1 |
@c This is part of the Radius manual. |
@c This is part of the Radius manual. |
2 |
@c Copyright (C) 1999,2000,2001 Sergey Poznyakoff |
@c Copyright (C) 1999,2000,2001,2002,2003 Sergey Poznyakoff |
3 |
@c See file radius.texi for copying conditions. |
@c See file radius.texi for copying conditions. |
4 |
@comment ******************************************************************* |
@comment ******************************************************************* |
5 |
@node Configuration Files, Request Comparison, Invocation, Top |
@node Configuration Files, Request Comparison, Invocation, Top |
7 |
@cindex Radiusd configuration files |
@cindex Radiusd configuration files |
8 |
@cindex Configuration files (radiusd) |
@cindex Configuration files (radiusd) |
9 |
|
|
10 |
This chapter describes the configuration files used by GNU Radius |
At startup, GNU Radius obtains the information vital for its |
11 |
package. |
functioning from a number of configuration files. These are normally |
12 |
|
found in @value{RADDB} directory, which is defined at configuration |
13 |
|
time, although their location can be specified at runtime. In the |
14 |
|
discussion below we will refer to this directory by @file{raddb}. |
15 |
|
@xref{Naming Conventions}. |
16 |
|
|
17 |
|
Each configuration file is responsible for a certain part of the |
18 |
|
GNU Radius functionality. The following table lists all configuration |
19 |
|
files along with a brief description of their purposes. |
20 |
|
|
21 |
|
@table @file |
22 |
|
@item config |
23 |
|
Determines the runtime defaults for @command{radiusd}, such |
24 |
|
as the IP address and ports to listen on, the sizes of the request |
25 |
|
queues, configuration of the SNMP subsystem, fine-tuning of the |
26 |
|
extension languages, etc. |
27 |
|
|
28 |
|
@item clients |
29 |
|
Lists the shared secret belonging to each @NAS{}. It is |
30 |
|
crucial for the normal request processing that each @NAS{} have an |
31 |
|
entry in this file. The requests from @NAS{}es that are not listed |
32 |
|
in @file{clients} will be ignored, as well as those from the @NAS{}es |
33 |
|
that have a wrong value for the shared secret configured in this file. |
34 |
|
|
35 |
|
@item naslist |
36 |
|
Defines the types for the known @NAS{}es. Its information is |
37 |
|
used mainly when performing a simultaneous login checking (@pxref{Checking Simultaneous Logins}). |
38 |
|
|
39 |
|
@item nastypes |
40 |
|
Declares the known @NAS{} types. The symbolic type names, |
41 |
|
declared in this file can be used in @file{naslist}. |
42 |
|
|
43 |
|
@item dictionary |
44 |
|
Defines the symbolic names for radius attributes and attribute |
45 |
|
values. Only the names declared in this file may be used in the files |
46 |
|
@file{users}, @file{hints} and @file{huntgroups}. |
47 |
|
|
48 |
|
@item huntgroups |
49 |
|
Contains special rules that process the incoming requests |
50 |
|
basing on the @NAS{} IP and port number they come from. These can also |
51 |
|
be used as a kind of @dfn{access control list}. |
52 |
|
|
53 |
|
@item hints |
54 |
|
Defines the matching rules that modify the incoming |
55 |
|
request depending on the user name and its credentials. |
56 |
|
|
57 |
|
@item users |
58 |
|
Contains the individual users' profiles. |
59 |
|
|
60 |
|
@item realms |
61 |
|
Defines the Radius realms and the servers that are |
62 |
|
responsible for them. |
63 |
|
|
64 |
|
@item access.deny |
65 |
|
A list of usernames that should not be allowed access via Radius. |
66 |
|
|
67 |
|
@item sqlserver |
68 |
|
Contains the configuration for the @sc{sql} system. This includes the |
69 |
|
type of @sc{sql} interface used, the IP and port number of the server |
70 |
|
and the definition of the @sc{sql} requests used by @command{radiusd}. |
71 |
|
|
72 |
These files are normally found in @value{RADDB} directory, which |
@item rewrite |
73 |
is defined at configuration time, although their location can be |
Contains the source code of functions in Rewrite extension language. |
74 |
specified at runtime. In the discussion below we will refer to this |
|
75 |
directory by @file{raddb}. @xref{Naming Conventions}. |
@item menus |
76 |
|
A subdirectory containing the authentication menus. |
77 |
|
@end table |
78 |
|
|
79 |
|
The rest of this chapter describes each of these files in detail. |
80 |
|
|
81 |
@menu |
@menu |
82 |
* config file:: Run-time configuration options. |
* config file:: Run-time configuration options. |
97 |
* sqlserver file:: SQL server configuration. |
* sqlserver file:: SQL server configuration. |
98 |
* rewrite file:: Rewrite functions allow to change the input |
* rewrite file:: Rewrite functions allow to change the input |
99 |
packets. |
packets. |
100 |
* menus file:: Menus allow user to select the type of |
* menus directory:: Menus allow user to select the type of |
101 |
service. |
service. |
102 |
* Macro Substitution:: Macros which are expanded by the actual |
* Macro Substitution:: Macros which are expanded by the actual |
103 |
attribute values. |
attribute values. |
2389 |
@xref{Rewrite}. |
@xref{Rewrite}. |
2390 |
|
|
2391 |
@comment *L2**************************************************************** |
@comment *L2**************************************************************** |
2392 |
@node menus file |
@node menus directory |
2393 |
@section Login Menus --- @file{raddb/menus} |
@section Login Menus --- @file{raddb/menus} |
2394 |
@cindex @file{menus}, configuration subdirectory |
@cindex @file{menus}, configuration subdirectory |
2395 |
@cindex @file{raddb/menus}, configuration subdirectory |
@cindex @file{raddb/menus}, configuration subdirectory |