Annotation of embedaddon/strongswan/testing/hosts/alice/etc/freeradius/radiusd.conf, revision 1.1.1.1

1.1       misho       1: # radiusd.conf -- FreeRADIUS server configuration file.
                      2: 
                      3: prefix = /usr
                      4: exec_prefix = ${prefix}
                      5: sysconfdir = /etc
                      6: localstatedir = /var
                      7: sbindir = ${exec_prefix}/sbin
                      8: logdir = ${localstatedir}/log/freeradius
                      9: raddbdir = ${sysconfdir}/freeradius
                     10: radacctdir = ${logdir}/radacct
                     11: 
                     12: #  name of the running server.  See also the "-n" command-line option.
                     13: name = freeradius
                     14: 
                     15: #  Location of config and logfiles.
                     16: confdir = ${raddbdir}
                     17: run_dir = ${localstatedir}/run
                     18: 
                     19: # Should likely be ${localstatedir}/lib/radiusd
                     20: db_dir = ${raddbdir}
                     21: 
                     22: # libdir: Where to find the rlm_* modules.
                     23: libdir = ${exec_prefix}/lib
                     24: 
                     25: #  pidfile: Where to place the PID of the RADIUS server.
                     26: pidfile = ${run_dir}/${name}.pid
                     27: 
                     28: #  max_request_time: The maximum time (in seconds) to handle a request.
                     29: max_request_time = 30
                     30: 
                     31: #  cleanup_delay: The time to wait (in seconds) before cleaning up
                     32: cleanup_delay = 5
                     33: 
                     34: #  max_requests: The maximum number of requests which the server keeps
                     35: max_requests = 1024
                     36: 
                     37: #  listen: Make the server listen on a particular IP address, and send
                     38: listen {
                     39:   type = auth
                     40:   ipaddr = 10.1.0.10
                     41:   port = 0
                     42: }
                     43: 
                     44: #  This second "listen" section is for listening on the accounting
                     45: #  port, too.
                     46: #
                     47: listen {
                     48:   type  = acct
                     49:   ipaddr = 10.1.0.10
                     50:   port = 0
                     51: }
                     52: 
                     53: #  hostname_lookups: Log the names of clients or just their IP addresses
                     54: hostname_lookups = no
                     55: 
                     56: #  Core dumps are a bad thing.  This should only be set to 'yes'
                     57: allow_core_dumps = no
                     58: 
                     59: #  Regular expressions
                     60: regular_expressions = yes
                     61: extended_expressions = yes
                     62: 
                     63: #  Logging section.  The various "log_*" configuration items
                     64: log {
                     65:   destination = files
                     66:   file = ${logdir}/radius.log
                     67:   syslog_facility = daemon
                     68:   stripped_names = no
                     69:   auth = yes
                     70:   auth_badpass = yes
                     71:   auth_goodpass = yes
                     72: }
                     73: 
                     74: #  The program to execute to do concurrency checks.
                     75: checkrad = ${sbindir}/checkrad
                     76: 
                     77: #  Security considerations
                     78: security {
                     79:   max_attributes = 200
                     80:   reject_delay = 1
                     81:   status_server = yes
                     82: }
                     83: 
                     84: # PROXY CONFIGURATION
                     85: proxy_requests = yes
                     86: $INCLUDE proxy.conf
                     87: 
                     88: # CLIENTS CONFIGURATION
                     89: $INCLUDE clients.conf
                     90: 
                     91: # THREAD POOL CONFIGURATION
                     92: thread pool {
                     93:   start_servers = 5
                     94:   max_servers = 32
                     95:   min_spare_servers = 3
                     96:   max_spare_servers = 10
                     97:   max_requests_per_server = 0
                     98: }
                     99: 
                    100: # MODULE CONFIGURATION
                    101: modules {
                    102:   $INCLUDE ${confdir}/modules/
                    103:   $INCLUDE eap.conf
                    104: }
                    105: 
                    106: # Instantiation
                    107: instantiate {
                    108:   exec
                    109:   expr
                    110:   expiration
                    111:   logintime
                    112: }
                    113: 
                    114: # Policies
                    115: $INCLUDE policy.conf
                    116: 
                    117: # Include all enabled virtual hosts
                    118: $INCLUDE sites-enabled/

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>