> $ radtest user@realm pass radius 0 claveClient
> radclient: dict_init: /usr/share/freeradius/dictionary.XXX: unknown
> option "XXX"

You didn't define "XXX" as a vendor.

I think I did...

$ cat /usr/share/freeradius/dictionary.rinuex

# -*- text -*-
#
# dictionary.rinuex
#
#
#   Mayo de 2010
#   Marco Jaraíz <mjaraiz@unex.es>
#   Ana Gallardo <aigallardo@unex.es>
#

VENDOR Rinuex 35782

BEGIN-VENDOR    Rinuex

# Código para indicar la causa del Access-Reject
ATTRIBUTE       Codigo-Reject           8       integer

VALUE   Codigo-Reject           Credenciales-Erroneas                   3
VALUE   Codigo-Reject           Cuenta-Bloqueada-Intentos-Reject        4
VALUE   Codigo-Reject           Imposible-Contactar-Backend             5
VALUE   Codigo-Reject           Error-Dominio                           6
VALUE   Codigo-Reject           Cuenta-Expirada                         7
VALUE   Codigo-Reject           Cuenta-Inactiva                         8
VALUE   Codigo-Reject           Radius-OK                               9

END-VENDOR    Rinuex

And there's no reason to keep the vendor name a secret. The
name/number for the vendor is available in public registries.

it's truth

Alan DeKok.

Thanks again