aboutsummaryrefslogtreecommitdiffstats
path: root/roles/freeradius/templates/etc/raddb/radiusd.conf.j2
blob: ad9b58fc12dcdbdc383ff90bdee167ff686b9915 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
prefix = /usr
exec_prefix = /usr
sysconfdir = /etc
localstatedir = /var
sbindir = /usr/sbin
logdir = ${localstatedir}/log/radius
raddbdir = ${sysconfdir}/raddb
radacctdir = ${logdir}/radacct

name = radiusd

confdir = ${raddbdir}
modconfdir = ${confdir}/mods-config
certdir = ${confdir}/certs
cadir   = ${confdir}/certs
run_dir = ${localstatedir}/run/${name}

db_dir = ${localstatedir}/lib/radiusd
libdir = /usr/lib64/freeradius
pidfile = ${run_dir}/${name}.pid
correct_escapes = true
max_request_time = 30
cleanup_delay = 5
max_requests = 16384
hostname_lookups = no
log {
  destination = stdout
  colourise = no
  stripped_names = no
  auth = yes
  auth_badpass = no
  auth_goodpass = no
  msg_denied = "You are already logged in - access denied"
}

checkrad = ${sbindir}/checkrad

ENV { }

security {
  user = radiusd
  group = radiusd
  allow_core_dumps = no
  max_attributes = 200
  reject_delay = 1
  status_server = yes
}

proxy_requests  = yes
$INCLUDE proxy.conf

$INCLUDE clients.conf

thread pool {
  start_servers = 5
  max_servers = 32
  min_spare_servers = 3
  max_spare_servers = 10
  max_requests_per_server = 0
  auto_limit_acct = no
}

modules {
  $INCLUDE mods-enabled/
}

instantiate { }

policy {
  $INCLUDE policy.d/
}

$INCLUDE sites-enabled/