hello, what's the way to add user-defined attribute into reply-items?(name,value) i tried by adding 2 attributes in the dictionary file in raddb, with the index of 998 and 999. *file:* /usr/local/etc/raddb/dictionary ATTRIBUTE aa 998 string ATTRIBUTE bb 999 string But it didn't work. (i tried it by making my own dictionary file and included it in standard dictionary file) *file:* /usr/local/share/freeradius/dictionary.netd VENDOR netd 1459 # # These attributes contain the access-level value. # ATTRIBUTE netd-temp-str 1 string netd ATTRIBUTE netd-temp-int 1 integer netd # Read-only access to manageable (not security) parameters VALUE netd-temp-int 4 3 *file:* /usr/local/share/freeradius/dictionary added this at the last. $INCLUDE dictionary.netd But it didn't work. I don't want to use vendor-specific attribute, because i have more than 2 attributes to be sent to the radius client. somebody plz explain the correct process of doing this. --DilipSimha
"DilipSimha.N.M" <nmdsimha@gmail.com> wrote:
what's the way to add user-defined attribute into reply-items?(name,value)
i tried by adding 2 attributes in the dictionary file in raddb, with the index of 998 and 999.
If they're supposed to go into a packet, they have to be 1..255. See the RFC's. Alan DeKok.
thanks alan, but why is the below statement given in the dictionary file??? # The attributes number ranges are allocates as follows: # # Range: 500-999 # server-side attributes which can go in a reply list # These attributes CAN go in the reply item list. ATTRIBUTE Fall-Through 500 integer ATTRIBUTE Exec-Program 502 string ATTRIBUTE Exec-Program-Wait 503 string and these attributes can be given in the packet!!! --DilipSimha Alan DeKok wrote:
"DilipSimha.N.M" <nmdsimha@gmail.com> wrote:
what's the way to add user-defined attribute into reply-items?(name,value)
i tried by adding 2 attributes in the dictionary file in raddb, with the index of 998 and 999.
If they're supposed to go into a packet, they have to be 1..255. See the RFC's.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
DilipSimha.N.M wrote:
thanks alan,
but why is the below statement given in the dictionary file???
# The attributes number ranges are allocates as follows: # # Range: 500-999 # server-side attributes which can go in a reply list
# These attributes CAN go in the reply item list. ATTRIBUTE Fall-Through 500 integer ATTRIBUTE Exec-Program 502 string ATTRIBUTE Exec-Program-Wait 503 string
and these attributes can be given in the packet!!!
They don't go in a packet. They're special attribute that indicate actions to take. Isn't that obvious from their names?
"DilipSimha.N.M" <nmdsimha@gmail.com> wrote:
but why is the below statement given in the dictionary file???
Because the server can store numbers larger than 256. The RADIUS protocol can't.
ATTRIBUTE Exec-Program-Wait 503 string
and these attributes can be given in the packet!!!
No, they can't. Alan DeKok.
participants (3)
-
Alan DeKok -
DilipSimha.N.M -
Phil Mayers