| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118 | 
							- # radiusd.conf	-- FreeRADIUS server configuration file.
 
- prefix = /usr
 
- exec_prefix = ${prefix}
 
- sysconfdir = /etc
 
- localstatedir = /var
 
- sbindir = ${exec_prefix}/sbin
 
- logdir = ${localstatedir}/log/freeradius
 
- raddbdir = ${sysconfdir}/freeradius
 
- radacctdir = ${logdir}/radacct
 
- #  name of the running server.  See also the "-n" command-line option.
 
- name = freeradius
 
- #  Location of config and logfiles.
 
- confdir = ${raddbdir}
 
- run_dir = ${localstatedir}/run
 
- # Should likely be ${localstatedir}/lib/radiusd
 
- db_dir = ${raddbdir}
 
- # libdir: Where to find the rlm_* modules.
 
- libdir = ${exec_prefix}/lib
 
- #  pidfile: Where to place the PID of the RADIUS server.
 
- pidfile = ${run_dir}/${name}.pid
 
- #  max_request_time: The maximum time (in seconds) to handle a request.
 
- max_request_time = 30
 
- #  cleanup_delay: The time to wait (in seconds) before cleaning up
 
- cleanup_delay = 5
 
- #  max_requests: The maximum number of requests which the server keeps
 
- max_requests = 1024
 
- #  listen: Make the server listen on a particular IP address, and send
 
- listen {
 
-   type = auth
 
-   ipaddr = 10.1.0.10
 
-   port = 0
 
- }
 
- #  This second "listen" section is for listening on the accounting
 
- #  port, too.
 
- #
 
- listen {
 
-   type  = acct
 
-   ipaddr = 10.1.0.10
 
-   port = 0
 
- }
 
- #  hostname_lookups: Log the names of clients or just their IP addresses
 
- hostname_lookups = no
 
- #  Core dumps are a bad thing.  This should only be set to 'yes'
 
- allow_core_dumps = no
 
- #  Regular expressions
 
- regular_expressions = yes
 
- extended_expressions = yes
 
- #  Logging section.  The various "log_*" configuration items
 
- log {
 
-   destination = files
 
-   file = ${logdir}/radius.log
 
-   syslog_facility = daemon
 
-   stripped_names = no
 
-   auth = yes
 
-   auth_badpass = yes
 
-   auth_goodpass = yes
 
- }
 
- #  The program to execute to do concurrency checks.
 
- checkrad = ${sbindir}/checkrad
 
- #  Security considerations
 
- security {
 
-   max_attributes = 200
 
-   reject_delay = 1
 
-   status_server = yes
 
- }
 
- # PROXY CONFIGURATION
 
- proxy_requests = yes
 
- $INCLUDE proxy.conf
 
- # CLIENTS CONFIGURATION
 
- $INCLUDE clients.conf
 
- # THREAD POOL CONFIGURATION
 
- thread pool {
 
-   start_servers = 5
 
-   max_servers = 32
 
-   min_spare_servers = 3
 
-   max_spare_servers = 10
 
-   max_requests_per_server = 0
 
- }
 
- # MODULE CONFIGURATION
 
- modules {
 
-   $INCLUDE ${confdir}/modules/
 
-   $INCLUDE eap.conf
 
- }
 
- # Instantiation
 
- instantiate {
 
-   exec
 
-   expr
 
-   expiration
 
-   logintime
 
- }
 
- # Policies
 
- $INCLUDE policy.conf
 
- # Include all enabled virtual hosts
 
- $INCLUDE sites-enabled/
 
 
  |