radiusd.conf 2.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118
  1. # radiusd.conf -- FreeRADIUS server configuration file.
  2. prefix = /usr
  3. exec_prefix = ${prefix}
  4. sysconfdir = /etc
  5. localstatedir = /var
  6. sbindir = ${exec_prefix}/sbin
  7. logdir = ${localstatedir}/log/freeradius
  8. raddbdir = ${sysconfdir}/freeradius
  9. radacctdir = ${logdir}/radacct
  10. # name of the running server. See also the "-n" command-line option.
  11. name = freeradius
  12. # Location of config and logfiles.
  13. confdir = ${raddbdir}
  14. run_dir = ${localstatedir}/run
  15. # Should likely be ${localstatedir}/lib/radiusd
  16. db_dir = ${raddbdir}
  17. # libdir: Where to find the rlm_* modules.
  18. libdir = ${exec_prefix}/lib
  19. # pidfile: Where to place the PID of the RADIUS server.
  20. pidfile = ${run_dir}/${name}.pid
  21. # max_request_time: The maximum time (in seconds) to handle a request.
  22. max_request_time = 30
  23. # cleanup_delay: The time to wait (in seconds) before cleaning up
  24. cleanup_delay = 5
  25. # max_requests: The maximum number of requests which the server keeps
  26. max_requests = 1024
  27. # listen: Make the server listen on a particular IP address, and send
  28. listen {
  29. type = auth
  30. ipaddr = 10.1.0.10
  31. port = 0
  32. }
  33. # This second "listen" section is for listening on the accounting
  34. # port, too.
  35. #
  36. listen {
  37. type = acct
  38. ipaddr = 10.1.0.10
  39. port = 0
  40. }
  41. # hostname_lookups: Log the names of clients or just their IP addresses
  42. hostname_lookups = no
  43. # Core dumps are a bad thing. This should only be set to 'yes'
  44. allow_core_dumps = no
  45. # Regular expressions
  46. regular_expressions = yes
  47. extended_expressions = yes
  48. # Logging section. The various "log_*" configuration items
  49. log {
  50. destination = files
  51. file = ${logdir}/radius.log
  52. syslog_facility = daemon
  53. stripped_names = no
  54. auth = yes
  55. auth_badpass = yes
  56. auth_goodpass = yes
  57. }
  58. # The program to execute to do concurrency checks.
  59. checkrad = ${sbindir}/checkrad
  60. # Security considerations
  61. security {
  62. max_attributes = 200
  63. reject_delay = 1
  64. status_server = yes
  65. }
  66. # PROXY CONFIGURATION
  67. proxy_requests = yes
  68. $INCLUDE proxy.conf
  69. # CLIENTS CONFIGURATION
  70. $INCLUDE clients.conf
  71. # THREAD POOL CONFIGURATION
  72. thread pool {
  73. start_servers = 5
  74. max_servers = 32
  75. min_spare_servers = 3
  76. max_spare_servers = 10
  77. max_requests_per_server = 0
  78. }
  79. # MODULE CONFIGURATION
  80. modules {
  81. $INCLUDE ${confdir}/modules/
  82. $INCLUDE eap.conf
  83. }
  84. # Instantiation
  85. instantiate {
  86. exec
  87. expr
  88. expiration
  89. logintime
  90. }
  91. # Policies
  92. $INCLUDE policy.conf
  93. # Include all enabled virtual hosts
  94. $INCLUDE sites-enabled/