Annotation of embedaddon/strongswan/testing/hosts/alice/etc/freeradius/radiusd.conf, revision 1.1.1.1
1.1 misho 1: # radiusd.conf -- FreeRADIUS server configuration file.
2:
3: prefix = /usr
4: exec_prefix = ${prefix}
5: sysconfdir = /etc
6: localstatedir = /var
7: sbindir = ${exec_prefix}/sbin
8: logdir = ${localstatedir}/log/freeradius
9: raddbdir = ${sysconfdir}/freeradius
10: radacctdir = ${logdir}/radacct
11:
12: # name of the running server. See also the "-n" command-line option.
13: name = freeradius
14:
15: # Location of config and logfiles.
16: confdir = ${raddbdir}
17: run_dir = ${localstatedir}/run
18:
19: # Should likely be ${localstatedir}/lib/radiusd
20: db_dir = ${raddbdir}
21:
22: # libdir: Where to find the rlm_* modules.
23: libdir = ${exec_prefix}/lib
24:
25: # pidfile: Where to place the PID of the RADIUS server.
26: pidfile = ${run_dir}/${name}.pid
27:
28: # max_request_time: The maximum time (in seconds) to handle a request.
29: max_request_time = 30
30:
31: # cleanup_delay: The time to wait (in seconds) before cleaning up
32: cleanup_delay = 5
33:
34: # max_requests: The maximum number of requests which the server keeps
35: max_requests = 1024
36:
37: # listen: Make the server listen on a particular IP address, and send
38: listen {
39: type = auth
40: ipaddr = 10.1.0.10
41: port = 0
42: }
43:
44: # This second "listen" section is for listening on the accounting
45: # port, too.
46: #
47: listen {
48: type = acct
49: ipaddr = 10.1.0.10
50: port = 0
51: }
52:
53: # hostname_lookups: Log the names of clients or just their IP addresses
54: hostname_lookups = no
55:
56: # Core dumps are a bad thing. This should only be set to 'yes'
57: allow_core_dumps = no
58:
59: # Regular expressions
60: regular_expressions = yes
61: extended_expressions = yes
62:
63: # Logging section. The various "log_*" configuration items
64: log {
65: destination = files
66: file = ${logdir}/radius.log
67: syslog_facility = daemon
68: stripped_names = no
69: auth = yes
70: auth_badpass = yes
71: auth_goodpass = yes
72: }
73:
74: # The program to execute to do concurrency checks.
75: checkrad = ${sbindir}/checkrad
76:
77: # Security considerations
78: security {
79: max_attributes = 200
80: reject_delay = 1
81: status_server = yes
82: }
83:
84: # PROXY CONFIGURATION
85: proxy_requests = yes
86: $INCLUDE proxy.conf
87:
88: # CLIENTS CONFIGURATION
89: $INCLUDE clients.conf
90:
91: # THREAD POOL CONFIGURATION
92: thread pool {
93: start_servers = 5
94: max_servers = 32
95: min_spare_servers = 3
96: max_spare_servers = 10
97: max_requests_per_server = 0
98: }
99:
100: # MODULE CONFIGURATION
101: modules {
102: $INCLUDE ${confdir}/modules/
103: $INCLUDE eap.conf
104: }
105:
106: # Instantiation
107: instantiate {
108: exec
109: expr
110: expiration
111: logintime
112: }
113:
114: # Policies
115: $INCLUDE policy.conf
116:
117: # Include all enabled virtual hosts
118: $INCLUDE sites-enabled/
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>