See dictionary.microsoft, MS-Acct-EAP-Type for similar definitions
  788 #
  789 VALUE	EAP-Type			None			0
  790 VALUE	EAP-Type			Identity		1
  791 VALUE	EAP-Type			Notification		2
  792 VALUE	EAP-Type			NAK			3
  793 VALUE	EAP-Type			MD5-Challenge		4
  794 VALUE	EAP-Type			EAP-MD5			4
  795 VALUE	EAP-Type			MD5			4
  796 VALUE	EAP-Type			One-Time-Password	5
  797 VALUE	EAP-Type			OTP			5
  798 VALUE	EAP-Type			Generic-Token-Card	6
  799 VALUE	EAP-Type			EAP-GTC			6
  800 VALUE	EAP-Type			GTC			6
  801 VALUE	EAP-Type			RSA-Public-Key		9
  802 VALUE	EAP-Type			DSS-Unilateral		10
  803 VALUE	EAP-Type			KEA			11
  804 VALUE	EAP-Type			KEA-Validate		12
  805 VALUE	EAP-Type			EAP-TLS			13
  806 VALUE	EAP-Type			TLS			13
  807 VALUE	EAP-Type			Defender-Token		14
  808 VALUE	EAP-Type			RSA-SecurID-EAP		15
  809 VALUE	EAP-Type			Arcot-Systems-EAP	16
  810 VALUE	EAP-Type			Cisco-LEAP		17
  811 VALUE	EAP-Type			LEAP			17
  812 VALUE	EAP-Type			Nokia-IP-Smart-Card	18
  813 VALUE	EAP-Type			EAP-SIM			18
  814 VALUE	EAP-Type			SIM			18
  815 VALUE	EAP-Type			SRP-SHA1		19
  816 # 20 is unassigned
  817 VALUE	EAP-Type			EAP-TTLS		21
  818 VALUE	EAP-Type			TTLS			21
  819 VALUE	EAP-Type			Remote-Access-Service	22
  820 VALUE	EAP-Type			EAP-AKA			23
  821 VALUE	EAP-Type			AKA			23
  822 VALUE	EAP-Type			3Com-Wireless		24
  823 VALUE	EAP-Type			PEAP			25
  824 VALUE	EAP-Type			Microsoft-MS-CHAPv2	26
  825 VALUE	EAP-Type			MAKE			27
  826 VALUE	EAP-Type			CRYPTOCard		28
  827 VALUE	EAP-Type			Cisco-MS-CHAPv2		29
  828 VALUE	EAP-Type			DynamID			30
  829 VALUE	EAP-Type			Rob-EAP			31
  830 VALUE	EAP-Type			SecurID-EAP		32
  831 VALUE	EAP-Type			MS-Authentication-TLV	33
  832 VALUE	EAP-Type			SentriNET		34
  833 VALUE	EAP-Type			Actiontec-Wireless	35
  834 VALUE	EAP-Type			Cogent-Biomentric-EAP	36
  835 VALUE	EAP-Type			AirFortress-EAP		37
  836 VALUE	EAP-Type			HTTP-Digest		38
  837 VALUE	EAP-Type			TNC			38
  838 VALUE	EAP-Type			SecuriSuite-EAP		39
  839 VALUE	EAP-Type			DeviceConnect-EAP	40
  840 VALUE	EAP-Type			SPEKE			41
  841 VALUE	EAP-Type			MOBAC			42
  842 VALUE	EAP-Type			EAP-FAST		43
  843 VALUE	EAP-Type			FAST			43
  844 VALUE	EAP-Type			Zonelabs		44
  845 VALUE	EAP-Type			Link			45
  846 VALUE	EAP-Type			PAX			46
  847 VALUE	EAP-Type			PSK			47
  848 VALUE	EAP-Type			SAKE			48
  849 VALUE	EAP-Type			EAP-IKEv2		49
  850 VALUE	EAP-Type			IKEv2			49
  851 VALUE	EAP-Type			AKA2			50
  852 VALUE	EAP-Type			GPSK			51
  853 VALUE	EAP-Type			PWD			52
  854 VALUE	EAP-Type			EKEv1			53
  855 
  856 #
  857 #	And this is what most people mean by MS-CHAPv2
  858 #
  859 VALUE	EAP-Type			EAP-MSCHAPv2		26
  860 VALUE	EAP-Type			MSCHAPv2		26
  861 
  862 #
  863 #	This says TLS, but it's only valid for TTLS & PEAP.
  864 #	EAP-TLS *always* requires a client certificate.
  865 #
  866 VALUE	EAP-TLS-Require-Client-Cert	No			0
  867 VALUE	EAP-TLS-Require-Client-Cert	Yes			1
  868 
  869 #
  870 # 	These are the EAP-Code values.
  871 #
  872 VALUE	EAP-Code			Request			1
  873 VALUE	EAP-Code			Response		2
  874 VALUE	EAP-Code			Success			3
  875 VALUE	EAP-Code			Failure			4
  876 
  877 #
  878 #  For MS-CHAP, do we run ntlm_auth, or not.
  879 #
  880 VALUE	MS-CHAP-Use-NTLM-Auth		No			0
  881 VALUE	MS-CHAP-Use-NTLM-Auth		Yes			1