pfSense » pfSense Packages

prefix = /usr/local

exec_prefix = ${prefix}

sysconfdir = ${prefix}/etc

localstatedir = /var

sbindir = ${exec_prefix}/sbin

logdir = ${localstatedir}/log

raddbdir = ${sysconfdir}/raddb

radacctdir = ${logdir}/radacct

name = radiusd

confdir = ${raddbdir}

modconfdir = ${confdir}/mods-config

certdir = ${confdir}/certs

cadir = ${confdir}/certs

run_dir = ${localstatedir}/run

db_dir = ${raddbdir}

libdir = /usr/local/lib/freeradius-3.0.22

pidfile = ${run_dir}/${name}.pid

max_request_time = 30

cleanup_delay = 5

max_requests = 1024

hostname_lookups = no

regular_expressions = yes

extended_expressions = yes

log {

	destination = syslog

	colourise = yes

	file = ${logdir}/radius.log

	syslog_facility = daemon

	stripped_names = no

	auth = yes

	auth_badpass = no

	auth_goodpass = no

	msg_goodpass = ""

	msg_badpass = ""

	msg_denied = "You are already logged in - access denied"

}

checkrad = ${sbindir}/checkrad

security {

	allow_core_dumps = no

	max_attributes = 200

	reject_delay = 1

	status_server = no

	# Disable this check since it may not be accurate due to how FreeBSD patches OpenSSL

	allow_vulnerable_openssl = yes

}

$INCLUDE  clients.conf

thread pool {

	start_servers = 5

	max_servers = 32

	min_spare_servers = 3

	max_spare_servers = 10

	max_queue_size = 65536

	max_requests_per_server = 0

	auto_limit_acct = no

}

modules {

	$INCLUDE ${confdir}/mods-enabled/

}

instantiate {

	exec

	expr

	expiration

	logintime

	### Dis-/Enable sql instatiate

	redundant sql {

		sql1

		### sql2 DISABLED ###

	}

}

policy {

	$INCLUDE policy.d/

}

$INCLUDE sites-enabled/