Section 5: file formats
rlm_sql_log – FreeRADIUS Module Description The rlm_sql_log module appends the SQL queries in a log file which is read later by the scripts/radsqlrelay Perl program. The purpose of this module is to de-couple the storage of long-term accounting data in SQL from "live" information needed by the RADIUS server as it’s running. If you are…
rlm_sql – FreeRADIUS Module Description The rlm_sql module provides an SQL interface to retrieve authorization information and store accounting information. It can be used in conjunction with, or in lieu of the files and detail modules. The SQL module has drivers to support the following SQL databases: db2 iodbc mysql oracle postgresql sybase unixodbc Due…
rlm_realm – FreeRADIUS Module Description The rlm_realm module parses the User-Name attribute into a User section and a Realm section. This is used primarily in a proxy situation, however, Realms can also be used locally to provide different service profiles based on the Realm being used. The main configuration items to be aware of are:…
rlm_policy – FreeRADIUS Module Description The rlm_policy module implements a simple "policy" language. The policy language implemented by this module is simple, and specific to RADIUS. It does not implement variables, arrays, loops, goto’s, or any other feature of a real language. If those features are needed for your system, we suggest using rlm_perl. What…
rlm_passwd – FreeRADIUS Module Description The rlm_passwd module provides authorization via files similar in format to /etc/passwd. The lm_passwd module allows you to retrieve any account information from any files with passwd-like format (/etc/passwd, /etc/group, smbpasswd, .htpasswd, etc). Every field of the file may be mapped to a RADIUS attribute, with one of the fields…
rlm_pap – FreeRADIUS Module Description The rlm_pap module authenticates RADIUS Access-Request packets that contain a User-Password attribute. The module should also be listed last in the authorize section, so that it can set the Auth-Type attribute as appropriate. When a RADIUS packet contains a clear-text password in the form of a User-Password attribute, the rlm_pap…
rlm_mschap – FreeRADIUS Module Description The rlm_mschap module provides MS-CHAP and MS-CHAPv2 authentication support. This module validates a user with MS-CHAP or MS-CHAPv2 authentication. If called in Authorize, it will look for MS-CHAP Challenge/Response attributes in the Acess-Request and adds an Auth-Type attribute set to MS-CHAP in the Config-Items list unless Auth-Type has already set….
rlm_idn – FreeRADIUS Module Description When instantiated, the rlm_idn module provides an xlat for performing IDNA encoding of internationalized domain names. Decoding and other similar encodings like plain punycode are not currently supported. For example, the following unlang expression would evaluate to TRUE: "%{idn:fūbar.site}" == "xn--fbar-v7a.site" Each instance of rlm_idn may take the following parameters:…
rlm_files – FreeRADIUS Module Description The rlm_files module uses the ‘users’ file for accessing authorization information for users. Additionally, it supports a ‘users’ file syntax to be applied to the accounting and pre-proxy sections. The main configuration items to be aware of are: usersfile The filename of the ‘users’ file, which is parsed during the…
rlm_expr – FreeRADIUS Module Description The rlm_expr module allows the server to perform limited mathematical calculations. This module is not called directly in any section, it is invoked through the dynamic expansion of strings. For example, some NAS boxes send a NAS-Port attribute which is a 32-bit number composed of port, card, and interface, all…
rlm_digest – FreeRADIUS Module Description The rlm_digest module authenticates RADIUS Access-Request packets that contain Cisco SIP digest authentication attributes. The module should be listed in the authorize and authenticate sections of radiusd.conf. Configuration The digest module requires no additional configuration items. When it is being used to authenticate requests, however, it does require access to…
rlm_detail – FreeRADIUS Module Description The rlm_detail module writes radius packets to ‘detail’ files. It is primarily used for storing accounting information, but can be used in other sections to write packet details as well. The file format is similar to that of the old Livingston servers, and many ‘detail’ file parsers should work with…
rlm_counter – FreeRADIUS Module Description The rlm_counter module provides a general framework to allow access based on accumulated usage of a resource, such as total time online in a given period, total data transferred in a given period, etc. This is very useful in a ‘Prepaid Service’ situation, where a user has paid for a…
rlm_chap – FreeRADIUS Module Description The rlm_chap module provides CHAP functionality. This module validates a user with CHAP authentication. If called in Authorize, it will look for CHAP-Password attribute in the Acess-Request and adds an Auth-Type attribute set to CHAP if the Config-Items list unless Auth-Type has already set. CHAP authentication requires access to the…
rlm_attr_rewrite – FreeRADIUS Module Description The rlm_attr_rewrite module provides functionality to rewrite data in radius packets on the fly. This can be useful in authorization and accounting functions. The main configuration items to be aware of are: attribute The name of the attribute that you want to be rewritten searchfor String to be replaced. searchin…
rlm_attr_filter – FreeRADIUS Module Description The rlm_attr_filter module exists for filtering certain attributes and values in received ( or transmitted ) radius packets. It gives the server a flexible framework to filter the attributes we send to or receive from home servers or NASes. This makes sense, for example, in an out-sourced dialup situation to…
rlm_always – FreeRADIUS Module Description The rlm_always module provides a simple way to "always" return a value during the processing of a configuration section. The module does nothing other than return a configured value. The main configuration item to be aware of is: rcode This module will always return with the rcode specified. The default,…
rlm_acct_unique – FreeRADIUS Module Description The rlm_acct_unique module creates a unique accounting session Id. Many NAS vendors have their equipment supply an Acct-Session-Id attribute which is not unique over reboots. This makes accounting difficult, as there will be many independent sessions with the same Acct-Session-Id attribute. This module uses the Acct-Session-Id attribute, along with other…
rip98d.conf – control RIP98 routing messages. Description Rip98d.conf controls the transmission of RIP98 routing messages. RIP98 is not a broadcast protocol but instead is transmitted individually to each other known RIP98 capable system. The list of these systems is kept in the RIP98 configuration file as a list of host names or IP numbers that…
rhtsupport_event.conf – configuration file for libreport. Description This configuration file provides definitions for events which use reporter-rhtsupport. By default the file contains definition for single report_RHTSupport event applicable for all problem types. report_RHTSupport event configuration file The configuration for report_RHTSupport event is read from /etc/libreport/events/report_RHTSupport.conf file if exists. The configuration file contains values for options…