2 # proxy.conf - proxy radius and realm configuration directives
4 # This file is included by default. To disable it, you will need
5 # to modify the PROXY CONFIGURATION section of "radiusd.conf".
7 #######################################################################
9 # Proxy server configuration
11 # This entry controls the servers behaviour towards ALL other servers
12 # to which it sends proxy requests.
17 # If the NAS re-sends the request to us, we can immediately re-send
18 # the proxy request to the end server. To do so, use 'yes' here.
20 # If this is set to 'no', then we send the retries on our own schedule,
21 # and ignore any duplicate NAS requests.
23 # If you want to have the server send proxy retries ONLY when the NAS
24 # sends it's retries to the server, then set this to 'yes', and
25 # set the other proxy configuration parameters to 0 (zero).
30 # The time (in seconds) to wait for a response from the proxy, before
31 # re-sending the proxied request.
33 # If this time is set too high, then the NAS may re-send the request,
34 # or it may give up entirely, and reject the user.
36 # If it is set too low, then the RADIUS server which receives the proxy
37 # request will get kicked unnecessarily.
42 # The number of retries to send before giving up, and sending a reject
48 #######################################################################
50 # Configuration for the proxy realms.
52 # The information given here is used in conjunction with the 'realms'
53 # file. This format is preferred, as it is more flexible.
57 # authhost = radius.isp2.com:1645
58 # accthost = radius.isp2.com:1646
61 # utmpfile += /var/log/radutmp.isp2
62 # wtmpfile += /var/log/radwtmp.isp2
63 # detailfile += /var/log/radacct/isp2/detail
68 # authhost = radius.company.com:1600
69 # accthost = radius.company.com:1601
74 # This is a local realm. The requests are NOT proxied,
75 # but instead are authenticated by the RADIUS server itself.
85 # This realm is for requests which don't have an explicit realm
86 # prefix or suffix. User names like "bob" will match this one.
90 # authhost = radius.company.com:1600
91 # accthost = radius.company.com:1601
96 # This realm is for ALL OTHER requests.
100 # authhost = radius.company.com:1600
101 # accthost = radius.company.com:1601
102 # secret = testing123
107 # authhost = radius.company.com:1600
108 # accthost = radius.company.com:1601
109 # secret = testing123