[Contents] [Prev] [Next] [Index] [Report an Error] [No Frames]


Vendor-Specific Attributes

Table 190 describes the vendor-specific attributes used with Steel-Belted Radius Carrier.



Table 190: Steel-Belted Radius Carrier Vendor-Specific Attributes  
Attribute Name
Purpose

Funk-Allowed-Access-Hours

May be placed in the check list for a user or profile entry to control the exact time periods during which a user may be allowed access.

Funk-Allowed-Access-Hours is a variable-length string that identifies time periods in a 7-day week of 24-hour days. This string consists of one or more day specifiers (each of which may list one or more days and/or ranges of days) followed by one or more ranges of 24-hour times, in minutes.

Funk-Concurrent-Login-Limit

Reserved for future use.

Funk-Full-User-Name

Reserved for future use.

Funk-Location-Group-Id

Added to an inbound authentication or accounting request when the request is matched to a location group and AddFunkLocationGroupIdToRequest is set to 1 in the radius.ini file.

The value of the attribute is the name of the location group.

Funk-Peer-Cert-Hash

Added to the list of attributes available for secondary authorization processing when EAP-TLS is loaded as an automatic EAP helper. The attribute is added to the request only if Include_Certificate_Info in the [Secondary_Authorization] section of tlsauth.eap is set to 1.

The value of the attribute is the hexadecimal ASCII representation of the SHA1 hash of the client's certificate.

Funk-Peer-Cert-Issuer

Added to the list of attributes available for secondary authorization processing when EAP-TLS is loaded as an automatic EAP helper. The attribute is added to the request only if Include_Certificate_Info in the [Secondary_Authorization] section of tlsauth.eap is set to 1.

The value of the attribute is the contents of the Issuer attribute of the client's certificate.

Funk-Peer-Cert-Principal

Added to the list of attributes available for secondary authorization processing when EAP-TLS is loaded as an automatic EAP helper. The attribute is added to the request only if Include_Certificate_Info in the [Secondary_Authorization] section of tlsauth.eap is set to 1.

The value of the attribute is the contents of the Subject Alternate Name or Other Name attribute of the client's certificate.

Funk-Peer-Cert-Subject

Added to the list of attributes available for secondary authorization processing when EAP-TLS is loaded as an automatic EAP helper. The attribute is added to the request only if Include_Certificate_Info in the [Secondary_Authorization] section of tlsauth.eap is set to 1.

The value of the attribute is the contents of the Subject attribute of the client's certificate.

Funk-Round-Robin-Group

May be placed in the return list for a user or profile entry to dynamically assign an attribute set from an Attribute Value Pool at log-in time.

The value of this attribute must be set to the .rr file name which defines the Attribute Value Pool.

Funk-Source-IP-Address

Added to the list of attributes available for request processing if AddSourceIPAddressAttrToRequest is set to 1 in the [Configuration] section of the radius.ini file.

The value of the attribute is the IP address from which the packet containing the request was received.

Funk-Source-IPv6-Address

Reserved for future use.

Funk-Tribe-Name

Reserved for future use.



[Contents] [Prev] [Next] [Index] [Report an Error] [No Frames]