91 lines
1.4 KiB
Django/Jinja
91 lines
1.4 KiB
Django/Jinja
# -*- text -*-
|
|
##
|
|
## radiusd.conf -- FreeRADIUS server configuration
|
|
##
|
|
## Managed by Ansible — do not edit manually.
|
|
##
|
|
|
|
prefix = /usr
|
|
exec_prefix = /usr
|
|
sysconfdir = /etc
|
|
localstatedir = /var
|
|
sbindir = /usr/sbin
|
|
logdir = ${localstatedir}/log/freeradius
|
|
raddbdir = ${sysconfdir}/freeradius/3.0
|
|
radacctdir = ${logdir}/radacct
|
|
|
|
name = radiusd
|
|
|
|
confdir = ${raddbdir}
|
|
modconfdir = ${confdir}/mods-config
|
|
certdir = ${confdir}/certs
|
|
cadir = ${confdir}/certs
|
|
run_dir = ${localstatedir}/run/${name}
|
|
|
|
db_dir = ${localstatedir}/lib/radiusd
|
|
|
|
libdir = /usr/lib/freeradius
|
|
|
|
pidfile = ${run_dir}/${name}.pid
|
|
|
|
max_request_time = 30
|
|
cleanup_delay = 5
|
|
max_requests = 16384
|
|
|
|
hostname_lookups = no
|
|
|
|
unlang {
|
|
}
|
|
|
|
log {
|
|
destination = files
|
|
colourise = yes
|
|
msg_denied = "You are already logged in - access denied"
|
|
file = ${logdir}/radius.log
|
|
syslog_facility = daemon
|
|
stripped_names = no
|
|
auth = yes
|
|
auth_badpass = no
|
|
auth_goodpass = no
|
|
msg_goodpass = ""
|
|
msg_badpass = ""
|
|
}
|
|
|
|
checkrad = ${sbindir}/checkrad
|
|
|
|
ENV {
|
|
}
|
|
|
|
security {
|
|
max_attributes = 200
|
|
reject_delay = 1
|
|
status_server = yes
|
|
allow_vulnerable_openssl = "CVE-2016-6304"
|
|
}
|
|
|
|
proxy_requests = yes
|
|
|
|
$INCLUDE clients.conf
|
|
$INCLUDE proxy.conf
|
|
|
|
thread pool {
|
|
start_servers = 5
|
|
max_servers = 32
|
|
min_spare_servers = 3
|
|
max_spare_servers = 10
|
|
max_requests_per_server = 0
|
|
auto_limit_acct = no
|
|
}
|
|
|
|
modules {
|
|
$INCLUDE mods-enabled/
|
|
}
|
|
|
|
instantiate {
|
|
}
|
|
|
|
policy {
|
|
$INCLUDE policy.d/
|
|
}
|
|
|
|
$INCLUDE sites-enabled/
|