Message-Authenticator =* ANY,
Error-Cause =* ANY,
Reply-Message =* ANY,
- MS-CHAP-Error =* ANY,
+ Vendor-Specific.Microsoft.CHAP-Error =* ANY,
Proxy-State =* ANY,
Error-Cause =* ANY
Proxy-State =* ANY,
EAP-Message =* ANY,
Message-Authenticator =* ANY,
- MS-MPPE-Recv-Key =* ANY,
- MS-MPPE-Send-Key =* ANY,
- MS-CHAP-MPPE-Keys =* ANY,
+ Vendor-Specific.Microsoft.MPPE-Recv-Key =* ANY,
+ Vendor-Specific.Microsoft.MPPE-Send-Key =* ANY,
+ Vendor-Specific.Microsoft.CHAP-MPPE-Keys =* ANY,
State =* ANY,
Session-Timeout <= 28800,
Idle-Timeout <= 600,
User-Password =* ANY,
CHAP-Password =* ANY,
CHAP-Challenge =* ANY,
- MS-CHAP-Challenge =* ANY,
- MS-CHAP-Response =* ANY,
+ Vendor-Specific.Microsoft.CHAP-Challenge =* ANY,
+ Vendor-Specific.Microsoft.CHAP-Response =* ANY,
EAP-Message =* ANY,
Message-Authenticator =* ANY,
State =* ANY,
#
# FreeRADIUS v4 produces statistics in its own TLV
#
-ATTRIBUTE Stats4-TLV 15 tlv
+ATTRIBUTE Stats4 15 tlv
ATTRIBUTE Stats4-Type .1 integer
VALUE Stats4-Type Global 1
VALUE Stats4-Type Listener 3
ATTRIBUTE Stats4-Name .2 string
-ATTRIBUTE Stats4-Number .3 string
+ATTRIBUTE Stats4-Number .3 string
ATTRIBUTE Stats4-IPv4-Address .4 ipaddr
ATTRIBUTE Stats4-IPv6-Address .5 ipv6addr
ATTRIBUTE Stats4-Port .6 integer
#
BEGIN-TLV FreeRADIUS-Mib-2
ATTRIBUTE Radius-Mib 67 tlv
-ATTRIBUTE Radius-Authentication .1 tlv
-ATTRIBUTE Radius-Auth-Serv-Mib .1.1 tlv
-ATTRIBUTE Radius-Auth-Serv-Mib-Objects .1.1.1 tlv
-ATTRIBUTE Radius-Auth-Serv .1.1.1.1 tlv
+ATTRIBUTE Radius-Authentication 67.1 tlv
+ATTRIBUTE Radius-Auth-Serv-Mib 67.1.1 tlv
+ATTRIBUTE Radius-Auth-Serv-Mib-Objects 67.1.1.1 tlv
+ATTRIBUTE Radius-Auth-Serv 67.1.1.1.1 tlv
BEGIN-TLV Radius-Auth-Serv
ATTRIBUTE Radius-Auth-Serv-Ident 1 string
ATTRIBUTE Radius-Auth-Serv-Ext-Packet-Dropped 12 integer
ATTRIBUTE Radius-Auth-Serv-Ext-Unknown-Types 13 integer
ATTRIBUTE Radius-Auth-Serv-Counter-Discontinuity 14 integer
-END-TLV Radius-Auth-Client-Ext-Entry
+END-TLV 16.Radius-Auth-Client-Ext-Entry
-END-TLV Radius-Auth-Serv
-END-TLV FreeRADIUS-Mib-2
+END-TLV 67.1.1.1.Radius-Auth-Serv
+END-TLV 1.3.6.1.2.FreeRADIUS-Mib-2
PASSWORD="CHAP-Password"
;;
mschap)
- PASSWORD="MS-CHAP-Password"
+ PASSWORD="Vendor-Specific.Microsoft.CHAP-Password"
;;
*)
usage
#
User-Name = "bob",
Digest-Response = "bdbeebb2da6adb6bca02599c2239e192"
-Digest-Realm = "biloxi.com",
-Digest-Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
-Digest-Method = "INVITE",
-Digest-URI = "sip:bob@biloxi.com",
-Digest-Algorithm = "MD5",
-Digest-User-Name = "bob",
-Digest-QOP = "auth-int",
-Digest-Nonce-Count = "00000001",
-Digest-CNonce = "0a4f113b",
-Digest-Body-Digest = "c1ed018b8ec4a3b170c0921f5b564e48",
+Digest-Attributes.Realm = "biloxi.com",
+Digest-Attributes.Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
+Digest-Attributes.Method = "INVITE",
+Digest-Attributes.URI = "sip:bob@biloxi.com",
+Digest-Attributes.Algorithm = "MD5",
+Digest-Attributes.User-Name = "bob",
+Digest-Attributes.QOP = "auth-int",
+Digest-Attributes.Nonce-Count = "00000001",
+Digest-Attributes.CNonce = "0a4f113b",
+Digest-Attributes.Body-Digest = "c1ed018b8ec4a3b170c0921f5b564e48",
Message-Authenticator = ""
Packet-Type == Access-Accept
#
User-Name = "bob"
User-Password = "hello"
-WiMAX-GMT-Timezone-offset = -1
-WiMAX-AAA-Session-Id = 0x01020304
-WiMAX-hHA-IP-MIP4 = 192.0.2.1
+Vendor-Specific.WiMAX.GMT-Timezone-offset = -1
+Vendor-Specific.WiMAX.AAA-Session-Id = 0x01020304
+Vendor-Specific.WiMAX.hHA-IP-MIP4 = 192.0.2.1
#
# Automatically encoded capability
#
-WiMAX-Accounting-Capabilities = 2
-WiMAX-Release = "1.0"
-WiMAX-Packet-Data-Flow-Id = 1
+Vendor-Specific.WiMAX.Capability.Accounting-Capabilities = 2
+Vendor-Specific.WiMAX.Capability.Release = "1.0"
+Vendor-Specific.WiMAX.Packet-Flow-Descriptor.Packet-Data-Flow-Id = 1
#
# Long string
#
-WiMAX-Hotline-Indicator = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxaaaaaaaaaabbbbbbbbbbcccccccccc123"
-WiMAX-Service-Data-Flow-Id = 2
-WiMAX-hHA-IP-MIP4 = 192.0.2.2
+Vendor-Specific.WiMAX.Hotline-Indicator = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxaaaaaaaaaabbbbbbbbbbcccccccccc123"
+Vendor-Specific.WiMAX.Packet-Flow-Descriptor.Service-Data-Flow-Id = 2
+Vendor-Specific.WiMAX.hHA-IP-MIP4 = 192.0.2.2
# and the response
Packet-Type == Access-Accept
${Q}for _num in $$(sed '/^#.*TESTS/!d; s/.*TESTS//g' $<); do \
echo "DIGEST-TEST $(TARGET)_$${_num}"; \
cp -f $< $@.request; \
- echo "Test-Name = \"$(TARGET)\"" >> $@.request; \
- echo "Test-Number = \"$${_num}\"" >> $@.request; \
+ echo "Vendor-Specific.Test.Test-Name = \"$(TARGET)\"" >> $@.request; \
+ echo "Vendor-Specific.Test.Test-Number = \"$${_num}\"" >> $@.request; \
if ! $(TEST_BIN)/radclient -f $@.request -xF -d src/tests/digest/config -D share/dictionary 127.0.0.1:$(PORT) auth $(SECRET) > $@.out; then \
echo "FAILED"; \
cat $@.out; \
# Section 3.3
#
#
-# In the "users" file:
+# In the "users" file:
#
# bob Password.Cleartext := "zanzibar"
-# Or bob Digest-HA1 := "12af60467a33e8518da5c68bbff12b11"
+# Or bob Digest-Attributes.HA1 := "12af60467a33e8518da5c68bbff12b11"
#
#
#
#
User-Name = "bob",
Digest-Response = "89eb0059246c02b2f6ee02c7961d5ea3",
-Digest-Realm = "biloxi.com",
-Digest-Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
-Digest-Method = "INVITE",
-Digest-URI = "sip:bob@biloxi.com",
-Digest-User-Name = "bob",
-Digest-QOP = "auth",
-Digest-Algorithm = "MD5",
-Digest-Nonce-Count = "00000001",
-Digest-CNonce = "0a4f113b",
+Digest-Attributes.Realm = "biloxi.com",
+Digest-Attributes.Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
+Digest-Attributes.Method = "INVITE",
+Digest-Attributes.URI = "sip:bob@biloxi.com",
+Digest-Attributes.User-Name = "bob",
+Digest-Attributes.QOP = "auth",
+Digest-Attributes.Algorithm = "MD5",
+Digest-Attributes.Nonce-Count = "00000001",
+Digest-Attributes.CNonce = "0a4f113b",
# 3.4
#
#
-# In the "users" file:
+# In the "users" file:
# bob User-Password := "zanzibar"
-# Or bob Digest-HA1 := "12af60467a33e8518da5c68bbff12b11"
+# Or bob Digest-Attributes.HA1 := "12af60467a33e8518da5c68bbff12b11"
#
# TESTS 1 2
#
User-Name = "bob",
Digest-Response = "e4e4ea61d186d07a92c9e1f6919902e9",
-Digest-Realm = "biloxi.com",
-Digest-Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
-Digest-Method = "INVITE",
-Digest-URI = "sip:bob@biloxi.com",
-Digest-User-Name = "bob",
-Digest-QOP = "auth",
-Digest-Algorithm = "MD5-Sess",
-Digest-Nonce-Count = "00000001",
-Digest-CNonce = "0a4f113b",
+Digest-Attributes.Realm = "biloxi.com",
+Digest-Attributes.Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
+Digest-Attributes.Method = "INVITE",
+Digest-Attributes.URI = "sip:bob@biloxi.com",
+Digest-Attributes.User-Name = "bob",
+Digest-Attributes.QOP = "auth",
+Digest-Attributes.Algorithm = "MD5-Sess",
+Digest-Attributes.Nonce-Count = "00000001",
+Digest-Attributes.CNonce = "0a4f113b",
#
User-Name = "bob",
Digest-Response = "bdbeebb2da6adb6bca02599c2239e192"
-Digest-Realm = "biloxi.com",
-Digest-Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
-Digest-Method = "INVITE",
-Digest-URI = "sip:bob@biloxi.com",
-Digest-Algorithm = "MD5",
-Digest-User-Name = "bob",
-Digest-QOP = "auth-int",
-Digest-Nonce-Count = "00000001",
-Digest-CNonce = "0a4f113b",
-Digest-Body-Digest = "c1ed018b8ec4a3b170c0921f5b564e48",
+Digest-Attributes.Realm = "biloxi.com",
+Digest-Attributes.Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
+Digest-Attributes.Method = "INVITE",
+Digest-Attributes.URI = "sip:bob@biloxi.com",
+Digest-Attributes.Algorithm = "MD5",
+Digest-Attributes.User-Name = "bob",
+Digest-Attributes.QOP = "auth-int",
+Digest-Attributes.Nonce-Count = "00000001",
+Digest-Attributes.CNonce = "0a4f113b",
+Digest-Attributes.Body-Digest = "c1ed018b8ec4a3b170c0921f5b564e48",
Message-Authenticator = ""
#
# 3.2
#
-# In the "users" file:
+# In the "users" file:
# bob User-Password := "zanzibar"
-# Or bob Digest-HA1 := "12af60467a33e8518da5c68bbff12b11"
+# Or bob Digest-Attributes.HA1 := "12af60467a33e8518da5c68bbff12b11"
#
# TESTS 1
#
User-Name = "bob",
Digest-Response = "89eb0059246c02b2f6ee02c7961d5ea3",
-Digest-Realm = "biloxi.com",
-Digest-Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
-Digest-Method = "INVITE",
-Digest-URI = "sip:bob@biloxi.com",
-Digest-User-Name = "bob",
-Digest-QOP = "auth",
-Digest-Nonce-Count = "00000001",
-Digest-CNonce = "0a4f113b",
+Digest-Attributes.Realm = "biloxi.com",
+Digest-Attributes.Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
+Digest-Attributes.Method = "INVITE",
+Digest-Attributes.URI = "sip:bob@biloxi.com",
+Digest-Attributes.User-Name = "bob",
+Digest-Attributes.QOP = "auth",
+Digest-Attributes.Nonce-Count = "00000001",
+Digest-Attributes.CNonce = "0a4f113b",
#
# 3.5.2
#
-# In the "users" file:
+# In the "users" file:
# bob User-Password := "zanzibar"
-# Or bob Digest-HA1 := "12af60467a33e8518da5c68bbff12b11"
+# Or bob Digest-Attributes.HA1 := "12af60467a33e8518da5c68bbff12b11"
#
# TESTS 1 2
#
User-Name = "bob",
Digest-Response = "bdbeebb2da6adb6bca02599c2239e192"
-Digest-Realm = "biloxi.com",
-Digest-Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
-Digest-Method = "INVITE",
-Digest-URI = "sip:bob@biloxi.com",
-Digest-Algorithm = "MD5",
-Digest-User-Name = "bob",
-Digest-QOP = "auth-int",
-Digest-Nonce-Count = "00000001",
-Digest-CNonce = "0a4f113b",
-Digest-Body-Digest = "c1ed018b8ec4a3b170c0921f5b564e48",
+Digest-Attributes.Realm = "biloxi.com",
+Digest-Attributes.Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
+Digest-Attributes.Method = "INVITE",
+Digest-Attributes.URI = "sip:bob@biloxi.com",
+Digest-Attributes.Algorithm = "MD5",
+Digest-Attributes.User-Name = "bob",
+Digest-Attributes.QOP = "auth-int",
+Digest-Attributes.Nonce-Count = "00000001",
+Digest-Attributes.CNonce = "0a4f113b",
+Digest-Attributes.Body-Digest = "c1ed018b8ec4a3b170c0921f5b564e48",
##
# 3.6
#
-# In the "users" file:
+# In the "users" file:
# bob User-Password := "zanzibar"
-# Or bob Digest-HA1 := "12af60467a33e8518da5c68bbff12b11"
+# Or bob Digest-Attributes.HA1 := "12af60467a33e8518da5c68bbff12b11"
#
#
# TESTS 1 2
#
User-Name = "bob",
Digest-Response = "91984da2d8663716e91554859c22ca70",
-Digest-Realm = "biloxi.com",
-Digest-Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
-Digest-Method = "INVITE",
-Digest-URI = "sip:bob@biloxi.com",
-Digest-User-Name = "bob",
-Digest-QOP = "auth-int",
-Digest-Algorithm = "MD5-Sess",
-Digest-Nonce-Count = "00000001",
-Digest-CNonce = "0a4f113b",
-Digest-Body-Digest = "c1ed018b8ec4a3b170c0921f5b564e48",
+Digest-Attributes.Realm = "biloxi.com",
+Digest-Attributes.Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
+Digest-Attributes.Method = "INVITE",
+Digest-Attributes.URI = "sip:bob@biloxi.com",
+Digest-Attributes.User-Name = "bob",
+Digest-Attributes.QOP = "auth-int",
+Digest-Attributes.Algorithm = "MD5-Sess",
+Digest-Attributes.Nonce-Count = "00000001",
+Digest-Attributes.CNonce = "0a4f113b",
+Digest-Attributes.Body-Digest = "c1ed018b8ec4a3b170c0921f5b564e48",
#
# 3.5.2
#
-# In the "users" file:
+# In the "users" file:
# bob User-Password := "zanzibar"
-# Or bob Digest-HA1 := "12af60467a33e8518da5c68bbff12b11"
+# Or bob Digest-Attributes.HA1 := "12af60467a33e8518da5c68bbff12b11"
#
# TESTS 1 2
#
User-Name = "bob",
Digest-Response = "bdbeebb2da6adb6bca02599c2239e192"
-Digest-Realm = "biloxi.com",
-Digest-Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
-Digest-Method = "INVITE",
-Digest-URI = "sip:bob@biloxi.com",
-Digest-User-Name = "bob",
-Digest-QOP = "auth-int",
-Digest-Nonce-Count = "00000001",
-Digest-CNonce = "0a4f113b",
-Digest-Body-Digest = "c1ed018b8ec4a3b170c0921f5b564e48",
+Digest-Attributes.Realm = "biloxi.com",
+Digest-Attributes.Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
+Digest-Attributes.Method = "INVITE",
+Digest-Attributes.URI = "sip:bob@biloxi.com",
+Digest-Attributes.User-Name = "bob",
+Digest-Attributes.QOP = "auth-int",
+Digest-Attributes.Nonce-Count = "00000001",
+Digest-Attributes.CNonce = "0a4f113b",
+Digest-Attributes.Body-Digest = "c1ed018b8ec4a3b170c0921f5b564e48",
recv Access-Request {
update reply {
- &Test-Server-Port = "%{Packet-Dst-Port}"
+ &Vendor-Specific.test.Test-Server-Port = "%{Packet-Dst-Port}"
}
if (&User-Name == "bob") {
# Or, a hashed version thereof.
#
if (&Digest-Response) {
- if (&Test-Number == "1") {
+ if (&Vendor-Specific.Test.Test-Number == "1") {
update control {
&Password.Cleartext := "zanzibar"
}
}
- elsif (&Test-Number == "2") {
+ elsif (&Vendor-Specific.Test.Test-Number == "2") {
update control {
- &Digest-HA1 := 12af60467a33e8518da5c68bbff12b11
+ &Digest-Attributes.HA1 := 12af60467a33e8518da5c68bbff12b11
}
}
}
#
User-name = "bob",
Digest-Response = "e4e4ea61d186d07a92c9e1f6919902e9",
-Digest-Realm = "biloxi.com",
-Digest-Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
-Digest-Method = "INVITE",
-Digest-URI = "sip:bob@biloxi.com",
-Digest-Algorithm = "MD5-sess",
-Digest-User-Name = "bob",
-Digest-QOP = "auth",
-Digest-Nonce-Count = "00000001",
-Digest-CNonce = "0a4f113b"
+Digest-Attributes.Realm = "biloxi.com",
+Digest-Attributes.Nonce = "dcd98b7102dd2f0e8b11d0f600bfb0c093",
+Digest-Attributes.Method = "INVITE",
+Digest-Attributes.URI = "sip:bob@biloxi.com",
+Digest-Attributes.Algorithm = "MD5-sess",
+Digest-Attributes.User-Name = "bob",
+Digest-Attributes.QOP = "auth",
+Digest-Attributes.Nonce-Count = "00000001",
+Digest-Attributes.CNonce = "0a4f113b"
# NT Hash hash = 0x9a936faf344359a0f1e3c9b5585b9f1f
#
User-Name = "bob",
-MS-CHAP-Challenge = 0xb9634adc358b2ab3,
-MS-CHAP-Response = 0xb9010000000000000000000000000000000000000000000000007a42408782f745ef90a86fd21b0d9294132750f4af66a419
+Vendor-Specific.Microsoft.CHAP-Challenge = 0xb9634adc358b2ab3,
+Vendor-Specific.Microsoft.CHAP-Response = 0xb9010000000000000000000000000000000000000000000000007a42408782f745ef90a86fd21b0d9294132750f4af66a419
# update <section> { ... }::
#
update {
- &session-state.Session-Data := &session-state.Session-Data
- &session-state.Counter := &session-state.Counter
+ &session-state.Session-Data := &session-state.Session-Data
+ &session-state.Encr-Data.Counter := &session-state.Encr-Data.Counter
}
-}
\ No newline at end of file
+}
&Sim-SQN := 3
}
update reply {
- &Next-Reauth-Id := ""
- &Next-Pseudonym := ""
+ &Encr-Data.Next-Reauth-Id := ""
+ &Encr-Data.Next-Pseudonym := ""
}
}
clear session {
eap_aka_prime_cache
}
-}
\ No newline at end of file
+}
# update <section> { ... }::
#
update {
- &session-state.Session-Data := &session-state.Session-Data
- &session-state.Counter := &session-state.Counter
+ &session-state.Session-Data := &session-state.Session-Data
+ &session-state.Encr-Data.Counter := &session-state.Encr-Data.Counter
}
-}
\ No newline at end of file
+}
&Sim-SQN := 3
}
update reply {
- &Next-Reauth-Id := ""
- &Next-Pseudonym := ""
+ &Encr-Data.Next-Reauth-Id := ""
+ &Encr-Data.Next-Pseudonym := ""
}
}
# update <section> { ... }::
#
update {
- &session-state.Session-Data := &session-state.Session-Data
- &session-state.Counter := &session-state.Counter
+ &session-state.Session-Data := &session-state.Session-Data
+ &session-state.Encr-Data.Counter := &session-state.Encr-Data.Counter
}
-}
\ No newline at end of file
+}
&Sim-SQN := 3
}
update reply {
- &Next-Reauth-Id := ""
- &Next-Pseudonym := ""
+ &Encr-Data.Next-Reauth-Id := ""
+ &Encr-Data.Next-Pseudonym := ""
}
ok
}
send Reauthentication-Request {
update reply {
- &Next-Reauth-Id := ""
- &Next-Pseudonym := ""
+ &Encr-Data.Next-Reauth-Id := ""
+ &Encr-Data.Next-Pseudonym := ""
}
ok
}
test_fail
}
-if ("%{attr_by_oid:26.11344.1}" == 'Vendor-Specific.FreeRADIUS.Proxied-To') {
+if ("%{attr_by_oid:26.11344.1}" == 'Proxied-To') {
test_pass
}
else {
test_fail
}
-if ("%{attr:Vendor-Specific.FreeRADIUS.Proxied-To}" == 'FreeRADIUS-Proxied-To') {
+if ("%{attr:Vendor-Specific.FreeRADIUS.Proxied-To}" == 'Proxied-To') {
test_pass
}
else {
Acct-Link-Count = 0
Idle-Timeout = 0
Session-Timeout = 604800
-Access-Loop-Encapsulation = 0x000000
+Vendor-Specific.ADSL-Forum.Access-Loop-Encapsulation = 0x000000
Proxy-State = 0x323531
#
&control.Password.With-Header += 'userPassword'
&reply.Idle-Timeout := 'radiusIdleTimeout'
&reply.Framed-IP-Netmask := 'radiusFramedIPNetmask'
-# &control.NT-Password := 'ntPassword'
+# &control.Password.NT := 'ntPassword'
# &reply.Reply-Message := 'radiusReplyMessage'
# &reply.Tunnel-Type := 'radiusTunnelType'
# &reply.Tunnel-Medium-Type := 'radiusTunnelMediumType'
if (&User-Name == 'pbkdf2_dig_big') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAAAQ:E+VXOSsE8RwyYGdygQoW9Q==:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAAAQ:E+VXOSsE8RwyYGdygQoW9Q==:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_dig_small') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAAAQ:E+VXOSsE8RwyYGdygQoW9Q==:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI'
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAAAQ:E+VXOSsE8RwyYGdygQoW9Q==:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI'
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_iter0') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAAAP:CuNDJ9NimZoP5ljnPNCBUA==:f09zV7dReGg5SIv/EXY9tCL4XQRr5guhL0Q6UXSKI3c='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAAAP:CuNDJ9NimZoP5ljnPNCBUA==:f09zV7dReGg5SIv/EXY9tCL4XQRr5guhL0Q6UXSKI3c='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_iter1') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAAAQ:OErtptMl2hOxhQqvNw7sNw==:4KkrgL+3Q9j8KlHPivtApBKRZAjyWjtDWmZEz2UjNko='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAAAQ:OErtptMl2hOxhQqvNw7sNw==:4KkrgL+3Q9j8KlHPivtApBKRZAjyWjtDWmZEz2UjNko='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_iter1000') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAD6A:yhmqoKrtPLY2KYK6cNjnfw==:Y6gkSZEo4TRtlsryHqnGYZhoe2qn5tJ4IUyyVHb/3WU='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAD6A:yhmqoKrtPLY2KYK6cNjnfw==:Y6gkSZEo4TRtlsryHqnGYZhoe2qn5tJ4IUyyVHb/3WU='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_iter100000') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AA9CQA:fCfnJGMVC1QLtTOPiaSICA==:KCmjMpQ+lokMvyFTl4f4pPJNc0xJq4iHZPdtHa0OEXM='
+ &Password.PBKDF2 := 'HMACSHA2+256:AA9CQA:fCfnJGMVC1QLtTOPiaSICA==:KCmjMpQ+lokMvyFTl4f4pPJNc0xJq4iHZPdtHa0OEXM='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_iter_big') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAAAQ==:E+VXOSsE8RwyYGdygQoW9Q==:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAAAQ==:E+VXOSsE8RwyYGdygQoW9Q==:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_iter_miss') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256::E+VXOSsE8RwyYGdygQoW9Q==:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI='
+ &Password.PBKDF2 := 'HMACSHA2+256::E+VXOSsE8RwyYGdygQoW9Q==:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI='
}
pap.authorize
pap.authenticate {
if (&User-Name == 'pbkdf2_iter_small') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAAA:E+VXOSsE8RwyYGdygQoW9Q==:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAAA:E+VXOSsE8RwyYGdygQoW9Q==:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI='
}
pap.authorize
pap.authenticate {
#if (&User-Name == 'pbkdf2_passlib') {
# update control {
-# &PBKDF2-Password := '$pbkdf2-sha256$29000$9t7be09prfXee2/NOUeotQ$Y.RDnnq8vsezSZSKy1QNy6xhKPdoBIwc.0XDdRm9sJ8'
+# &Password.PBKDF2 := '$pbkdf2-sha256$29000$9t7be09prfXee2/NOUeotQ$Y.RDnnq8vsezSZSKy1QNy6xhKPdoBIwc.0XDdRm9sJ8'
# }
# pap.authorize
# pap.authenticate
if (&User-Name == 'pbkdf2_salt0') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAnEA::4RJEKVFQ5nE8126aURI0cJO9tqy/DIAhq64piBEwshA='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAnEA::4RJEKVFQ5nE8126aURI0cJO9tqy/DIAhq64piBEwshA='
}
pap.authorize
pap.authenticate {
if (&User-Name == 'pbkdf2_salt1') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAnEA:qg==:KQzCdedgOZYFwx+mQp1TKA8VM4fwf02pqSdJEh2ekwM='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAnEA:qg==:KQzCdedgOZYFwx+mQp1TKA8VM4fwf02pqSdJEh2ekwM='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_salt1024') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAnEA: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:RUoCF5O11OgwLFMTqnKY/yRJy6DYh+yNq4xHZC7COGM='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAnEA: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:RUoCF5O11OgwLFMTqnKY/yRJy6DYh+yNq4xHZC7COGM='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_salt64') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAnEA:msGxE1XuC+wlgRr+H4+ioyxZuiN3KYLUSky2FINDTq7KJylKt4XnqloV+FuHGXUbOu1EWcsFp51u2z8wdXVnQQ==:rAV9BeEJH5kt9uZ6pJt0o5pYpN5LQRe4MAYyk2jvjpU='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAnEA:msGxE1XuC+wlgRr+H4+ioyxZuiN3KYLUSky2FINDTq7KJylKt4XnqloV+FuHGXUbOu1EWcsFp51u2z8wdXVnQQ==:rAV9BeEJH5kt9uZ6pJt0o5pYpN5LQRe4MAYyk2jvjpU='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_salt_big') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAAAQ:E+VXOSsE8RwyYGdygQoW9QA==:pF23EcxNBhJLQ+9JRtd9wQ1Gz+k4i6YjeNZq+7DRBX8='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAAAQ:E+VXOSsE8RwyYGdygQoW9QA==:pF23EcxNBhJLQ+9JRtd9wQ1Gz+k4i6YjeNZq+7DRBX8='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_salt_small') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAAAQ:E+VXOSsE8RwyYGdygQoW9Q=:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAAAQ:E+VXOSsE8RwyYGdygQoW9Q=:UivlvrwHML4VtZHMJLiT/xlH7oyoyvbXQceivptq9TI='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_sha1') {
update control {
- &PBKDF2-Password := 'HMACSHA1:AAAD6A:Xw1P133xrwk=:dtQBXQRiR/No5A8Ip3JFGF/qUC0='
+ &Password.PBKDF2 := 'HMACSHA1:AAAD6A:Xw1P133xrwk=:dtQBXQRiR/No5A8Ip3JFGF/qUC0='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_sha2_224') {
update control {
- &PBKDF2-Password := 'HMACSHA2+224:AAAnEA:UHScBrg/ZWOyBKqQdAh7bw==:tcFp6CDrkIYdhwa60g24U4ko+mBxzAiFxlpPnA=='
+ &Password.PBKDF2 := 'HMACSHA2+224:AAAnEA:UHScBrg/ZWOyBKqQdAh7bw==:tcFp6CDrkIYdhwa60g24U4ko+mBxzAiFxlpPnA=='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_sha2_256') {
update control {
- &PBKDF2-Password := 'HMACSHA2+256:AAAnEA:a/8HbYW2HWsMthN27JI+Ew==:3nPlXYOlOuDCFOfethUomHxTXkG9JCivOdvh6FDNdGw='
+ &Password.PBKDF2 := 'HMACSHA2+256:AAAnEA:a/8HbYW2HWsMthN27JI+Ew==:3nPlXYOlOuDCFOfethUomHxTXkG9JCivOdvh6FDNdGw='
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_sha2_384') {
update control {
- &PBKDF2-Password := 'HMACSHA2+384:AAAnEA:pyHRsYLfNZdjszRcu6eHrA==:ktGfNmZ6PyD8FNEgPzFK1fypKERZ13pgvFl+PQdyKouaMXsXIiWPuTMXHqDUCWsx'
+ &Password.PBKDF2 := 'HMACSHA2+384:AAAnEA:pyHRsYLfNZdjszRcu6eHrA==:ktGfNmZ6PyD8FNEgPzFK1fypKERZ13pgvFl+PQdyKouaMXsXIiWPuTMXHqDUCWsx'
}
pap.authorize
pap.authenticate
if (&User-Name == 'pbkdf2_sha2_512') {
update control {
- &PBKDF2-Password := 'HMACSHA2+512:AAAnEA:TG8Mb94NEmfPLaePwi5CFA==:SYSFeRf9jr4Uo5DB4NvNUEuc1gmEiLjTac5J4WgyKa7mO58KHKWop9xWmcFeuLtUN/iexLTNSgcubOugAyZcog=='
+ &Password.PBKDF2 := 'HMACSHA2+512:AAAnEA:TG8Mb94NEmfPLaePwi5CFA==:SYSFeRf9jr4Uo5DB4NvNUEuc1gmEiLjTac5J4WgyKa7mO58KHKWop9xWmcFeuLtUN/iexLTNSgcubOugAyZcog=='
}
pap.authorize
pap.authenticate
#
User-Name = "bob"
User-Password = "hello"
-Attr-17 = 0xabcdef
+raw.17 = 0xabcdef
#
# Expected answer
Acct-Link-Count = 0
Idle-Timeout = 0
Session-Timeout = 604800
-Access-Loop-Encapsulation = 0x000000
+Vendor-Specific.ADSL-Forum.Access-Loop-Encapsulation = 0x000000
Proxy-State = 0x323531
#
Acct-Link-Count = 0
Idle-Timeout = 0
Session-Timeout = 604800
-Access-Loop-Encapsulation = 0x000000
+Vendor-Specific.ADSL-Forum.Access-Loop-Encapsulation = 0x000000
Proxy-State = 0x323531
#
Acct-Link-Count = 0
Idle-Timeout = 0
Session-Timeout = 604800
-Access-Loop-Encapsulation = 0x000000
+Vendor-Specific.ADSL-Forum.Access-Loop-Encapsulation = 0x000000
Proxy-State = 0x323531
#
Acct-Link-Count = 0
Idle-Timeout = 0
Session-Timeout = 604800
-Access-Loop-Encapsulation = 0x000000
+Vendor-Specific.ADSL-Forum.Access-Loop-Encapsulation = 0x000000
Proxy-State = 0x323531
#
Acct-Link-Count = 0
Idle-Timeout = 0
Session-Timeout = 604800
-Access-Loop-Encapsulation = 0x000000
+Vendor-Specific.ADSL-Forum.Access-Loop-Encapsulation = 0x000000
Proxy-State = 0x323531
#
NAS-Identifier = "auth_4"
Received Access-Accept Id 123 from 127.0.0.1:12340 to 0.0.0.0:1234 via lo length 47
Class = 0x483d342c493d34
- Attr-26 = 0x483d342c493d34
- Attr-26 = 0x483d342c493d43
+ raw.Vendor-Specific = 0x483d342c493d34
+ raw.Vendor-Specific = 0x483d342c493d43