summaryrefslogtreecommitdiffstats
path: root/raddb/radrelay.conf.in
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--raddb/radrelay.conf.in170
1 files changed, 170 insertions, 0 deletions
diff --git a/raddb/radrelay.conf.in b/raddb/radrelay.conf.in
new file mode 100644
index 0000000..b707b34
--- /dev/null
+++ b/raddb/radrelay.conf.in
@@ -0,0 +1,170 @@
+# -*- text -*-
+##
+## radrelay.conf -- FreeRADIUS server configuration file.
+##
+## Use with: radiusd -n radrelay
+##
+## http://www.freeradius.org/
+## $Id$
+##
+
+######################################################################
+#
+# This file is a sample configuration that replaces the old
+# "radrelay" program. It is a *minimal* configuration that
+# does little more than read the detail file, and proxy the
+# packets to a home server. If you need it to do more than
+# just replace radrelay, you will need to add additional
+# configuration.
+#
+# See raddb/sites-available/copy-acct-to-home-server for a
+# more complete example. That example is intended to be run
+# as part of a larger radius configuration, where the server
+# also listens on ports 1812, etc. The example given here
+# is a minimal example that has ONLY radrelay functionality.
+#
+# See radiusd.conf for a complete description of the configuration
+# parameters used here.
+#
+######################################################################
+
+prefix = @prefix@
+exec_prefix = @exec_prefix@
+sysconfdir = @sysconfdir@
+localstatedir = @localstatedir@
+sbindir = @sbindir@
+logdir = @logdir@
+raddbdir = @raddbdir@
+radacctdir = @radacctdir@
+
+#
+# name of the running server. See also the "-n" command-line option.
+#
+name = radrelay
+
+#
+# Generic configuration
+#
+confdir = ${raddbdir}
+run_dir = ${localstatedir}/run/${name}
+libdir = @libdir@
+pidfile = ${run_dir}/${name}.pid
+
+#
+# Request handling configuration
+#
+max_request_time = 30
+cleanup_delay = 5
+max_requests = 65536
+
+#
+# Logging section.
+#
+log {
+ destination = files
+ file = ${logdir}/${name}.log
+}
+
+#
+# Security configuration
+#
+security {
+ max_attributes = 200
+
+ # reject_delay && status_server don't apply when we are
+ # only reading accounting packets from the detail file
+
+@openssl_version_check_config@
+}
+
+#
+# If you need more modules, add them here.
+#
+modules {
+ $INCLUDE ${confdir}/mods-enabled/always
+}
+
+#
+# If you need to instantiate modules, add them here.
+#
+instantiate {
+}
+
+#
+# Configuration of home servers, etc.
+#
+proxy_requests = yes
+
+#
+# See proxy.conf for additional home server configuration.
+#
+home_server home1 {
+ type = acct
+
+ #
+ # This directive replaces the "-r" command-line option
+ # in radrelay
+ #
+ ipaddr = 192.0.2.20
+
+ port = 1812
+
+ #
+ # This directive replaces the "-i" command-line option
+ # in radrelay
+ #
+# src_ipaddr = 192.0.2.1
+
+ #
+ # This directive replaces the "-s", "-S", and "-n" command-line
+ # options in radrelay
+ #
+ secret = testing123
+}
+
+#
+# List one or more home servers here for fail-over, load-balancing, etc.
+#
+home_server_pool radrelay {
+ type = fail-over
+ home_server = home1
+}
+
+#
+# A dummy realm.
+#
+realm radrelay {
+ acct_pool = radrelay
+}
+
+server radrelay {
+ #
+ # Read the detail file.
+ #
+ listen {
+ type = detail
+
+ #
+ # The filename here should be the same as the one used by the
+ # main radiusd program. It writes the file using the "detail"
+ # module (see raddb/modules/detail).
+ #
+ filename = ${radacctdir}/detail
+ load_factor = 90
+ }
+
+ #
+ # See also raddb/sites-available/copy-acct-to-home-server
+ # for additional description.
+ #
+ preacct {
+ #
+ # Proxy the packet using the given realm.
+ # Note that we do not use the realm for anything else such
+ # as prefix/suffix stripping or comparisons.
+ #
+ update control {
+ Proxy-To-Realm := "radrelay"
+ }
+ }
+}