Problem with VENDOR in dictionary

Normand Christophe Christophe.Normand at hefr.ch
Mon Sep 16 15:28:22 CEST 2019 

Hello,

I am trying to add a Vendor definition to my freeradius configuration (into the /etc/freeradius/3.0/dictionary file).
The vendor is : International Electrotechnical Commission 41912
>From IANA :
41912
  International Electrotechnical Commission
    Herbert Falk
      herb&sisconet.com


Here is the configuration I tried and the results from the journalctl :

First one, given by the vendor :

VENDOR  International Electrotechnical Commission       41912
BEGIN-VENDOR    International Electrotechnical Commission
        ATTRIBUTE IEC62351-8-RoleID-0 1 integer
        ATTRIBUTE IEC62351-8-roleDefinition-0 2 string OPTIONAL
        ATTRIBUTE IEC62351-8-aor-0 3 string
        ATTRIBUTE IEC62351-8-revision-0 4 integer
        ATTRIBUTE IEC62351-8-ValidFrom-0 5 string OPTIONAL
        ATTRIBUTE IEC62351-8-ValidTo-0 6 string
        ATTRIBUTE IEC62351-8-RoleID-1 11 integer
        ATTRIBUTE IEC62351-8-roleDefinition-1 12 string OPTIONAL
        ATTRIBUTE IEC62351-8-aor-1 13 string
        ATTRIBUTE IEC62351-8-revision-1 14 integer
        ATTRIBUTE IEC62351-8-ValidFrom-1 15 string OPTIONAL
        ATTRIBUTE IEC62351-8-ValidTo-1 16 string
        ATTRIBUTE IEC62351-8-RoleID-2 21 integer
        ATTRIBUTE IEC62351-8-roleDefinition-2 22 string OPTIONAL
        ATTRIBUTE IEC62351-8-aor-2 23 string
        ATTRIBUTE IEC62351-8-revision-2 24 integer
        ATTRIBUTE IEC62351-8-ValidFrom-2 25 string OPTIONAL
        ATTRIBUTE IEC62351-8-ValidTo-2 26 string
END-VENDOR      International Electrotechnical Commission

Error :
Sep 16 14:05:41 raspberrypi freeradius[12273]: FreeRADIUS Version 3.0.12
Sep 16 14:05:41 raspberrypi freeradius[12273]: Copyright (C) 1999-2016 The FreeRADIUS server project and contributors
Sep 16 14:05:41 raspberrypi freeradius[12273]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
Sep 16 14:05:41 raspberrypi freeradius[12273]: PARTICULAR PURPOSE
Sep 16 14:05:41 raspberrypi freeradius[12273]: You may redistribute copies of FreeRADIUS under the terms of the
Sep 16 14:05:41 raspberrypi freeradius[12273]: GNU General Public License
Sep 16 14:05:41 raspberrypi freeradius[12273]: For more information about these matters, see the file named COPYRIGHT
Sep 16 14:05:41 raspberrypi freeradius[12273]: Starting - reading configuration files ...
Sep 16 14:05:42 raspberrypi freeradius[12273]: Errors reading /etc/freeradius/3.0/dictionary: dict_init: /etc/freeradius/3.0/dictionary[51] invalid VENDOR entry
Sep 16 14:05:42 raspberrypi systemd[1]: freeradius.service: Control process exited, code=exited status=1
-- Subject: Unit freeradius.service has failed
-- Unit freeradius.service has failed.
Sep 16 14:05:42 raspberrypi systemd[1]: freeradius.service: Unit entered failed state.
Sep 16 14:05:42 raspberrypi systemd[1]: freeradius.service: Failed with result 'exit-code'.

Second one (deleting spaces for the vendor name as in the manual) :
VENDOR  InternationalElectrotechnicalCommission 41912
BEGIN-VENDOR    InternationalElectrotechnicalCommission
        ATTRIBUTE IEC62351-8-RoleID-0 1 integer
        ATTRIBUTE IEC62351-8-roleDefinition-0 2 string OPTIONAL
        ATTRIBUTE IEC62351-8-aor-0 3 string
        ATTRIBUTE IEC62351-8-revision-0 4 integer
        ATTRIBUTE IEC62351-8-ValidFrom-0 5 string OPTIONAL
        ATTRIBUTE IEC62351-8-ValidTo-0 6 string
        ATTRIBUTE IEC62351-8-RoleID-1 11 integer
        ATTRIBUTE IEC62351-8-roleDefinition-1 12 string OPTIONAL
        ATTRIBUTE IEC62351-8-aor-1 13 string
        ATTRIBUTE IEC62351-8-revision-1 14 integer
        ATTRIBUTE IEC62351-8-ValidFrom-1 15 string OPTIONAL
        ATTRIBUTE IEC62351-8-ValidTo-1 16 string
        ATTRIBUTE IEC62351-8-RoleID-2 21 integer
        ATTRIBUTE IEC62351-8-roleDefinition-2 22 string OPTIONAL
        ATTRIBUTE IEC62351-8-aor-2 23 string
        ATTRIBUTE IEC62351-8-revision-2 24 integer
        ATTRIBUTE IEC62351-8-ValidFrom-2 25 string OPTIONAL
        ATTRIBUTE IEC62351-8-ValidTo-2 26 string
END-VENDOR      InternationalElectrotechnicalCommission

Error :
Sep 16 14:07:53 raspberrypi freeradius[12410]: FreeRADIUS Version 3.0.12
Sep 16 14:07:53 raspberrypi freeradius[12410]: Copyright (C) 1999-2016 The FreeRADIUS server project and contributors
Sep 16 14:07:53 raspberrypi freeradius[12410]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
Sep 16 14:07:53 raspberrypi freeradius[12410]: PARTICULAR PURPOSE
Sep 16 14:07:53 raspberrypi freeradius[12410]: You may redistribute copies of FreeRADIUS under the terms of the
Sep 16 14:07:53 raspberrypi freeradius[12410]: GNU General Public License
Sep 16 14:07:53 raspberrypi freeradius[12410]: For more information about these matters, see the file named COPYRIGHT
Sep 16 14:07:53 raspberrypi freeradius[12410]: Starting - reading configuration files ...
Sep 16 14:07:53 raspberrypi freeradius[12410]: Errors reading /etc/freeradius/3.0/dictionary: dict_init: /etc/freeradius/3.0/dictionary[54] Vendor flag inside of "BEGIN-VENDOR" is not allowed
Sep 16 14:07:53 raspberrypi systemd[1]: freeradius.service: Control process exited, code=exited status=1
-- Subject: Unit freeradius.service has failed
-- Unit freeradius.service has failed.
Sep 16 14:07:53 raspberrypi systemd[1]: freeradius.service: Unit entered failed state.
Sep 16 14:07:53 raspberrypi systemd[1]: freeradius.service: Failed with result 'exit-code'.

Third one, trying something mixed with and without spaces
VENDOR  InternationalElectrotechnicalCommission 41912
BEGIN-VENDOR    International Electrotechnical Commission
        ATTRIBUTE IEC62351-8-RoleID-0 1 integer
        ATTRIBUTE IEC62351-8-roleDefinition-0 2 string OPTIONAL
        ATTRIBUTE IEC62351-8-aor-0 3 string
        ATTRIBUTE IEC62351-8-revision-0 4 integer
        ATTRIBUTE IEC62351-8-ValidFrom-0 5 string OPTIONAL
        ATTRIBUTE IEC62351-8-ValidTo-0 6 string
        ATTRIBUTE IEC62351-8-RoleID-1 11 integer
        ATTRIBUTE IEC62351-8-roleDefinition-1 12 string OPTIONAL
        ATTRIBUTE IEC62351-8-aor-1 13 string
        ATTRIBUTE IEC62351-8-revision-1 14 integer
        ATTRIBUTE IEC62351-8-ValidFrom-1 15 string OPTIONAL
        ATTRIBUTE IEC62351-8-ValidTo-1 16 string
        ATTRIBUTE IEC62351-8-RoleID-2 21 integer
        ATTRIBUTE IEC62351-8-roleDefinition-2 22 string OPTIONAL
        ATTRIBUTE IEC62351-8-aor-2 23 string
        ATTRIBUTE IEC62351-8-revision-2 24 integer
        ATTRIBUTE IEC62351-8-ValidFrom-2 25 string OPTIONAL
        ATTRIBUTE IEC62351-8-ValidTo-2 26 string
END-VENDOR      International Electrotechnical Commission
Error :
Sep 16 14:11:12 raspberrypi freeradius[12644]: FreeRADIUS Version 3.0.12
Sep 16 14:11:12 raspberrypi freeradius[12644]: Copyright (C) 1999-2016 The FreeRADIUS server project and contributors
Sep 16 14:11:12 raspberrypi freeradius[12644]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
Sep 16 14:11:12 raspberrypi freeradius[12644]: PARTICULAR PURPOSE
Sep 16 14:11:12 raspberrypi freeradius[12644]: You may redistribute copies of FreeRADIUS under the terms of the
Sep 16 14:11:12 raspberrypi freeradius[12644]: GNU General Public License
Sep 16 14:11:12 raspberrypi freeradius[12644]: For more information about these matters, see the file named COPYRIGHT
Sep 16 14:11:12 raspberrypi freeradius[12644]: Starting - reading configuration files ...
Sep 16 14:11:12 raspberrypi freeradius[12644]: Errors reading /etc/freeradius/3.0/dictionary: dict_init: /etc/freeradius/3.0/dictionary[52]: unknown vendor International
Sep 16 14:11:12 raspberrypi systemd[1]: freeradius.service: Control process exited, code=exited status=1
-- Subject: Unit freeradius.service has failed
-- Unit freeradius.service has failed.
Sep 16 14:11:12 raspberrypi systemd[1]: freeradius.service: Unit entered failed state.
Sep 16 14:11:12 raspberrypi systemd[1]: freeradius.service: Failed with result 'exit-code'.


Regards,

Christophe Normand

More information about the Freeradius-Users mailing list