WebSVN – ALCASAR – Diff – /conf/radius/alcasar-radius



	#
	#  It takes care of processing the 'raddb/hints' and the
	#  'raddb/huntgroups' files.
	#
	#  It also adds the %{Client-IP-Address} attribute to the request.
#	preprocess
 
	#
	#  If you want to have a log of authentication requests,
	#  un-comment the following line, and the 'detail auth_log'
	#  section, above.

	#  authentication.
	#
	#  This module should be listed last, so that the other modules
	#  get a chance to set Auth-Type for themselves.
	#
	pap
 
	#
	#  If "status_server = yes", then Status-Server messages are passed
	#  through the following section, and ONLY the following section.
	#  This permits you to do DB queries, for example.  If the modules
	#  listed here return "fail", then NO response is sent.
	#
#	Autz-Type Status-Server {
#
#	}
#	update coa {
#		User-Name = "%{User-Name}"
#		Acct-Session-Id = "%{Acct-Session-Id}"
#		NAS-IP-Address = "%{NAS-IP-Address}"
#	}
}
 
 
#  Authentication.
#

authenticate {
#	#
#	#  PAP authentication, when a back-end database listed
#	#  in the 'authorize' section supplies a password.  The
#	#  password can be clear-text, or encrypted.
	Auth-Type PAP {
		pap
	}
#
#	#
#	#  Most people want CHAP authentication
#	#  A back-end database listed in the 'authorize' section
#	#  MUST supply a CLEAR TEXT password.  Encrypted passwords

 
#
#  Pre-accounting.  Decide which accounting type to use.
#
preacct {
#	preprocess
 
	#
	#  Ensure that we have a semi-unique identifier for every
	#  request, and many NAS boxes are broken.
#	acct_unique

Rev 1283	Rev 1464
Line 67...	Line 67...
67	`#`	67	`#`
68	`# It takes care of processing the 'raddb/hints' and the`	68	`# It takes care of processing the 'raddb/hints' and the`
69	`# 'raddb/huntgroups' files.`	69	`# 'raddb/huntgroups' files.`
70	`#`	70	`#`
71	`# It also adds the %{Client-IP-Address} attribute to the request.`	71	`# It also adds the %{Client-IP-Address} attribute to the request.`
72	`preprocess`	72	`# preprocess`
73		73
74	`#`	74	`#`
75	`# If you want to have a log of authentication requests,`	75	`# If you want to have a log of authentication requests,`
76	`# un-comment the following line, and the 'detail auth_log'`	76	`# un-comment the following line, and the 'detail auth_log'`
77	`# section, above.`	77	`# section, above.`
Line 185...	Line 185...
185	`# authentication.`	185	`# authentication.`
186	`#`	186	`#`
187	`# This module should be listed last, so that the other modules`	187	`# This module should be listed last, so that the other modules`
188	`# get a chance to set Auth-Type for themselves.`	188	`# get a chance to set Auth-Type for themselves.`
189	`#`	189	`#`
190	`# pap`	190	`pap`
191		191
192	`#`	192	`#`
193	`# If "status_server = yes", then Status-Server messages are passed`	193	`# If "status_server = yes", then Status-Server messages are passed`
194	`# through the following section, and ONLY the following section.`	194	`# through the following section, and ONLY the following section.`
195	`# This permits you to do DB queries, for example. If the modules`	195	`# This permits you to do DB queries, for example. If the modules`
196	`# listed here return "fail", then NO response is sent.`	196	`# listed here return "fail", then NO response is sent.`
197	`#`	197	`#`
198	`# Autz-Type Status-Server {`	198	`# Autz-Type Status-Server {`
199	`#`	199	`#`
200	`# }`	200	`# }`
201	`update coa {`	201	`# update coa {`
202	`User-Name = "%{User-Name}"`	202	`# User-Name = "%{User-Name}"`
203	`Acct-Session-Id = "%{Acct-Session-Id}"`	203	`# Acct-Session-Id = "%{Acct-Session-Id}"`
204	`NAS-IP-Address = "%{NAS-IP-Address}"`	204	`# NAS-IP-Address = "%{NAS-IP-Address}"`
205	`}`	205	`# }`
206	`}`	206	`}`
207		207
208		208
209	`# Authentication.`	209	`# Authentication.`
210	`#`	210	`#`
Line 235...	Line 235...
235	`authenticate {`	235	`authenticate {`
236	`# #`	236	`# #`
237	`# # PAP authentication, when a back-end database listed`	237	`# # PAP authentication, when a back-end database listed`
238	`# # in the 'authorize' section supplies a password. The`	238	`# # in the 'authorize' section supplies a password. The`
239	`# # password can be clear-text, or encrypted.`	239	`# # password can be clear-text, or encrypted.`
240	`# Auth-Type PAP {`	240	`Auth-Type PAP {`
241	`# pap`	241	`pap`
242	`# }`	242	`}`
243	`#`	243	`#`
244	`# #`	244	`# #`
245	`# # Most people want CHAP authentication`	245	`# # Most people want CHAP authentication`
246	`# # A back-end database listed in the 'authorize' section`	246	`# # A back-end database listed in the 'authorize' section`
247	`# # MUST supply a CLEAR TEXT password. Encrypted passwords`	247	`# # MUST supply a CLEAR TEXT password. Encrypted passwords`
Line 291...	Line 291...
291		291
292	`#`	292	`#`
293	`# Pre-accounting. Decide which accounting type to use.`	293	`# Pre-accounting. Decide which accounting type to use.`
294	`#`	294	`#`
295	`preacct {`	295	`preacct {`
296	`preprocess`	296	`# preprocess`
297		297
298	`#`	298	`#`
299	`# Ensure that we have a semi-unique identifier for every`	299	`# Ensure that we have a semi-unique identifier for every`
300	`# request, and many NAS boxes are broken.`	300	`# request, and many NAS boxes are broken.`
301	`# acct_unique`	301	`# acct_unique`

Subversion Repositories ALCASAR

(root)/conf/radius/alcasar-radius @ 2372 – Rev 1283 → 1464