| Subject: | Bug in Integer VSA and Tagged attributes |
| Date: | Wed, 28 Nov 2018 15:07:39 +0500 |
| To: | bug-Authen-Radius [...] rt.cpan.org |
| From: | Alexander Bechikov <asb [...] metro-set.ru> |
Hello,
rfc6158
https://tools.ietf.org/html/rfc6158#section-3.2.2
"Other limitations of the tagging mechanism are that when integer values
are tagged, the value portion is reduced to three bytes, meaning only
24-bit numbers can be represented. "
Tcpdump radiusclient (valid):
CoA-Request (43), id: 0xbf, Authenticator:
1457520f687d77c96cca8994d2a489d2
User-Name Attribute (1), length: 16, Value: f8f0.8251.12db
0x0000: 6638 6630 2e38 3235 312e 3132 6462
Vendor-Specific Attribute (26), length: 38, Value: Vendor:
Unisphere Networks (4874)
Vendor Attribute: 65, Length: 30, Value:
.RATE_LIMIT(45000000,45000000)
0x0000: 0000 130a 4120 0152 4154 455f 4c49 4d49
0x0010: 5428 3435 3030 3030 3030 2c34 3530 3030
0x0020: 3030 3029
Vendor-Specific Attribute (26), length: 12, Value: Vendor:
Unisphere Networks (4874)
Vendor Attribute: 69, Length: 4, Value: ....
0x0000: 0000 130a 4506 0100 0002
Tcpdump Authen::Radius (+1 byte in attribute value 69):
CoA-Request (43), id: 0x73, Authenticator:
82c7d28a9e8688dd9c32d39561ebf5b1
User-Name Attribute (1), length: 16, Value: f8f0.8251.12db
0x0000: 6638 6630 2e38 3235 312e 3132 6462
Vendor-Specific Attribute (26), length: 38, Value: Vendor:
Unisphere Networks (4874)
Vendor Attribute: 65, Length: 30, Value:
.RATE_LIMIT(45000000,45000000)
0x0000: 0000 130a 4120 0152 4154 455f 4c49 4d49
0x0010: 5428 3435 3030 3030 3030 2c34 3530 3030
0x0020: 3030 3029
Vendor-Specific Attribute (26), length: 13, Value: Vendor:
Unisphere Networks (4874)
Vendor Attribute: 69, Length: 5, Value: .....
0x0000: 0000 130a 4507 0100 0000 02