v4 include v3 dictionary alias file - error
James Wood
james.wood at purplewifi.com
Mon Mar 30 10:12:51 UTC 2026
Thank you, I didn't realise the dictionary folder was not overridden on
recompile.
I've now got this working but on some v4 dictionary alias files I'm
encountering an error. I can't see why some work and others don't when the
file structure looks the same and the ALIAS and vendor IDs match.
Take for example the aerohive dictionary:
Error:
Failed reading site-local dictionary: Attribute '26.26928.1' aliased by
'Extreme-User-Vlan' doesn't exist in namespace 'RADIUS', at
/usr/local/etc/raddb/dictionary[160]
---
raddb/dictionary:
BEGIN-PROTOCOL RADIUS
$INCLUDE ${dictdir}/radius/v3/dictionary.aerohive
END-PROTOCOL RADIUS
#
# This dictionary includes v3-compatible names like "Cleartext-Password",
# or "NT-Password".
#
$INCLUDE ${dictdir}/freeradius/v3/dictionary.freeradius.internal
#
# Any local dictionaries can be added in the `dictionary.d` subdirectory.
#
# The server will load all files in that directory, but will skip
# editor backup files, and others which are known to not be real files.
#
$INCLUDE- dictionary.d/
---
/usr/local/share/freeradius/dictionary/radius/v3/dictionary.aerohive
ALIAS Extreme-User-Vlan 26.26928.1
ALIAS Extreme-Libsip-Patron-Info 26.26928.3
ALIAS Extreme-Libsip-Action 26.26928.4
ALIAS Extreme-Libsip-Additional-Message 26.26928.5
ALIAS Extreme-User-Profile-Attribute 26.26928.6
ALIAS Extreme-Data-Usage-Limit 26.26928.7
ALIAS Extreme-AVPair 26.26928.8
ALIAS Extreme-Radius-Code 26.26928.9
ALIAS Extreme-PPSK-Request 26.26928.201
ALIAS Extreme-PPSK-PMK 26.26928.202
ALIAS Extreme-IDM-Message 26.26928.203
ALIAS Extreme-NT-Identity 26.26928.204
ALIAS Extreme-User-Language 26.26928.205
ALIAS Extreme-Time-Zone-Offset 26.26928.207
ALIAS Extreme-Daylight-Saving-Offset 26.26928.208
ALIAS Extreme-Client-Monitor-Session 26.26928.209
ALIAS Extreme-Client-Monitor-Problem 26.26928.210
ALIAS Extreme-IDM-Redirect-URL 26.26928.211
ALIAS Extreme-MGT-MAC-Address 26.26928.212
ALIAS Extreme-Auth-Source 26.26928.213
---
/usr/local/share/freeradius/dictionary/radius/dictionary.aerohive
# -*- text -*-
# Copyright (C) 2023 The FreeRADIUS Server project and contributors
# This work is licensed under CC-BY version 4.0
https://creativecommons.org/licenses/by/4.0
# Version $Id: 8b3b2392e32c9546378c76ebaf223dd5b0d83383 $
#
# dictionary.aerohive
#
# Aerohive (now Extreme Networks, Inc.)
#
# $Id: 8b3b2392e32c9546378c76ebaf223dd5b0d83383 $
#
VENDOR Aerohive 26928
BEGIN-VENDOR Aerohive
# Source:
http://docs.aerohive.com/330000/docs/help/english/ng/Content/reference/docs/radius-dictionary.htm
# Last-updated-date 25-October-2017
# Extreme supports a small set of Vendor-Specific-Attributes for
# administrative access to HiveManager Classic, and a different set
# of Vendor-Specific-Attributes for HiveOS. Both are documented in
# this file.
# Most customer will wish to import this file in it’s entirety into
# their local RADIUS data store.
# Beginning of HiveManager Classic VSAs
# The following ATTRIBUTE and VALUE definitions are required.
ATTRIBUTE AH-HM-Admin-Group-Id 1 uint32
VALUE AH-HM-Admin-Group-Id Read-Only-Admin 0
VALUE AH-HM-Admin-Group-Id Super-Admin 1
VALUE AH-HM-Admin-Group-Id Read-Write-Admin 2
# The following is an example of an admin group that you can define.
#VALUE AH-HM-Admin-Group-Id Admin-Group100 100
# End of HiveManager Classic VSAs
# Beginning of HiveOS VSAs
ATTRIBUTE Extreme-User-Vlan 1 uint32
ATTRIBUTE Extreme-Libsip-Patron-Info 3 octets
encrypt=Tunnel-Password
ATTRIBUTE Extreme-Libsip-Action 4 uint32
ATTRIBUTE Extreme-Libsip-Additional-Message 5 octets
ATTRIBUTE Extreme-User-Profile-Attribute 6 uint32
ATTRIBUTE Extreme-Data-Usage-Limit 7 octets
ATTRIBUTE Extreme-AVPair 8 string
ATTRIBUTE Extreme-Radius-Code 9 uint32
ATTRIBUTE Extreme-PPSK-Request 201 octets
ATTRIBUTE Extreme-PPSK-PMK 202 octets
ATTRIBUTE Extreme-IDM-Message 203 uint32
ATTRIBUTE Extreme-NT-Identity 204 uint32
ATTRIBUTE Extreme-User-Language 205 string
ATTRIBUTE Extreme-Time-Zone-Offset 207 uint32
ATTRIBUTE Extreme-Daylight-Saving-Offset 208 uint32
ATTRIBUTE Extreme-Client-Monitor-Session 209 octets
ATTRIBUTE Extreme-Client-Monitor-Problem 210 uint32
ATTRIBUTE Extreme-IDM-Redirect-URL 211 string
ATTRIBUTE Extreme-MGT-MAC-Address 212 string
ATTRIBUTE Extreme-Auth-Source 213 uint32
#
# Integer Translations
#
# Extreme-Libsip-Action Values
VALUE Extreme-Libsip-Action Permit 0
VALUE Extreme-Libsip-Action Restricted 1
VALUE Extreme-Libsip-Action Deny 2
# Extreme-Radius-Code Values
VALUE Extreme-Radius-Code Disconnect-Request 1
VALUE Extreme-Radius-Code COA-Request 2
# Extreme-Auth-Source
VALUE Extreme-Auth-Source Service 1
VALUE Extreme-Auth-Source Non-Service 2
END-VENDOR Aerohive
ALIAS Aerohive
Vendor-Specific.Aerohive
On Sun, 29 Mar 2026 at 23:02, Alan DeKok <alan.dekok at inkbridge.io> wrote:
> On Mar 29, 2026, at 4:49 PM, James Wood <james.wood at purplewifi.com> wrote:
> > I added the include line in rads/dictionary, this is what I meant by
> main dictionary file.
>
> Then please say that. Otherwise, it's hard for me to guess what you
> mean.
>
> All of the documentation and examples use "main dictioanry" to mean the
> dictionaries that are included with the server, not "raddb/dictionary".
>
> > If you are saying not to edit this then how else should we be doing it?
>
> I explicitly told you to edit raddb/dictionary.
>
> > I followed the instructions by I commenting out the aruba specific v3
> alias file.
>
> You probably installed the latest github code over top of any "alpha1"
> release. Which means that the it doesn't over-write the raddb/dictionary
> file.
>
> If you look at raddb/dictionary from the latest GitHub code, it contains
> full instructions for how to add aliases. Follow those instructions, and
> it will work.
>
> Hint: you don't just uncomment one line. There is more than one line to
> uncomment.
>
> > Why does it throw an out of memory error when I have done what he guide
> says? Is it a known issue?
>
> I said I would fix the error message.
>
> If you want to know why the error message was wrong, look at the
> "master" branch on github. I've pushed a fix.
>
> Alan DeKok.
>
>
--
Visit purple.ai <https://purple.ai/>
Purple on LinkedIn
<https://uk.linkedin.com/company/purple-wifi>
Email disclaimer
<http://www.purple.ai/email-disclaimer/>
More information about the Freeradius-Users
mailing list