diff options
author | Sergey Matveychuk <sem@FreeBSD.org> | 2012-12-06 19:00:37 +0000 |
---|---|---|
committer | Sergey Matveychuk <sem@FreeBSD.org> | 2012-12-06 19:00:37 +0000 |
commit | bf5a1b6502d930e5ff552b6616e7bafe8d575920 (patch) | |
tree | 8d0ad6b1300d7654093c94ccf2cdb651d9af655e /lib/libradius/radius.conf.5 | |
parent | 38ce9496fedfa55dbe83da3a446802f6756051db (diff) |
- Rewrite radius servers traversal algorithm.
- Add functions for working with IPv6 attributes.
Approved by: ae
Notes
Notes:
svn path=/head/; revision=243956
Diffstat (limited to 'lib/libradius/radius.conf.5')
-rw-r--r-- | lib/libradius/radius.conf.5 | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/lib/libradius/radius.conf.5 b/lib/libradius/radius.conf.5 index 6ac84e07cc3f..6f89c3ae2df3 100644 --- a/lib/libradius/radius.conf.5 +++ b/lib/libradius/radius.conf.5 @@ -44,7 +44,7 @@ Leading white space is ignored, as are empty lines and lines containing only comments. .Pp -A RADIUS server is described by three to five fields on a line: +A RADIUS server is described by three to seven fields on a line: .Pp .Bl -item -offset indent -compact .It @@ -57,6 +57,10 @@ Shared secret Timeout .It Retries +.It +Dead time +.It +Bind address .El .Pp The fields are separated by white space. @@ -139,6 +143,13 @@ If omitted, it defaults to 3 attempts. Note, this is the total number of attempts and not the number of retries. .Pp +The sixth field contains a decimal integer specifying a time interval +in seconds when the server will not requested if it was inaccessible +on the last try. 0 means ask always. +.Pp +The seventh field contains an IP address on multihomed host. All +requests will be binded to this IP. +.Pp Up to 10 RADIUS servers may be specified for each service type. The servers are tried in round-robin fashion, until a valid response is received or the @@ -161,6 +172,9 @@ acct radius1.domain.com OurLittleSecret # timeout and maximum tries: auth auth.domain.com:1645 "I can't see you" 5 4 +# As above but set dead time and bind address +auth auth.domain.com:1645 "I can't see you" 5 4 60 192.168.1.8 + # A server specified by its IP address: auth 192.168.27.81 $X*#..38947ax-+= .Ed |