Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

rlm_realm(5) [debian man page]

rlm_realm(5)							 FreeRADIUS Module						      rlm_realm(5)

NAME

       rlm_realm - FreeRADIUS Module

DESCRIPTION

       The  rlm_realm module parses the User-Name attribute into a User section and a Realm section.  This is used primarily in a proxy situation,
       however, Realms can also be used locally to provide different service profiles based on the Realm being used.

       The main configuration items to be aware of are:

       format This can be either 'prefix' or 'suffix'.	It specifies whether the Realm is before or  after  the  User  portion	in  the  User-Name
	      string.

       delimiter
	      A single character in quotes, which is used as the delimiting character that separates the Realm and User sections of the string.

       ignore_default
	      This  is	set  to  either  'yes'	or 'no'.  If set to 'yes', this will prevent the module instance from matching a realm against the
	      DEFAULT entry.  This may be useful if you have multiple realm module instances.  The default is 'no'.

       ignore_null
	      This is set to either 'yes' or 'no'.  If set to 'yes', this will prevent the module instance from matching a realm against the  NULL
	      entry.  This may be useful if you have multiple realm module instances.  The default is 'no'.

       This  module  parses  the  realm from the User-Name attrbiute according to the instance configuration, and then performs a lookup to find a
       matching realm in the '/etc/raddb/proxy.conf' file.  Depending on the configuration of the Realm as matched in the file, the  username  may
       be  rewritten  in  a  'stripped'  format, or with the Realm portion removed.  In either case, a Realm attribute is created and added to the
       packet on a match, which can be used by other modules.

CONFIGURATION

       modules {
	 ... stuff here ...
	 # useranme@realm syntax
	 realm suffix {
	   format = suffix
	   delimiter = "@"
	 }
	  # realm/username syntax
	  realm prefix {
	   format = prefix
	   delimiter = "/"
	 }
	 ... stuff here ...
       }

SECTIONS

       authorization, pre-accounting

FILES

       /etc/raddb/radiusd.conf, /etc/raddb/proxy.conf

SEE ALSO

       radiusd(8), radiusd.conf(5), proxy.conf(5)

AUTHORS

       Chris Parker, cparker@segv.org

								   14 March 2004						      rlm_realm(5)

Check Out this Related Man Page

rlm_acct_unique(5)						 FreeRADIUS Module						rlm_acct_unique(5)

NAME

       rlm_acct_unique - FreeRADIUS Module

DESCRIPTION

       The rlm_acct_unique module creates a unique accounting session Id.

       Many  NAS  vendors have their equipment supply an Acct-Session-Id attribute which is not unique over reboots.  This makes accounting diffi-
       cult, as there will be many independent sessions with the same Acct-Session-Id attribute.  This module uses the Acct-Session-Id	attribute,
       along with other attributes in the request, to create a more unique session ID, called Acct-Unique-Session-Id.

       The main configuration items to be aware of are:

       key    A list of the attributes used in calculating an MD5 hash which is used as the value for the unique session id.

CONFIGURATION

       modules {
	 ...
	 acct_unique {
	    key = "User-Name, Acct-Session-Id, NAS-IP-Address, NAS-Port"
	 }
	 ...
       }
	...
       preacct {
	 ...
	 acct_unique
	 ...
       }

       After  generating  the MD5 hash, the module adds it to the accounting request packet received from the client.  It will look something like
       this in your detail file:

	    Acct-Unique-Session-Id = "c66ef57e480b9d26"

       NOTE:  Any attribute you specify that is not found in the 'dictionary' file will cause the server to fail and exit with an error.

       NOTE:  If you want the Acct-Unique-Session-Id of the Start and the Stop packet of a particular session to match, you must  use  values  for
       the key that will stay the same for the Start and Stop.	The above example is a good start.  Adding 'Acct-Session-Time', for example, would
       cause a mismatch because that value is not the same on the Start and Stop accounting packets.

SECTIONS

       authorization, pre-accounting, accounting

FILES

       /etc/raddb/radiusd.conf

SEE ALSO

       radiusd(8), radiusd.conf(5)

AUTHORS

       Chris Parker, cparker@segv.org

								  3 February 2004						rlm_acct_unique(5)
Man Page