serv1 20# more radius.cfg
# /usr/local/etc/radius.cfg
DbDir /usr/local/etc/raddb
DictionaryFile %D/dictionary
# Set this to the directory where your logging files
go
LogDir /var/log
#default auth port = 1645
#default acct port = 1646
AuthPort 50
AcctPort 51
#for mulithomed systems:
BindAddress 206.242.16.3
PidFile /etc/radiator.pid
<Log FILE>
Filename %L/radiator
#for testing
Trace 3
</Log>
#<SessionDatabase DBM>
# Filename %D/session
# Identifier SessDB
#</SessionDatabase >
#ascend
<Client 206.242.16.2>
#ascend2
IdenticalClients 206.242.16.6
#ascend3
IdenticalClients 206.242.16.7
#ascend4
IdenticalClients 206.242.16.5
#ascend5
IdenticalClients 206.242.16.11
#ascend6
IdenticalClients 206.242.16.13
#ascend7
IdenticalClients 206.242.16.50
#ascend8
IdenticalClients 206.242.16.51
#ascend9
IdenticalClients 206.242.16.56
#ascend10
IdenticalClients 206.242.16.57
#ascend11
IdenticalClients 206.242.16.58
#ascend12
IdenticalClients 206.242.16.10
#greenlake-max1
IdenticalClients 4.17.220.2
#greenlake-max2
IdenticalClients 4.17.220.3
#markesan-max1
IdenticalClients 206.242.47.18
#marinette-max1
IdenticalClients 206.242.47.147
#berlin-max1
IdenticalClients 4.17.200.2
#wautoma-max1
IdenticalClients 206.242.17.2
Secret ops
NasType Ascend
</Client>
#usrnetsvr
<Client 206.242.16.40>
Secret ops
NasType unknown
# NasType TotalControl
</Client>
#vbe-redback-1.vbe.com
<Client 206.242.16.9>
Secret ops
NasType unknown
</Client>
#for IPASS vnas
<Client 206.242.16.3>
Secret ops
IdenticalClients serv1
IdenticalClients serv1.vbe.com
NasType ignore
</Client>
# For testing: this allows us to honour requests from
radpwtst
# on localhost.
<Client 206.242.16.3>
Secret mysecret
DupInterval 0
</Client>
#Used in USERS file to authenticate off of unix:
# username AuthType = System<- see Identifier
below...
# etc...
<AuthBy UNIX>
#give this Auth type a name:
Identifier System
Filename /etc/shadow
</AuthBy>
#the default authentication scheme, we only need one.
<Realm DEFAULT>
# Log accounting to the detail file in LogDir
AcctLogFileName /disk2/radacct/detail
# This one translates all uppercase chars to
lowercase
# hopefully prevents a few support calls
RewriteUsername tr/[A-Z]/[a-z]/
#remove trailing/leading spaces
RewriteUsername s/^\s+//
RewriteUsername s/\s+$//
#log all password sucess/failiures
#PasswordLogFileName %L/password.log
#Fail authentication only on an explicit
REJECT
AuthByPolicy ContinueWhileAccept
# allow us to block callers by Caller-ID #
#See the file below:
<AuthBy FILE>
#if not rejected, go to next AuthBy
AcceptIfMissing
Filename %D/reject-calling-station-id
</AuthBy>
# next try the USERS file,
<AuthBy FILE>
# By default, all users can only be
logged in once, unless specified in the USERS file
#DefaultSimultaneousUse 1
#Do NOT fallthrough to the DEFAULT
user in USERS file if
#user is in USERS but *fails*
check-items:
NoDefaultIfFound
Filename %D/users
</AuthBy>
</Realm>
/usr/local/etc
serv1 21# cd /var/log
=====
__________________________________________________
Do You Yahoo!?
Thousands of Stores. Millions of Products. All in one place.
Yahoo! Shopping: http://shopping.yahoo.com
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
