Part of Slepp's ProjectsPastebinTURLImagebinFilebin
Feedback -- English French German Japanese
Create Upload Newest Tools Donate
Sign In | Create Account

Advertising

users
Friday, April 13th, 2007 at 4:59:22am UTC 

  1. #
  2. # clients.conf - client configuration directives
  3. #
  4. #######################################################################
  5.  
  6. #######################################################################
  7. #
  8. #  Definition of a RADIUS client (usually a NAS).
  9. #
  10. #  The information given here over rides anything given in the
  11. #  'clients' file, or in the 'naslist' file.  The configuration here
  12. #  contains all of the information from those two files, and allows
  13. #  for more configuration items.
  14. #
  15. #  The "shortname" is be used for logging.  The "nastype", "login" and
  16. #  "password" fields are mainly used for checkrad and are optional.
  17. #
  18.  
  19. #
  20. #  Defines a RADIUS client.  The format is 'client [hostname|ip-address]'
  21. #
  22. #  '127.0.0.1' is another name for 'localhost'.  It is enabled by default,
  23. #  to allow testing of the server after an initial installation.  If you
  24. #  are not going to be permitting RADIUS queries from localhost, we suggest
  25. #  that you delete, or comment out, this entry.
  26. #
  27. client 127.0.0.1 {
  28.         #
  29.         #  The shared secret use to "encrypt" and "sign" packets between
  30.         #  the NAS and FreeRADIUS.  You MUST change this secret from the
  31.         #  default, otherwise it's not a secret any more!
  32.         #
  33.         #  The secret can be any string, up to 31 characters in length.
  34.         #
  35.         secret    = testing123
  36.  
  37.         #
  38.         #  The short name is used as an alias for the fully qualified
  39.         #  domain name, or the IP address.
  40.         #
  41.         shortname       = localhost
  42.  
  43.         #
  44.         # the following three fields are optional, but may be used by
  45.         # checkrad.pl for simultaneous use checks
  46.         #
  47.  
  48.         #
  49.         # The nastype tells 'checkrad.pl' which NAS-specific method to
  50.         #  use to query the NAS for simultaneous use.
  51.         #
  52.         #  Permitted NAS types are:
  53.         #
  54.         #       cisco
  55.         #       computone
  56.         #       livingston
  57.         #       max40xx
  58.         #       multitech
  59.         #       netserver
  60.         #       pathras
  61.         #       patton
  62.         #       portslave
  63.         #       tc
  64.         #       usrhiper
  65.         #       other    # for all other types
  66.  
  67.         #
  68.         nastype     = other     # localhost isn't usually a NAS...
  69.  
  70.         #
  71.         #  The following two configurations are for future use.
  72.         #  The 'naspasswd' file is currently used to store the NAS
  73.         #  login name and password, which is used by checkrad.pl
  74.         #  when querying the NAS for simultaneous use.
  75.         #
  76. #       login       = !root
  77. #       password    = someadminpas
  78. }
  79.  
  80. #client some.host.org {
  81. #       secret  = testing123
  82. #       shortname      = localhost
  83. #}
  84.  
  85. # !! cisco
  86.  
  87. client 10.1.1.110 {
  88.         secret  = cisco
  89.         shortname = 10.1.1.110
  90.         nastype = cisco
  91. }
  92.  
  93. #
  94. #  You can now specify one secret for a network of clients.
  95. #  When a client request comes in, the BEST match is chosen.
  96. #  i.e. The entry from the smallest possible network.
  97. #
  98.  
  99. # !! network 1 - lab
  100.  
  101. client 10.1.1.0/24 {
  102.         secret    = testing
  103.         shortname       = network1
  104. }
  105.  
  106. # !! network 2 - workshop
  107.  
  108. client 192.168.0.0/24 {
  109.         secret          = testing
  110.         shortname       = network2
  111. }
  112.  
  113. #client 10.10.10.10 {
  114. #       # secret and password are mapped through the "secrets" file.
  115. #       secret      = testing123
  116. #       shortname   = liv1
  117. #       # the following three fields are optional, but may be used by
  118. #       # checkrad.pl for simultaneous usage checks
  119. #       nastype     = livingston
  120. #       login       = !root
  121. #       password    = someadminpas
  122. #}

advertising

Update the Post

Either update this post and resubmit it with changes, or make a new post.

You may also comment on this post.

update paste below
details of the post (optional)

Note: Only the paste content is required, though the following information can be useful to others.

Save name / title?

(space separated, optional)



Please note that information posted here will expire by default in one month. If you do not want it to expire, please set the expiry time above. If it is set to expire, web search engines will not be allowed to index it prior to it expiring. Items that are not marked to expire will be indexable by search engines. Be careful with your passwords. All illegal activities will be reported and any information will be handed over to the authorities, so be good.

comments powered by Disqus
worth-right worth-right