X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=radsecproxy.conf-example;h=c97a7726abe1a635132fb391fcf0dce6a307dc26;hb=refs%2Fheads%2Fproxy-state;hp=909356ccdc8329d648f5e7344eb0dbc2b499875a;hpb=dfadeec9cd47ce9f71f4bba7bc80efda4f8fd94a;p=libradsec.git diff --git a/radsecproxy.conf-example b/radsecproxy.conf-example index 909356c..c97a772 100644 --- a/radsecproxy.conf-example +++ b/radsecproxy.conf-example @@ -39,12 +39,13 @@ # fticksVISCOUNTRY option. # You can optionally specify FTicksMAC in order to determine if and -# how Calling-Station-Id is logged. +# how Calling-Station-Id (users Ethernet MAC address) is being logged. # Static -- Use a static string as a placeholder for -# Calling-Station-Id. This is the default. +# Calling-Station-Id. # Original -- Log Calling-Station-Id as-is. # VendorHashed -- Keep first three segments as-is, hash the rest. -# VendorKeyHashed -- Like VendorHashed but salt with F-Ticks-Key. +# VendorKeyHashed -- Like VendorHashed but salt with F-Ticks-Key. This +# is the default. # FullyHashed -- Hash the entire string. # FullyKeyHashed -- Like FullyHashed but salt with F-Ticks-Key. @@ -56,6 +57,14 @@ #FTicksReporting None #FTicksMAC Static +# You can optionally specify FTicksSyslogFacility to use a dedicated +# syslog facility for F-Ticks messages. This allows for easier filtering +# of F-Ticks messages. +# F-Ticks messages are always logged using the log level LOG_DEBUG. +# Note that specifying a file (using the file:/// prefix) is not supported. +#FTicksSyslogFacility log_local1 +#FTicksSyslogFacility x-syslog:///log_local1 + # There is an option for doing some simple loop prevention. Note that # the LoopPrevention directive can be used in server blocks too, # overriding what's set here in the basic settings. @@ -125,7 +134,7 @@ tls default { # modifyAttribute 1:/^(.*)@local$/\1@example.com/ # } -client 2001:db8::1 { +client [2001:db8::1] { type tls secret verysecret # we could specify tls here, e.g. @@ -171,7 +180,7 @@ realm eduroam.cc { # accountingServer 127.0.0.1 } -server 2001:db8::1 { +server [2001:db8::1] { type TLS port 2283 # secret is optional for TLS