From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Date: Wed, 22 Feb 2023 21:38:33 +0000 (-0600)
Subject: tacacs: Add Calix vendor dictionary
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ba1159a0a4efac9c50777e76ddfb1023f503ea40;p=thirdparty%2Ffreeradius-server.git

tacacs: Add Calix vendor dictionary
---

diff --git a/share/dictionary/tacacs/dictionary b/share/dictionary/tacacs/dictionary
index 3cee6ec997d..1c2500eb709 100644
--- a/share/dictionary/tacacs/dictionary
+++ b/share/dictionary/tacacs/dictionary
@@ -13,5 +13,6 @@ BEGIN-PROTOCOL TACACS
 
 $INCLUDE dictionary.freeradius.internal
 $INCLUDE dictionary.tacacs
+$INCLUDE dictionary.calix
 
 END-PROTOCOL TACACS
diff --git a/share/dictionary/tacacs/dictionary.calix b/share/dictionary/tacacs/dictionary.calix
new file mode 100644
index 00000000000..f6bcffcf4c7
--- /dev/null
+++ b/share/dictionary/tacacs/dictionary.calix
@@ -0,0 +1,46 @@
+VENDOR Calix  6321
+
+BEGIN-VENDOR Calix
+
+#
+# Authorization attributes
+#
+
+# Usually login
+DEFINE service		string
+
+# Which privileges to assign to the user
+DEFINE roles		string
+
+# Unknown
+DEFINE allow-permission	string
+
+# Unknown
+DEFINE deny-permission string
+
+#
+# Accounting attributes
+#
+# When command execution or the session started
+DEFINE start_time 	date
+
+# When command execution or the session stopped
+DEFINE stop_time	date
+
+# Seems to be a unique ID assigned to the user's session
+# Allows for multiple commands to be correlated within a login session
+DEFINE task_id		uint32
+
+# Only seen CLI_CMD so far, there are likely others
+DEFINE action		string
+
+# The actual undecorated command the user issued, or the RPC call
+DEFINE cmd		string
+
+# User-Agent, i.e. how the user is connecting to the device
+DEFINE ua		string
+
+# Source port of the connection, usually a port in the ephemeral range
+DEFINE port		uint16
+
+END-VENDOR Calix