dictionary.rfc2865 discrepancy?

Geoff Silver geoff+freeradius at uslinux.net
Thu Feb 23 19:47:55 CET 2006

Hi all,

With the stock dictionaries, when radiusd returns a Class, it's in hex, not as
a string.  Looking at the RFC, it looks to me like the dictionary is wrong.
Can someone confirm this?

# echo 'User-Name= "geoff", Password = "geoff", NAS-IP-Address =,
NAS-Port = 1' | /opt/reverb/bin/radclient -d /opt/reverb/share/dictionary -x auth 1234test1234
Sending Access-Request of id 73 to port 1812
        User-Name = "geoff"
        Password = "geoff"
        NAS-IP-Address =
        NAS-Port = 1
rad_recv: Access-Accept packet from host, id=73, length=57
        Connect-Info = "OFFICE"
        Class = 0x4f523e404e4c2d5447
        Filter-Id = "EMPLOYEE"

If I change dictionary.rfc2865 as follows:

-ATTRIBUTE       Class                                   25      octets
+ATTRIBUTE       Class                                   25      string

It works just fine (ie. I get back Class = "OU=MYCOMPANY.COM").  Am I misusing
the class attribute (ie. should it not be a string?), or is the dictionary wrong?


More information about the Freeradius-Users mailing list