On Mar 17, 2016, at 6:23 AM, Vereecke, Katrien (Nokia - BE) <katrien.vereecke@nokia.com> wrote:
With version freeradius-server-3.0.11 I get an error when the extended attribute format is used together with the encrypt flag.
I have the following defined in my dictionary:
BEGIN-VENDOR Alcatel-IPD format=Extended-Vendor-Specific-1 ATTRIBUTE Alc-Test-1 1 string encrypt=2 .... END-VENDOR Alcatel-IPD This gives the following error: Errors reading /usr/local/etc/raddb/dictionary: dict_init: /users/tdebaets/dictionary-freeradius.txt[576]: dict_addattr: The "extended" attributes MUST NOT have any flags set
That isn't forbidden by RFC 6929, but it isn't explicitly allowed, either. I've pushed a fix which allows "encrypt=2" for extended attributes. Alan DeKok.