| 1 |
slords |
1.1 |
Index: e-smith-radiusd/e-smith-radiusd.spec |
| 2 |
|
|
diff -u /dev/null e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/25modules45acctUnique:1.1 |
| 3 |
|
|
--- /dev/null Mon Jul 18 14:00:43 2005 |
| 4 |
|
|
+++ e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/25modules45acctUnique Mon Jul 18 13:59:21 2005 |
| 5 |
|
|
@@ -0,0 +1,13 @@ |
| 6 |
|
|
+{ |
| 7 |
|
|
+ # Create a unique accounting session Id. Many NASes re-use or |
| 8 |
|
|
+ # repeat values for Acct-Session-Id, causing no end of |
| 9 |
|
|
+ # confusion. |
| 10 |
|
|
+ # |
| 11 |
|
|
+ # This module will add a (probably) unique session id |
| 12 |
|
|
+ # to an accounting packet based on the attributes listed |
| 13 |
|
|
+ # below found in the packet. See doc/rlm_acct_unique for |
| 14 |
|
|
+ # more information. |
| 15 |
|
|
+ # |
| 16 |
|
|
+} acct_unique \{ |
| 17 |
|
|
+ key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" |
| 18 |
|
|
+ \} |
| 19 |
|
|
Index: e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/25modules50detail |
| 20 |
|
|
diff -u /dev/null e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/25modules50detail:1.1 |
| 21 |
|
|
--- /dev/null Mon Jul 18 14:00:43 2005 |
| 22 |
|
|
+++ e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/25modules50detail Mon Jul 18 13:59:22 2005 |
| 23 |
|
|
@@ -0,0 +1,36 @@ |
| 24 |
|
|
+{ |
| 25 |
|
|
+ # Write a detailed log of all accounting records received. |
| 26 |
|
|
+ # |
| 27 |
|
|
+} detail \{ |
| 28 |
|
|
+{ # Note that we do NOT use NAS-IP-Address here, as |
| 29 |
|
|
+ # that attribute MAY BE from the originating NAS, and |
| 30 |
|
|
+ # NOT from the proxy which actually sent us the |
| 31 |
|
|
+ # request. The Client-IP-Address attribute is ALWAYS |
| 32 |
|
|
+ # the address of the client which sent us the |
| 33 |
|
|
+ # request. |
| 34 |
|
|
+ # |
| 35 |
|
|
+ # The following line creates a new detail file for |
| 36 |
|
|
+ # every radius client (by IP address or hostname). |
| 37 |
|
|
+ # In addition, a new detail file is created every |
| 38 |
|
|
+ # day, so that the detail file doesn't have to go |
| 39 |
|
|
+ # through a 'log rotation' |
| 40 |
|
|
+ # |
| 41 |
|
|
+ # If your detail files are large, you may also want |
| 42 |
|
|
+ # to add a ':%H' (see doc/variables.txt) to the end |
| 43 |
|
|
+ # of it, to create a new detail file every hour, e.g.: |
| 44 |
|
|
+ # |
| 45 |
|
|
+ # ..../detail-%Y%m%d:%H |
| 46 |
|
|
+ # |
| 47 |
|
|
+ # This will create a new detail file for every hour. |
| 48 |
|
|
+ # |
| 49 |
|
|
+} detailfile = $\{logdir\}/accounting.log |
| 50 |
|
|
+{ |
| 51 |
|
|
+ # |
| 52 |
|
|
+ # The Unix-style permissions on the 'detail' file. |
| 53 |
|
|
+ # |
| 54 |
|
|
+ # The detail file often contains secret or private |
| 55 |
|
|
+ # information about users. So by keeping the file |
| 56 |
|
|
+ # permissions restrictive, we can prevent unwanted |
| 57 |
|
|
+ # people from seeing that information. |
| 58 |
|
|
+} detailperm = 0600 |
| 59 |
|
|
+ \} |
| 60 |
|
|
Index: e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/75preacct |
| 61 |
|
|
diff -u /dev/null e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/75preacct:1.1 |
| 62 |
|
|
--- /dev/null Mon Jul 18 14:00:43 2005 |
| 63 |
|
|
+++ e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/75preacct Mon Jul 18 13:59:22 2005 |
| 64 |
|
|
@@ -0,0 +1,17 @@ |
| 65 |
|
|
+{ |
| 66 |
|
|
+# |
| 67 |
|
|
+# Pre-accounting. Decide which accounting type to use. |
| 68 |
|
|
+# |
| 69 |
|
|
+}preacct \{ |
| 70 |
|
|
+ preprocess |
| 71 |
|
|
+{ |
| 72 |
|
|
+ # |
| 73 |
|
|
+ # Ensure that we have a semi-unique identifier for every |
| 74 |
|
|
+ # request, and many NAS boxes are broken. |
| 75 |
|
|
+} acct_unique |
| 76 |
|
|
+{ |
| 77 |
|
|
+ # Accounting requests are generally proxied to the same |
| 78 |
|
|
+ # home server as authentication requests. |
| 79 |
|
|
+} suffix |
| 80 |
|
|
+ ntdomain |
| 81 |
|
|
+\} |
| 82 |
|
|
Index: e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/80accounting |
| 83 |
|
|
diff -u /dev/null e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/80accounting:1.1 |
| 84 |
|
|
--- /dev/null Mon Jul 18 14:00:43 2005 |
| 85 |
|
|
+++ e-smith-radiusd/root/etc/e-smith/templates/etc/raddb/radiusd.conf/80accounting Mon Jul 18 13:59:22 2005 |
| 86 |
|
|
@@ -0,0 +1,11 @@ |
| 87 |
|
|
+{ |
| 88 |
|
|
+# |
| 89 |
|
|
+# Accounting. Log the accounting data. |
| 90 |
|
|
+# |
| 91 |
|
|
+}accounting \{ |
| 92 |
|
|
+{ # |
| 93 |
|
|
+ # Create a 'detail'ed log of the packets. |
| 94 |
|
|
+ # Note that accounting requests which are proxied |
| 95 |
|
|
+ # are also logged in the detail file. |
| 96 |
|
|
+} detail |
| 97 |
|
|
+\} |
| 98 |
|
|
Index: e-smith-radiusd/root/var/service/radiusd/run |
| 99 |
|
|
diff -u e-smith-radiusd/root/var/service/radiusd/run:1.1.1.1 e-smith-radiusd/root/var/service/radiusd/run:1.2 |
| 100 |
|
|
--- e-smith-radiusd/root/var/service/radiusd/run:1.1.1.1 Mon Jun 13 15:10:16 2005 |
| 101 |
|
|
+++ e-smith-radiusd/root/var/service/radiusd/run Mon Jul 18 13:59:22 2005 |
| 102 |
|
|
@@ -1,6 +1,5 @@ |
| 103 |
|
|
#!/bin/sh |
| 104 |
|
|
|
| 105 |
|
|
-exec 2>&1 |
| 106 |
|
|
# Ensure that PRNG is adequately seeded. |
| 107 |
|
|
[ -s /etc/raddb/certs/dh ] ||\ |
| 108 |
|
|
/usr/local/bin/envuidgid stunnel \ |
| 109 |
|
|
@@ -11,4 +10,4 @@ |
| 110 |
|
|
# Configure cert |
| 111 |
|
|
./control/1 |
| 112 |
|
|
|
| 113 |
|
|
-exec /usr/sbin/radiusd -s -f -x |
| 114 |
|
|
+exec /usr/sbin/radiusd -f >&2 |
| 115 |
|
|
Index: e-smith-radiusd/root/var/service/radiusd/log/run |
| 116 |
|
|
diff -u e-smith-radiusd/root/var/service/radiusd/log/run:1.1.1.1 e-smith-radiusd/root/var/service/radiusd/log/run:removed |
| 117 |
|
|
--- e-smith-radiusd/root/var/service/radiusd/log/run:1.1.1.1 Mon Jun 13 15:10:16 2005 |
| 118 |
|
|
+++ e-smith-radiusd/root/var/service/radiusd/log/run Wed Dec 31 19:00:00 1969 |
| 119 |
|
|
@@ -1,27 +0,0 @@ |
| 120 |
|
|
-#!/bin/sh |
| 121 |
|
|
- |
| 122 |
|
|
-#---------------------------------------------------------------------- |
| 123 |
|
|
-# copyright (C) 1999-2003 Mitel Networks Corporation |
| 124 |
|
|
-# |
| 125 |
|
|
-# This program is free software; you can redistribute it and/or modify |
| 126 |
|
|
-# it under the terms of the GNU General Public License as published by |
| 127 |
|
|
-# the Free Software Foundation; either version 2 of the License, or |
| 128 |
|
|
-# (at your option) any later version. |
| 129 |
|
|
-# |
| 130 |
|
|
-# This program is distributed in the hope that it will be useful, |
| 131 |
|
|
-# but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 132 |
|
|
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 133 |
|
|
-# GNU General Public License for more details. |
| 134 |
|
|
-# |
| 135 |
|
|
-# You should have received a copy of the GNU General Public License |
| 136 |
|
|
-# along with this program; if not, write to the Free Software |
| 137 |
|
|
-# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
| 138 |
|
|
-# |
| 139 |
|
|
-# Technical support for this program is available from Mitel Networks |
| 140 |
|
|
-# Please visit our web site www.mitel.com/sme/ for details. |
| 141 |
|
|
-#---------------------------------------------------------------------- |
| 142 |
|
|
- |
| 143 |
|
|
-exec \ |
| 144 |
|
|
- /usr/local/bin/setuidgid smelog \ |
| 145 |
|
|
- /usr/local/bin/multilog t s5000000 \ |
| 146 |
|
|
- /var/log/radiusd |
Parent Directory
| 
Revision Log
| 
Revision Graph
