Thank you, I didn't realise the dictionary folder was not overridden on recompile. I've now got this working but on some v4 dictionary alias files I'm encountering an error. I can't see why some work and others don't when the file structure looks the same and the ALIAS and vendor IDs match. Take for example the aerohive dictionary: Error: Failed reading site-local dictionary: Attribute '26.26928.1' aliased by 'Extreme-User-Vlan' doesn't exist in namespace 'RADIUS', at /usr/local/etc/raddb/dictionary[160] --- raddb/dictionary: BEGIN-PROTOCOL RADIUS $INCLUDE ${dictdir}/radius/v3/dictionary.aerohive END-PROTOCOL RADIUS # # This dictionary includes v3-compatible names like "Cleartext-Password", # or "NT-Password". # $INCLUDE ${dictdir}/freeradius/v3/dictionary.freeradius.internal # # Any local dictionaries can be added in the `dictionary.d` subdirectory. # # The server will load all files in that directory, but will skip # editor backup files, and others which are known to not be real files. # $INCLUDE- dictionary.d/ --- /usr/local/share/freeradius/dictionary/radius/v3/dictionary.aerohive ALIAS Extreme-User-Vlan 26.26928.1 ALIAS Extreme-Libsip-Patron-Info 26.26928.3 ALIAS Extreme-Libsip-Action 26.26928.4 ALIAS Extreme-Libsip-Additional-Message 26.26928.5 ALIAS Extreme-User-Profile-Attribute 26.26928.6 ALIAS Extreme-Data-Usage-Limit 26.26928.7 ALIAS Extreme-AVPair 26.26928.8 ALIAS Extreme-Radius-Code 26.26928.9 ALIAS Extreme-PPSK-Request 26.26928.201 ALIAS Extreme-PPSK-PMK 26.26928.202 ALIAS Extreme-IDM-Message 26.26928.203 ALIAS Extreme-NT-Identity 26.26928.204 ALIAS Extreme-User-Language 26.26928.205 ALIAS Extreme-Time-Zone-Offset 26.26928.207 ALIAS Extreme-Daylight-Saving-Offset 26.26928.208 ALIAS Extreme-Client-Monitor-Session 26.26928.209 ALIAS Extreme-Client-Monitor-Problem 26.26928.210 ALIAS Extreme-IDM-Redirect-URL 26.26928.211 ALIAS Extreme-MGT-MAC-Address 26.26928.212 ALIAS Extreme-Auth-Source 26.26928.213 --- /usr/local/share/freeradius/dictionary/radius/dictionary.aerohive # -*- text -*- # Copyright (C) 2023 The FreeRADIUS Server project and contributors # This work is licensed under CC-BY version 4.0 https://creativecommons.org/licenses/by/4.0 # Version $Id: 8b3b2392e32c9546378c76ebaf223dd5b0d83383 $ # # dictionary.aerohive # # Aerohive (now Extreme Networks, Inc.) # # $Id: 8b3b2392e32c9546378c76ebaf223dd5b0d83383 $ # VENDOR Aerohive 26928 BEGIN-VENDOR Aerohive # Source: http://docs.aerohive.com/330000/docs/help/english/ng/Content/reference/docs/... # Last-updated-date 25-October-2017 # Extreme supports a small set of Vendor-Specific-Attributes for # administrative access to HiveManager Classic, and a different set # of Vendor-Specific-Attributes for HiveOS. Both are documented in # this file. # Most customer will wish to import this file in it’s entirety into # their local RADIUS data store. # Beginning of HiveManager Classic VSAs # The following ATTRIBUTE and VALUE definitions are required. ATTRIBUTE AH-HM-Admin-Group-Id 1 uint32 VALUE AH-HM-Admin-Group-Id Read-Only-Admin 0 VALUE AH-HM-Admin-Group-Id Super-Admin 1 VALUE AH-HM-Admin-Group-Id Read-Write-Admin 2 # The following is an example of an admin group that you can define. #VALUE AH-HM-Admin-Group-Id Admin-Group100 100 # End of HiveManager Classic VSAs # Beginning of HiveOS VSAs ATTRIBUTE Extreme-User-Vlan 1 uint32 ATTRIBUTE Extreme-Libsip-Patron-Info 3 octets encrypt=Tunnel-Password ATTRIBUTE Extreme-Libsip-Action 4 uint32 ATTRIBUTE Extreme-Libsip-Additional-Message 5 octets ATTRIBUTE Extreme-User-Profile-Attribute 6 uint32 ATTRIBUTE Extreme-Data-Usage-Limit 7 octets ATTRIBUTE Extreme-AVPair 8 string ATTRIBUTE Extreme-Radius-Code 9 uint32 ATTRIBUTE Extreme-PPSK-Request 201 octets ATTRIBUTE Extreme-PPSK-PMK 202 octets ATTRIBUTE Extreme-IDM-Message 203 uint32 ATTRIBUTE Extreme-NT-Identity 204 uint32 ATTRIBUTE Extreme-User-Language 205 string ATTRIBUTE Extreme-Time-Zone-Offset 207 uint32 ATTRIBUTE Extreme-Daylight-Saving-Offset 208 uint32 ATTRIBUTE Extreme-Client-Monitor-Session 209 octets ATTRIBUTE Extreme-Client-Monitor-Problem 210 uint32 ATTRIBUTE Extreme-IDM-Redirect-URL 211 string ATTRIBUTE Extreme-MGT-MAC-Address 212 string ATTRIBUTE Extreme-Auth-Source 213 uint32 # # Integer Translations # # Extreme-Libsip-Action Values VALUE Extreme-Libsip-Action Permit 0 VALUE Extreme-Libsip-Action Restricted 1 VALUE Extreme-Libsip-Action Deny 2 # Extreme-Radius-Code Values VALUE Extreme-Radius-Code Disconnect-Request 1 VALUE Extreme-Radius-Code COA-Request 2 # Extreme-Auth-Source VALUE Extreme-Auth-Source Service 1 VALUE Extreme-Auth-Source Non-Service 2 END-VENDOR Aerohive ALIAS Aerohive Vendor-Specific.Aerohive On Sun, 29 Mar 2026 at 23:02, Alan DeKok <alan.dekok@inkbridge.io> wrote:
On Mar 29, 2026, at 4:49 PM, James Wood <james.wood@purplewifi.com> wrote:
I added the include line in rads/dictionary, this is what I meant by main dictionary file.
Then please say that. Otherwise, it's hard for me to guess what you mean.
All of the documentation and examples use "main dictioanry" to mean the dictionaries that are included with the server, not "raddb/dictionary".
If you are saying not to edit this then how else should we be doing it?
I explicitly told you to edit raddb/dictionary.
I followed the instructions by I commenting out the aruba specific v3 alias file.
You probably installed the latest github code over top of any "alpha1" release. Which means that the it doesn't over-write the raddb/dictionary file.
If you look at raddb/dictionary from the latest GitHub code, it contains full instructions for how to add aliases. Follow those instructions, and it will work.
Hint: you don't just uncomment one line. There is more than one line to uncomment.
Why does it throw an out of memory error when I have done what he guide says? Is it a known issue?
I said I would fix the error message.
If you want to know why the error message was wrong, look at the "master" branch on github. I've pushed a fix.
Alan DeKok.
-- Visit purple.ai <https://purple.ai/> Purple on LinkedIn <https://uk.linkedin.com/company/purple-wifi> Email disclaimer <http://www.purple.ai/email-disclaimer/>