$INCLUDE directive

pankaj <[email protected]> Fri, 11 Apr 2003 18:36:54 +0530 (IST)

Newsgroups	gmane.comp.gnu.radius.general,gmane.comp.gnu.radius.bugs
Message-ID	<Pine.LNX.4.44.0304111812350.21949-500000@gadhwal.intranet.pspl.co.in>

i am trying to do the following: 

extend support for Digest Authentication into GNU radius, based on the
draft draft-sterman-aaa-sip-00.txt.

for this i created a file "etc/raddb/dict/digest" with the attributes and
added the corresponding $INCLUDE.

now, my application which talks to the radius server stack works properly.
as soon as i add the above file using the include directive, the lexer in
my application (which tokenizes the user requests) conks and the values
have some additonal junk.

i have attached the following files:
etc/raddb/dict/digest
etc/raddb/dictionary
normal (output)
conked (output)

is there some problem in the digest file or the dictionary file?
help most welcome!!

thanks and regards, 
pankaj

_______________________________________________
Help-gnu-radius mailing list
[email protected]
http://mail.gnu.org/mailman/listinfo/help-gnu-radius

digest (text/plain, 561 B)

#
# a
# b
#

VENDOR 		 DIGEST			 800

ATTRIBUTE 	 DA-Realm 		 8100 		 string
ATTRIBUTE 	 DA-Nonce 		 8102 		 string
ATTRIBUTE 	 DA-Method 		 8103 		 string
ATTRIBUTE 	 DA-URI 		 8104 		 string
ATTRIBUTE 	 DA-QOP 		 8105 		 string
ATTRIBUTE 	 DA-Algorithm 		 8106 		 string
ATTRIBUTE 	 DA-Body-Digest 		 8107 		 string
ATTRIBUTE 	 DA-CNonce 		 8108 		 string
ATTRIBUTE 	 DA-Nonce-Count 		 8109 		 string
ATTRIBUTE 	 DA-User-Name 		 8110 		 string
ATTRIBUTE 	 Digest-Response 		 8206 		 string
ATTRIBUTE 	 Digest-Attributes 		 8207 		 string

dictionary (text/plain, 9.5 KB)

#
# $Id: dictionary,v 1.24.2.4 2002/08/14 14:32:19 gray Exp $
#

## NOTE: Beside its usual functions this file also serves as a source
##       for include/raddict.h in the distribution directory.
## Preprocessing script scripts/dict.awk, translates all comments except
## those starting with two # signs into appropriate C comments.
## To prevent any comments irrelevant to radius source from appearing
## in the header, begin them with ##.

## Uncomment any of these as appropriate:

$INCLUDE dict/digest			## Digest support
$INCLUDE dict/compat			## Compatibility issues
$INCLUDE dict/livingston		## Livingston compatibility
#$INCLUDE dict/tunnel			## Tunnel attrs. as per RFC 2867
#$INCLUDE dict/usr			## USR Robotics
#$INCLUDE dict/ascend			## MAX Ascend
#$INCLUDE dict/ascend.vs		## MAX Ascend -- vendor-specific
#$INCLUDE dict/cisco			## Cisco
#$INCLUDE dict/voip			## Special attributes to be used
					## with rewriting functions

##
##	Following are the proper new names. Use these.
## syntax flags: [us-hi-hu]
ATTRIBUTE	User-Name		1	string	- [LR-RLR]
ATTRIBUTE	Password		2	string	- [L-----]	
ATTRIBUTE	CHAP-Password		3	string	- [L-----]
ATTRIBUTE	NAS-IP-Address		4	ipaddr	- [L--RLR]
ATTRIBUTE	NAS-Port-Id		5	integer	- [LR-RLR]
ATTRIBUTE	Service-Type		6	integer	- [LR-RLR]=P	
ATTRIBUTE	Framed-Protocol		7	integer	- [LR-RLR]=P	
ATTRIBUTE	Framed-IP-Address	8	ipaddr	- [LR-RLR]=	
ATTRIBUTE	Framed-IP-Netmask	9	ipaddr	- [LR-RLR]=
ATTRIBUTE	Framed-Routing		10	integer	- [-R-R-R]=
ATTRIBUTE	Filter-Id		11	string	- [-R-R-R]=P
ATTRIBUTE	Framed-MTU		12	integer	- [LR-R-R]=P
ATTRIBUTE	Framed-Compression	13	integer	- [LR-RLR]=P
ATTRIBUTE	Login-IP-Host		14	ipaddr	- [LR-R-R]=
ATTRIBUTE	Login-Service		15	integer	- [-R-R-R]=P
ATTRIBUTE	Login-TCP-Port		16	integer	- [-R-R-R]=
ATTRIBUTE	Reply-Message		18	string	- [-R----]+P
ATTRIBUTE	Callback-Number		19	string	- [-R----]=
ATTRIBUTE	Callback-Id		20	string	- [-R----]=	
ATTRIBUTE	Framed-Route		22	string	- [-R----]=
ATTRIBUTE	Framed-IPX-Network	23	ipaddr	- [-R----]=
ATTRIBUTE	State			24	string	- [LRLRLR]
ATTRIBUTE	Class			25	string	- [LRLRLR]
ATTRIBUTE	Vendor-Specific		26	string	- [LR-R-R]
ATTRIBUTE	Session-Timeout		27	integer	- [-R----]=P
ATTRIBUTE	Idle-Timeout		28	integer	- [-R----]=P
ATTRIBUTE	Termination-Action	29	integer	- [LR-R-R]=
ATTRIBUTE	Called-Station-Id	30	string	- [L--RLR]
ATTRIBUTE	Calling-Station-Id	31	string	- [L--RLR]
ATTRIBUTE	NAS-Identifier		32	string	- [L--RLR]
ATTRIBUTE	Proxy-State		33	string	- [------]
ATTRIBUTE	Login-LAT-Service	34	string	- [-R---R]=
ATTRIBUTE	Login-LAT-Node		35	string	- [-R---R]=
ATTRIBUTE	Login-LAT-Group		36	string	- [-R---R]=
ATTRIBUTE	Framed-AppleTalk-Link	37	integer	- [-R---R]=
ATTRIBUTE	Framed-AppleTalk-Network 38	integer	- [-R---R]=
ATTRIBUTE	Framed-AppleTalk-Zone	39	string	- [-R---R]=

ATTRIBUTE	Acct-Status-Type	40	integer	- []
ATTRIBUTE	Acct-Delay-Time		41	integer	- []
ATTRIBUTE	Acct-Input-Octets	42	integer	- []
ATTRIBUTE	Acct-Output-Octets	43	integer	- []
ATTRIBUTE	Acct-Session-Id		44	string	- []
ATTRIBUTE	Acct-Authentic		45	integer	- []
ATTRIBUTE	Acct-Session-Time	46	integer	- []
ATTRIBUTE       Acct-Input-Packets	47	integer	- []
ATTRIBUTE       Acct-Output-Packets	48	integer	- []
ATTRIBUTE	Acct-Terminate-Cause	49	integer	- []
ATTRIBUTE	Acct-Multi-Session-Id	50	integer	- []
ATTRIBUTE	Acct-Link-Count		51	integer	- []

ATTRIBUTE	CHAP-Challenge		60	string	- []
ATTRIBUTE	NAS-Port-Type		61	integer	- []
ATTRIBUTE	Port-Limit		62	integer	- []P
ATTRIBUTE	Login-LAT-Port		63	integer	- []

ATTRIBUTE	Connect-Info		77	string	- []

ATTRIBUTE       User-UID                99      integer	- [LRLRLR]
ATTRIBUTE	User-GID		100	integer	- [LRLRLR]

#
# Cistron-Radius compatibility
#
ATTRIBUTE	Huntgroup-Name		221	string	- [L--RLR]
ATTRIBUTE	User-Category		1029	string	- [L--R-R]
ATTRIBUTE	Group-Name		1030	string	- [L--R-R]
ATTRIBUTE	Simultaneous-Use	1034	integer	- [L--R-R]
ATTRIBUTE	Strip-User-Name		1035	integer	- [LRLR-R]
ATTRIBUTE	Fall-Through		1036	integer	- [LRLR--]
ATTRIBUTE	Add-Port-To-IP-Address	1037	integer	- [-R-R--]=
ATTRIBUTE	Exec-Program		1038	string	- [-R----]=
ATTRIBUTE	Exec-Program-Wait	1039	string	- [-R----]=
ATTRIBUTE	Hint			1040	string	- [L--R-R]
ATTRIBUTE	Pam-Auth		1041	string	- [L--R-R]=
ATTRIBUTE	Login-Time		1042	string	- [L-----]

# Attributes used by GNU Radius
ATTRIBUTE	Replace-User-Name	2001	string	- [LRLR--]
ATTRIBUTE	Rewrite-Function	2002	string	- [LRLRLR]

ATTRIBUTE	Acct-Type		2003	integer	- [L--R-R]
VALUE		Acct-Type		None	0
VALUE		Acct-Type		System	1
VALUE		Acct-Type		Detail	2
VALUE		Acct-Type		SQL	3

ATTRIBUTE	Match-Profile		2004	string	- [LR-R-R]
## ATTRIBUTE	Include-Profile		2005	string 
ATTRIBUTE	Auth-Data		2006	string	- [L--R-R]=

ATTRIBUTE	Log-Mode-Mask		2007	integer	- [L--R-R]+
VALUE		Log-Mode-Mask		Log-Auth		1
VALUE		Log-Mode-Mask		Log-Auth-Pass		2
VALUE		Log-Mode-Mask		Log-Failed-Pass		4
VALUE		Log-Mode-Mask		Log-Pass		6
VALUE		Log-Mode-Mask		Log-All			7

ATTRIBUTE	Acct-Ext-Program	2008	string	- [---R--]=
ATTRIBUTE	Scheme-Procedure	2009	string	- [-R----]
ATTRIBUTE	Scheme-Acct-Procedure	2010	string	- [---R--]=

ATTRIBUTE       Password-Location       2011    integer - [L-----]
VALUE           Password-Location       SQL			1

# These are used by rewriting functions:
ATTRIBUTE	Orig-User-Name		2101	string	- [L--R-R]
ATTRIBUTE	Orig-NAS-Port-Id	2105	integer	- [L--R-R]
ATTRIBUTE	Orig-Acct-Session-Id	2144	integer	- [L--R-R]

ATTRIBUTE	Password-Expire-Days	2145	integer - [------]

#
# Non-Protocol Attributes
# These attributes are used internally by the server
#
ATTRIBUTE	Expiration		  21	date	- [L-----]
ATTRIBUTE	Auth-Type		1000	integer	- [L--R-R]	
ATTRIBUTE	Menu			1001	string	- [-R----]=
ATTRIBUTE	Termination-Menu	1002	string	- [-R----]=
ATTRIBUTE	Prefix			1003	string	- [L-L-LR]
ATTRIBUTE	Suffix			1004	string	- [L-L-LR]
ATTRIBUTE	Group			1005	string	- [L-L-LR]
ATTRIBUTE	Crypt-Password		1006	string	- [L-----]
ATTRIBUTE	Connect-Rate		1007	integer	- [------]

#
# Integer Translations
#

# User Types

VALUE		Service-Type		Login-User		1
VALUE		Service-Type		Framed-User		2
VALUE		Service-Type		Callback-Login-User	3
VALUE		Service-Type		Callback-Framed-User	4
VALUE		Service-Type		Outbound-User		5
VALUE		Service-Type		Administrative-User	6
VALUE		Service-Type		NAS-Prompt-User		7
VALUE		Service-Type		Authenticate-Only	8
VALUE		Service-Type		Call-Check		10

# GNU Radius Extension
VALUE		Service-Type		RADIUS-Administrative-User	20

# Framed Protocols

VALUE		Framed-Protocol		PPP			1
VALUE		Framed-Protocol		SLIP			2

# Framed Routing Values

VALUE		Framed-Routing		None			0
VALUE		Framed-Routing		Broadcast		1
VALUE		Framed-Routing		Listen			2
VALUE		Framed-Routing		Broadcast-Listen	3

# Framed Compression Types

VALUE		Framed-Compression	None			0
VALUE		Framed-Compression	Van-Jacobson-TCP-IP	1

# Login Services

VALUE		Login-Service		Telnet			0
VALUE		Login-Service		Rlogin			1
VALUE		Login-Service		TCP-Clear		2
VALUE		Login-Service		PortMaster		3

# Status Types

VALUE		Acct-Status-Type	Start			1
VALUE		Acct-Status-Type	Stop			2
VALUE		Acct-Status-Type	Alive			3
VALUE		Acct-Status-Type	Accounting-On		7
VALUE		Acct-Status-Type	Accounting-Off		8

# Authentication Types

VALUE		Acct-Authentic		RADIUS			1
VALUE		Acct-Authentic		Local			2

# Termination Options

VALUE		Termination-Action	Default			0
VALUE		Termination-Action	RADIUS-Request		1

# NAS Port Types, available in 3.3.1 and later

VALUE		NAS-Port-Type		Async			0
VALUE		NAS-Port-Type		Sync			1
VALUE		NAS-Port-Type		ISDN			2
VALUE		NAS-Port-Type		ISDN-V120		3
VALUE		NAS-Port-Type		ISDN-V110		4

# Acct Terminate Causes, available in 3.3.2 and later

VALUE           Acct-Terminate-Cause    User-Request            1
VALUE           Acct-Terminate-Cause    Lost-Carrier            2
VALUE           Acct-Terminate-Cause    Lost-Service            3
VALUE           Acct-Terminate-Cause    Idle-Timeout            4
VALUE           Acct-Terminate-Cause    Session-Timeout         5
VALUE           Acct-Terminate-Cause    Admin-Reset             6
VALUE           Acct-Terminate-Cause    Admin-Reboot            7
VALUE           Acct-Terminate-Cause    Port-Error              8
VALUE           Acct-Terminate-Cause    NAS-Error               9
VALUE           Acct-Terminate-Cause    NAS-Request             10
VALUE           Acct-Terminate-Cause    NAS-Reboot              11
VALUE           Acct-Terminate-Cause    Port-Unneeded           12
VALUE           Acct-Terminate-Cause    Port-Preempted          13
VALUE           Acct-Terminate-Cause    Port-Suspended          14
VALUE           Acct-Terminate-Cause    Service-Unavailable     15
VALUE           Acct-Terminate-Cause    Callback                16
VALUE           Acct-Terminate-Cause    User-Error              17
VALUE           Acct-Terminate-Cause    Host-Request            18

#VALUE		Tunnel-Type		L2TP			3
#VALUE		Tunnel-Medium-Type	IP			1

#
# Auth-Type translations
#
VALUE		Auth-Type		Local			0
VALUE		Auth-Type		System			1
VALUE		Auth-Type		SecurID			2
VALUE		Auth-Type		Crypt-Local		3
VALUE		Auth-Type		Reject			4
VALUE		Auth-Type		Ignore			5

#
# Extensions introduced by Cistron
#
VALUE		Auth-Type		Mysql			252
# A preferred alias for Mysql
VALUE		Auth-Type		SQL			252
VALUE		Auth-Type		Pam			253
VALUE		Auth-Type		Accept			254

VALUE		Fall-Through		No			0
VALUE		Fall-Through		Yes			1
VALUE		Add-Port-To-IP-Address	No			0
VALUE		Add-Port-To-IP-Address	Yes			1
VALUE		Strip-User-Name		No			0
VALUE		Strip-User-Name		Yes			1

normal (text/plain, 871 B)

dict/compat
dict/livingston

lexer => 
"[email protected]"
parser => [email protected]
parser => strlen(qstring)=17
lexer => 
"auth"
parser => qstring=auth
parser => strlen(qstring)=4
lexer => 
"pspl.co.in"
parser => qstring=pspl.co.in
parser => strlen(qstring)=10
lexer => 
"MD5"
parser => qstring=MD5
parser => strlen(qstring)=3
lexer => 
00000001
parser => hstring=00000001
parser => strlen(hstring)=8
lexer => 
""
parser => qstring=
parser => strlen(qstring)=0
lexer => 
""
parser => qstring=
parser => strlen(qstring)=0
lexer => 
"sip:registrar.pspl.co.in"
parser => qstring=sip:registrar.pspl.co.in
parser => strlen(qstring)=24
lexer => 
"0123456789abcdef"
parser => qstring=0123456789abcdef
parser => strlen(qstring)=16
lexer => 
"0123456789abcdef"
parser => qstring=0123456789abcdef
parser => strlen(qstring)=16

conked (text/plain, 909 B)

dict/digest
dict/compat
dict/livingston

lexer => 
"[email protected]"
parser => [email protected]
parser => strlen(qstring)=17
lexer => 
"auth"
parser => qstring=authÜ±B
parser => strlen(qstring)=8
lexer => 
"pspl.co.in"
parser => qstring=pspl.co.in
parser => strlen(qstring)=10
lexer => 
"MD5"
parser => qstring=MD5BÜ±B
parser => strlen(qstring)=8
lexer => 
00000001
parser => hstring=00000001
parser => strlen(hstring)=8
lexer => 
""
parser => qstring=Ü±BÜ±B
parser => strlen(qstring)=8
lexer => 
""
parser => qstring=Ü±BÜ±B
parser => strlen(qstring)=8
lexer => 
"sip:registrar.pspl.co.in"
parser => qstring=sip:registrar.pspl.co.in
parser => strlen(qstring)=24
lexer => 
"0123456789abcdef"
parser => qstring=0123456789abcdef
parser => strlen(qstring)=16
lexer => 
"0123456789abcdef"
parser => qstring=0123456789abcdef
parser => strlen(qstring)=16