pfSense » pfSense Packages

/usr/local/etc/raddb/radiusd.conf

prefix = /usr/local

exec_prefix = ${prefix}

sysconfdir = ${prefix}/etc

localstatedir = /var

sbindir = ${exec_prefix}/sbin

logdir = ${localstatedir}/log

raddbdir = ${sysconfdir}/raddb

radacctdir = ${logdir}/radacct

name = radiusd

confdir = ${raddbdir}

modconfdir = ${confdir}/mods-config

certdir = ${confdir}/certs

cadir = ${confdir}/certs

run_dir = ${localstatedir}/run

db_dir = ${raddbdir}

libdir = /usr/local/lib/freeradius-3.2.8

pidfile = ${run_dir}/${name}.pid

max_request_time = 30

cleanup_delay = 5

max_requests = 2048

hostname_lookups = no

regular_expressions = yes

extended_expressions = yes

log {

	destination = syslog

	colourise = yes

	file = ${logdir}/radius.log

	syslog_facility = daemon

	stripped_names = no

	auth = no

	auth_badpass = no

	auth_goodpass = no

	msg_goodpass = "%{User-Name}"

	msg_badpass = "%{User-Name}"

	msg_denied = "You are already logged in - access denied"

}

checkrad = ${sbindir}/checkrad

security {

	allow_core_dumps = no

	max_attributes = 200

	reject_delay = 1

	status_server = no

	# Disable this check since it may not be accurate due to how FreeBSD patches OpenSSL

	allow_vulnerable_openssl = yes

}

$INCLUDE  clients.conf

thread pool {

	start_servers = 10

	max_servers = 65

	min_spare_servers = 10

	max_spare_servers = 50

	max_queue_size = 65536

	max_requests_per_server = 0

	auto_limit_acct = no

}

modules {

	$INCLUDE ${confdir}/mods-enabled/

}

instantiate {

	exec

	expr

	expiration

	logintime

	### Dis-/Enable sql instatiate

	#sql

	daily

	weekly

	monthly

	forever

}

policy {

	$INCLUDE policy.d/

}

$INCLUDE sites-enabled/