X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=radsecproxy.conf-example;h=d0daf71b10175c32e0eccd215f2dbb0e92849059;hb=9c5cd8f617e64e01520443f581a6824f863d4392;hp=86de15d0087079d20410168f593b5b18c85d8fa5;hpb=7466a1c5e655f5e99445e24598423f0711ddc1b5;p=libradsec.git diff --git a/radsecproxy.conf-example b/radsecproxy.conf-example index 86de15d..d0daf71 100644 --- a/radsecproxy.conf-example +++ b/radsecproxy.conf-example @@ -39,12 +39,13 @@ # fticksVISCOUNTRY option. # You can optionally specify FTicksMAC in order to determine if and -# how Calling-Station-Id is logged. +# how Calling-Station-Id (users Ethernet MAC address) is being logged. # Static -- Use a static string as a placeholder for -# Calling-Station-Id. This is the default. +# Calling-Station-Id. # Original -- Log Calling-Station-Id as-is. # VendorHashed -- Keep first three segments as-is, hash the rest. -# VendorKeyHashed -- Like VendorHashed but salt with F-Ticks-Key. +# VendorKeyHashed -- Like VendorHashed but salt with F-Ticks-Key. This +# is the default. # FullyHashed -- Hash the entire string. # FullyKeyHashed -- Like FullyHashed but salt with F-Ticks-Key. @@ -54,7 +55,15 @@ # Default F-Ticks configuration: #FTicksReporting None -#FTicksMAC FullyKeyHashed +#FTicksMAC Static + +# You can optionally specify FTicksSyslogFacility to use a dedicated +# syslog facility for F-Ticks messages. This allows easy filtering +# of F-Ticks messages. +# For F-Ticks messages always LOG_DEBUG level is used. +# Please note that FTicksSyslogFacility cannot specify a file (file:///...) +#FTicksSyslogFacility log_local1 +#FTicksSyslogFacility x-syslog:///log_local1 # There is an option for doing some simple loop prevention. Note that # the LoopPrevention directive can be used in server blocks too, @@ -125,7 +134,7 @@ tls default { # modifyAttribute 1:/^(.*)@local$/\1@example.com/ # } -client 2001:db8::1 { +client [2001:db8::1] { type tls secret verysecret # we could specify tls here, e.g. @@ -171,7 +180,7 @@ realm eduroam.cc { # accountingServer 127.0.0.1 } -server 2001:db8::1 { +server [2001:db8::1] { type TLS port 2283 # secret is optional for TLS