Subversion Repositories configs

# -*- text -*-
#
#  $Id: a57741ac3fa5f884ed64d896da3807af5d2a6b99 $

#
#  The "linelog" module will log one line of text to a file.
#  Both the filename and the line of text are dynamically expanded.
#
#  We STRONGLY suggest that you do not use data from the
#  packet as part of the filename.
#
linelog {
        #
        #  The file where the logs will go.
        #
        #  If the filename is "syslog", then the log messages will
        #  go to syslog.
        filename = ${logdir}/linelog

        #
        #  The Unix-style permissions on the log file.
        #
        #  Depending on format string, the log file may contain secret or
        #  private information about users.  Keep the file permissions as
        #  restrictive as possible.
        permissions = 0600

        #
        # The Unix group of the log file.
        #
        # The user that freeradius runs as must be in the specified
        # group, otherwise it will not be possible to set the group.
        #
        # group = freerad

        #
        # If logging via syslog, the facility can be set here. Otherwise
        # the syslog_facility option in radiusd.conf will be used.
        #
        # syslog_facility = daemon

        #
        #  The default format string.
        format = "This is a log message for %{User-Name}"

        #
        #  This next line can be omitted.  If it is omitted, then
        #  the log message is static, and is always given by "format",
        #  above.
        #
        #  If it is defined, then the string is dynamically expanded,
        #  and the result is used to find another configuration entry
        #  here, with the given name.  That name is then used as the
        #  format string.
        #
        #  If the configuration entry cannot be found, then no log
        #  message is printed.
        #
        #  i.e. You can have many log messages in one "linelog" module.
        #  If this two-step expansion did not exist, you would have
        #  needed to configure one "linelog" module for each log message.

        #
        #  Reference the Packet-Type (Access-Request, etc.)  If it doesn't
        #  exist, reference the "format" entry, above.
        reference = "%{%{Packet-Type}:-format}"

        #
        #  Followed by a series of log messages.
        Access-Request = "Requested access: %{User-Name}"
        Access-Reject = "Rejected access: %{User-Name}"
        Access-Challenge = "Sent challenge: %{User-Name}"

        #
        #  The log messages can be grouped into sections and
        #  sub-sections, too.  The "reference" item needs to have a "."
        #  for every section.  e.g. reference = foo.bar will reference
        #  the "foo" section, "bar" configuration item.
        #

        #
        #  Used if:     reference = "foo.bar".
        foo {
            bar = "Example log.  Please ignore"
        }

        #
        #  Another example:
        #      reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}"
        #
        Accounting-Request {
                Start = "Connect: [%{User-Name}] (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} ip %{Framed-IP-Address})"
                Stop = "Disconnect: [%{User-Name}] (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} ip %{Framed-IP-Address}) %{Acct-Session-Time} seconds"

                #  Don't log anything for these packets.
                Alive = ""

                Accounting-On = "NAS %C (%{NAS-IP-Address}) just came online"
                Accounting-Off = "NAS %C (%{NAS-IP-Address}) just went offline"

                # don't log anything for other Acct-Status-Types.
                unknown = ""
        }

}