Must use 'Attr-26 = ...' instead of 'Vendor-Specific = ...' even when setting explicitly Attr-26 (or vendor data type)

Alan DeKok alan.dekok at inkbridge.io
Fri Apr 24 12:01:41 UTC 2026


On Apr 24, 2026, at 6:06 AM, Francesco Di Nucci <francesco.dinucci at na.infn.it> wrote:
> I am using FreeRADIUS 3.0.27 on EL9, and I'm trying to set a Vendor Attribute in replies.
> 
> For context, I am trying to authenticate SuperMicro BMCs with LDAP (see thread https://lists.freeradius.org/pipermail/freeradius-users/2018-March/091085.html)
> 
> So in my enabled site I edited the post-auth section
> 
> post-auth {
>     update {
>         reply:Attr-26 := "0x483D342C20493D34"

  That's a double quoted string.  The "0x" text is part of the string.

> This results in "Cannot parse RHS hex as the data type of the attribute Vendor-Specific"

  Exactly it can't parse it as hex, because it's not hex.  It's a double quoted string.



> As it's missing Vendor ID, I tried to add it. Super Micro PEN on IANA is 10876, so full vendor attribute should be 1A1200002A7C483D342C20493D34 if I am correct:
> 
> post-auth {
>     update {
>         reply:Attr-26 := "1A1200002A7C483D342C20493D34"

  Drop the quotes.  Use:

	reply:Attr-26 := 0x1A1200002A7C483D342C20493D34

  The server has tests for this, so it should work.

  Alan DeKok.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20260424/8db81c6e/attachment.sig>


More information about the Freeradius-Users mailing list