Hello, I am trying to add a Vendor definition to my freeradius configuration (into the /etc/freeradius/3.0/dictionary file). The vendor is : International Electrotechnical Commission 41912
From IANA : 41912 International Electrotechnical Commission Herbert Falk herb&sisconet.com
Here is the configuration I tried and the results from the journalctl : First one, given by the vendor : VENDOR International Electrotechnical Commission 41912 BEGIN-VENDOR International Electrotechnical Commission ATTRIBUTE IEC62351-8-RoleID-0 1 integer ATTRIBUTE IEC62351-8-roleDefinition-0 2 string OPTIONAL ATTRIBUTE IEC62351-8-aor-0 3 string ATTRIBUTE IEC62351-8-revision-0 4 integer ATTRIBUTE IEC62351-8-ValidFrom-0 5 string OPTIONAL ATTRIBUTE IEC62351-8-ValidTo-0 6 string ATTRIBUTE IEC62351-8-RoleID-1 11 integer ATTRIBUTE IEC62351-8-roleDefinition-1 12 string OPTIONAL ATTRIBUTE IEC62351-8-aor-1 13 string ATTRIBUTE IEC62351-8-revision-1 14 integer ATTRIBUTE IEC62351-8-ValidFrom-1 15 string OPTIONAL ATTRIBUTE IEC62351-8-ValidTo-1 16 string ATTRIBUTE IEC62351-8-RoleID-2 21 integer ATTRIBUTE IEC62351-8-roleDefinition-2 22 string OPTIONAL ATTRIBUTE IEC62351-8-aor-2 23 string ATTRIBUTE IEC62351-8-revision-2 24 integer ATTRIBUTE IEC62351-8-ValidFrom-2 25 string OPTIONAL ATTRIBUTE IEC62351-8-ValidTo-2 26 string END-VENDOR International Electrotechnical Commission Error : Sep 16 14:05:41 raspberrypi freeradius[12273]: FreeRADIUS Version 3.0.12 Sep 16 14:05:41 raspberrypi freeradius[12273]: Copyright (C) 1999-2016 The FreeRADIUS server project and contributors Sep 16 14:05:41 raspberrypi freeradius[12273]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Sep 16 14:05:41 raspberrypi freeradius[12273]: PARTICULAR PURPOSE Sep 16 14:05:41 raspberrypi freeradius[12273]: You may redistribute copies of FreeRADIUS under the terms of the Sep 16 14:05:41 raspberrypi freeradius[12273]: GNU General Public License Sep 16 14:05:41 raspberrypi freeradius[12273]: For more information about these matters, see the file named COPYRIGHT Sep 16 14:05:41 raspberrypi freeradius[12273]: Starting - reading configuration files ... Sep 16 14:05:42 raspberrypi freeradius[12273]: Errors reading /etc/freeradius/3.0/dictionary: dict_init: /etc/freeradius/3.0/dictionary[51] invalid VENDOR entry Sep 16 14:05:42 raspberrypi systemd[1]: freeradius.service: Control process exited, code=exited status=1 -- Subject: Unit freeradius.service has failed -- Unit freeradius.service has failed. Sep 16 14:05:42 raspberrypi systemd[1]: freeradius.service: Unit entered failed state. Sep 16 14:05:42 raspberrypi systemd[1]: freeradius.service: Failed with result 'exit-code'. Second one (deleting spaces for the vendor name as in the manual) : VENDOR InternationalElectrotechnicalCommission 41912 BEGIN-VENDOR InternationalElectrotechnicalCommission ATTRIBUTE IEC62351-8-RoleID-0 1 integer ATTRIBUTE IEC62351-8-roleDefinition-0 2 string OPTIONAL ATTRIBUTE IEC62351-8-aor-0 3 string ATTRIBUTE IEC62351-8-revision-0 4 integer ATTRIBUTE IEC62351-8-ValidFrom-0 5 string OPTIONAL ATTRIBUTE IEC62351-8-ValidTo-0 6 string ATTRIBUTE IEC62351-8-RoleID-1 11 integer ATTRIBUTE IEC62351-8-roleDefinition-1 12 string OPTIONAL ATTRIBUTE IEC62351-8-aor-1 13 string ATTRIBUTE IEC62351-8-revision-1 14 integer ATTRIBUTE IEC62351-8-ValidFrom-1 15 string OPTIONAL ATTRIBUTE IEC62351-8-ValidTo-1 16 string ATTRIBUTE IEC62351-8-RoleID-2 21 integer ATTRIBUTE IEC62351-8-roleDefinition-2 22 string OPTIONAL ATTRIBUTE IEC62351-8-aor-2 23 string ATTRIBUTE IEC62351-8-revision-2 24 integer ATTRIBUTE IEC62351-8-ValidFrom-2 25 string OPTIONAL ATTRIBUTE IEC62351-8-ValidTo-2 26 string END-VENDOR InternationalElectrotechnicalCommission Error : Sep 16 14:07:53 raspberrypi freeradius[12410]: FreeRADIUS Version 3.0.12 Sep 16 14:07:53 raspberrypi freeradius[12410]: Copyright (C) 1999-2016 The FreeRADIUS server project and contributors Sep 16 14:07:53 raspberrypi freeradius[12410]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Sep 16 14:07:53 raspberrypi freeradius[12410]: PARTICULAR PURPOSE Sep 16 14:07:53 raspberrypi freeradius[12410]: You may redistribute copies of FreeRADIUS under the terms of the Sep 16 14:07:53 raspberrypi freeradius[12410]: GNU General Public License Sep 16 14:07:53 raspberrypi freeradius[12410]: For more information about these matters, see the file named COPYRIGHT Sep 16 14:07:53 raspberrypi freeradius[12410]: Starting - reading configuration files ... Sep 16 14:07:53 raspberrypi freeradius[12410]: Errors reading /etc/freeradius/3.0/dictionary: dict_init: /etc/freeradius/3.0/dictionary[54] Vendor flag inside of "BEGIN-VENDOR" is not allowed Sep 16 14:07:53 raspberrypi systemd[1]: freeradius.service: Control process exited, code=exited status=1 -- Subject: Unit freeradius.service has failed -- Unit freeradius.service has failed. Sep 16 14:07:53 raspberrypi systemd[1]: freeradius.service: Unit entered failed state. Sep 16 14:07:53 raspberrypi systemd[1]: freeradius.service: Failed with result 'exit-code'. Third one, trying something mixed with and without spaces VENDOR InternationalElectrotechnicalCommission 41912 BEGIN-VENDOR International Electrotechnical Commission ATTRIBUTE IEC62351-8-RoleID-0 1 integer ATTRIBUTE IEC62351-8-roleDefinition-0 2 string OPTIONAL ATTRIBUTE IEC62351-8-aor-0 3 string ATTRIBUTE IEC62351-8-revision-0 4 integer ATTRIBUTE IEC62351-8-ValidFrom-0 5 string OPTIONAL ATTRIBUTE IEC62351-8-ValidTo-0 6 string ATTRIBUTE IEC62351-8-RoleID-1 11 integer ATTRIBUTE IEC62351-8-roleDefinition-1 12 string OPTIONAL ATTRIBUTE IEC62351-8-aor-1 13 string ATTRIBUTE IEC62351-8-revision-1 14 integer ATTRIBUTE IEC62351-8-ValidFrom-1 15 string OPTIONAL ATTRIBUTE IEC62351-8-ValidTo-1 16 string ATTRIBUTE IEC62351-8-RoleID-2 21 integer ATTRIBUTE IEC62351-8-roleDefinition-2 22 string OPTIONAL ATTRIBUTE IEC62351-8-aor-2 23 string ATTRIBUTE IEC62351-8-revision-2 24 integer ATTRIBUTE IEC62351-8-ValidFrom-2 25 string OPTIONAL ATTRIBUTE IEC62351-8-ValidTo-2 26 string END-VENDOR International Electrotechnical Commission Error : Sep 16 14:11:12 raspberrypi freeradius[12644]: FreeRADIUS Version 3.0.12 Sep 16 14:11:12 raspberrypi freeradius[12644]: Copyright (C) 1999-2016 The FreeRADIUS server project and contributors Sep 16 14:11:12 raspberrypi freeradius[12644]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Sep 16 14:11:12 raspberrypi freeradius[12644]: PARTICULAR PURPOSE Sep 16 14:11:12 raspberrypi freeradius[12644]: You may redistribute copies of FreeRADIUS under the terms of the Sep 16 14:11:12 raspberrypi freeradius[12644]: GNU General Public License Sep 16 14:11:12 raspberrypi freeradius[12644]: For more information about these matters, see the file named COPYRIGHT Sep 16 14:11:12 raspberrypi freeradius[12644]: Starting - reading configuration files ... Sep 16 14:11:12 raspberrypi freeradius[12644]: Errors reading /etc/freeradius/3.0/dictionary: dict_init: /etc/freeradius/3.0/dictionary[52]: unknown vendor International Sep 16 14:11:12 raspberrypi systemd[1]: freeradius.service: Control process exited, code=exited status=1 -- Subject: Unit freeradius.service has failed -- Unit freeradius.service has failed. Sep 16 14:11:12 raspberrypi systemd[1]: freeradius.service: Unit entered failed state. Sep 16 14:11:12 raspberrypi systemd[1]: freeradius.service: Failed with result 'exit-code'. Regards, Christophe Normand
On Sep 16, 2019, at 9:28 AM, Normand Christophe <Christophe.Normand@hefr.ch> wrote:
Hello,
I am trying to add a Vendor definition to my freeradius configuration (into the /etc/freeradius/3.0/dictionary file). The vendor is : International Electrotechnical Commission 41912 From IANA : 41912 International Electrotechnical Commission Herbert Falk herb&sisconet.com
OK...
Here is the configuration I tried and the results from the journalctl :
First one, given by the vendor :
VENDOR International Electrotechnical Commission 41912 BEGIN-VENDOR International Electrotechnical Commission
The dictionary format is documented. You can't use *multi-word phrases* as the vendor name. It has to be one word.
ATTRIBUTE IEC62351-8-RoleID-0 1 integer ATTRIBUTE IEC62351-8-roleDefinition-0 2 string OPTIONAL
What is that? i.e. why the word OPTIONAL? The dictionary format is documented. It doesn't say that you can use OPTIONAL for anything. Delete it, and the dictionary will work.
Sep 16 14:11:12 raspberrypi freeradius[12644]: FreeRADIUS Version 3.0.12 Sep 16 14:11:12 raspberrypi freeradius[12644]: Copyright (C) 1999-2016 The FreeRADIUS server project and contributors
And use 3.0.19. The 3.0.12 version is years out of date. Alan DeKok.
participants (2)
-
Alan DeKok -
Normand Christophe