These are sub attributes and should be encoded as 3.2 to 3.5 instead of 2 to 5 (encoding their type as 2 to 5 ends up with Eleven-EAPOL-SSID having the same 3 as Eleven-Authentication-Find-Key). Assuming probably not yet widely used and noticed, will raise a PR to fix. It was working fine when I had my own dictionary file with sub dictionary in 3.0.25, after moving to 3.0.27 resulted in duplicate since 3.0.27 had this part of the base build itself but functionality broke due to this type vs subtype mismatch. Please correct if I'm overlooking. +ATTRIBUTE Eleven-EAPOL-Anonce 3. 2 octets +ATTRIBUTE Eleven-EAPOL-SSID 3.3 string +ATTRIBUTE Eleven-EAPOL-APMAC 3.4 octets +ATTRIBUTE Eleven-EAPOL-STMAC 3.5 octets+ +++ b/share/dictionary.eleven @@ -0,0 +1,52 @@ +# -*- text -*- +# Copyright (C) 2023 The FreeRADIUS Server project and contributors +# This work is licensed under CC-BY version 4.0 https://creativecommons.org/licenses/by/4.0 +# +############################################################################## +# +# Eleven Software +# +# $Id$ +# +############################################################################## + +VENDOR Eleven 52970 + +BEGIN-VENDOR Eleven + +# +# DPSK attributes +# +# The RADIUS server responds with two Cisco-AVPair attributes: +# +# Cisco-AVPair = "psk-mode=ascii" +# Cisco-AVPair = "psk=<passphrase>" +# +# +ATTRIBUTE Eleven-Authentication-Find-Key 3 tlv + +# +# The second EAPoL frame of the 4-way handshake +# +ATTRIBUTE Eleven-EAPOL-Frame-2 3.1 octets + +# +# The first EAPoL frame of the 4-way handshake. +# +ATTRIBUTE Eleven-EAPOL-Anonce 2 octets + +# +# SSID name +# +ATTRIBUTE Eleven-EAPOL-SSID 3 string + +# +# BSSID +# +ATTRIBUTE Eleven-EAPOL-APMAC 4 octets + +# +# Wireless client MAC address. +# +ATTRIBUTE Eleven-EAPOL-STMAC 5 octets + Thanks Natarajan