Subversion Repositories configs

Rev

Details | Last modification | View Log | RSS feed

Rev Author Line No. Line
4 - 1
#
2
#	Please read the documentation file ../doc/processing_users_file,
3
#	or 'man 5 users' (after installing the server) for more information.
4
#
5
#	This file contains authentication security and configuration
6
#	information for each user.  Accounting requests are NOT processed
7
#	through this file.  Instead, see 'acct_users', in this directory.
8
#
9
#	The first field is the user's name and can be up to
10
#	253 characters in length.  This is followed (on the same line) with
11
#	the list of authentication requirements for that user.  This can
12
#	include password, comm server name, comm server port number, protocol
13
#	type (perhaps set by the "hints" file), and huntgroup name (set by
14
#	the "huntgroups" file).
15
#
16
#	If you are not sure why a particular reply is being sent by the
17
#	server, then run the server in debugging mode (radiusd -X), and
18
#	you will see which entries in this file are matched.
19
#
20
#	When an authentication request is received from the comm server,
21
#	these values are tested. Only the first match is used unless the
22
#	"Fall-Through" variable is set to "Yes".
23
#
24
#	A special user named "DEFAULT" matches on all usernames.
25
#	You can have several DEFAULT entries. All entries are processed
26
#	in the order they appear in this file. The first entry that
27
#	matches the login-request will stop processing unless you use
28
#	the Fall-Through variable.
29
#
30
#	If you use the database support to turn this file into a .db or .dbm
31
#	file, the DEFAULT entries _have_ to be at the end of this file and
32
#	you can't have multiple entries for one username.
33
#
34
#	Indented (with the tab character) lines following the first
35
#	line indicate the configuration values to be passed back to
36
#	the comm server to allow the initiation of a user session.
37
#	This can include things like the PPP configuration values
38
#	or the host to log the user onto.
39
#
40
#	You can include another `users' file with `$INCLUDE users.other'
41
#
42
 
43
#
44
#	For a list of RADIUS attributes, and links to their definitions,
45
#	see:
46
#
47
#	http://www.freeradius.org/rfc/attributes.html
48
#
49
 
50
#
51
# Deny access for a specific user.  Note that this entry MUST
52
# be before any other 'Auth-Type' attribute which results in the user
53
# being authenticated.
54
#
55
# Note that there is NO 'Fall-Through' attribute, so the user will not
56
# be given any additional resources.
57
#
58
#lameuser	Auth-Type := Reject
59
#		Reply-Message = "Your account has been disabled."
60
 
61
#
62
# Deny access for a group of users.
63
#
64
# Note that there is NO 'Fall-Through' attribute, so the user will not
65
# be given any additional resources.
66
#
67
#DEFAULT	Group == "disabled", Auth-Type := Reject
68
#		Reply-Message = "Your account has been disabled."
69
#
70
 
71
#
72
# This is a complete entry for "steve". Note that there is no Fall-Through
73
# entry so that no DEFAULT entry will be used, and the user will NOT
74
# get any attributes in addition to the ones listed here.
75
#
76
#steve	Cleartext-Password := "testing"
77
#	Service-Type = Framed-User,
78
#	Framed-Protocol = PPP,
79
#	Framed-IP-Address = 172.16.3.33,
80
#	Framed-IP-Netmask = 255.255.255.0,
81
#	Framed-Routing = Broadcast-Listen,
82
#	Framed-Filter-Id = "std.ppp",
83
#	Framed-MTU = 1500,
84
#	Framed-Compression = Van-Jacobsen-TCP-IP
85
 
86
#
87
# This is an entry for a user with a space in their name.
88
# Note the double quotes surrounding the name.
89
#
90
#"John Doe"	Cleartext-Password := "hello"
91
#		Reply-Message = "Hello, %{User-Name}"
92
 
93
#
94
# Dial user back and telnet to the default host for that port
95
#
96
#Deg	Cleartext-Password := "ge55ged"
97
#	Service-Type = Callback-Login-User,
98
#	Login-IP-Host = 0.0.0.0,
99
#	Callback-Number = "9,5551212",
100
#	Login-Service = Telnet,
101
#	Login-TCP-Port = Telnet
102
 
103
#
104
# Another complete entry. After the user "dialbk" has logged in, the
105
# connection will be broken and the user will be dialed back after which
106
# he will get a connection to the host "timeshare1".
107
#
108
#dialbk	Cleartext-Password := "callme"
109
#	Service-Type = Callback-Login-User,
110
#	Login-IP-Host = timeshare1,
111
#	Login-Service = PortMaster,
112
#	Callback-Number = "9,1-800-555-1212"
113
 
114
#
115
# user "swilson" will only get a static IP number if he logs in with
116
# a framed protocol on a terminal server in Alphen (see the huntgroups file).
117
#
118
# Note that by setting "Fall-Through", other attributes will be added from
119
# the following DEFAULT entries
120
#
121
#swilson	Service-Type == Framed-User, Huntgroup-Name == "alphen"
122
#		Framed-IP-Address = 192.168.1.65,
123
#		Fall-Through = Yes
124
 
125
#
126
# If the user logs in as 'username.shell', then authenticate them
127
# using the default method, give them shell access, and stop processing
128
# the rest of the file.
129
#
130
#DEFAULT	Suffix == ".shell"
131
#		Service-Type = Login-User,
132
#		Login-Service = Telnet,
133
#		Login-IP-Host = your.shell.machine
134
 
135
 
136
#
137
# The rest of this file contains the several DEFAULT entries.
138
# DEFAULT entries match with all login names.
139
# Note that DEFAULT entries can also Fall-Through (see first entry).
140
# A name-value pair from a DEFAULT entry will _NEVER_ override
141
# an already existing name-value pair.
142
#
143
 
144
#
145
# Set up different IP address pools for the terminal servers.
146
# Note that the "+" behind the IP address means that this is the "base"
147
# IP address. The Port-Id (S0, S1 etc) will be added to it.
148
#
149
#DEFAULT	Service-Type == Framed-User, Huntgroup-Name == "alphen"
150
#		Framed-IP-Address = 192.168.1.32+,
151
#		Fall-Through = Yes
152
 
153
#DEFAULT	Service-Type == Framed-User, Huntgroup-Name == "delft"
154
#		Framed-IP-Address = 192.168.2.32+,
155
#		Fall-Through = Yes
156
 
157
#
158
# Sample defaults for all framed connections.
159
#
160
#DEFAULT	Service-Type == Framed-User
161
#	Framed-IP-Address = 255.255.255.254,
162
#	Framed-MTU = 576,
163
#	Service-Type = Framed-User,
164
#	Fall-Through = Yes
165
 
166
#
167
# Default for PPP: dynamic IP address, PPP mode, VJ-compression.
168
# NOTE: we do not use Hint = "PPP", since PPP might also be auto-detected
169
#	by the terminal server in which case there may not be a "P" suffix.
170
#	The terminal server sends "Framed-Protocol = PPP" for auto PPP.
171
#
172
DEFAULT	Framed-Protocol == PPP
173
	Framed-Protocol = PPP,
174
	Framed-Compression = Van-Jacobson-TCP-IP
175
 
176
#
177
# Default for CSLIP: dynamic IP address, SLIP mode, VJ-compression.
178
#
179
DEFAULT	Hint == "CSLIP"
180
	Framed-Protocol = SLIP,
181
	Framed-Compression = Van-Jacobson-TCP-IP
182
 
183
#
184
# Default for SLIP: dynamic IP address, SLIP mode.
185
#
186
DEFAULT	Hint == "SLIP"
187
	Framed-Protocol = SLIP
188
 
189
#
190
# Last default: rlogin to our main server.
191
#
192
#DEFAULT
193
#	Service-Type = Login-User,
194
#	Login-Service = Rlogin,
195
#	Login-IP-Host = shellbox.ispdomain.com
196
 
197
# #
198
# # Last default: shell on the local terminal server.
199
# #
200
# DEFAULT
201
# 	Service-Type = Administrative-User
202
 
203
# On no match, the user is denied access.