radius will use the new sub-config format

This commit is contained in:
Nikos Mavrogiannopoulos
2015-02-24 12:05:38 +01:00
parent efa0f510d7
commit 43caa1be14
7 changed files with 142 additions and 101 deletions

View File

@@ -1,7 +1,7 @@
# User authentication method. Could be set multiple times and in
# that case all should succeed. To enable multiple methods use
# multiple auth directives. Available options: certificate,
# plain, pam, radius[configfile,groupconfig], gssapi.
# plain, pam, radius[config=configfile,groupconfig=trueval], gssapi.
#
# Note that authentication methods cannot be changed with reload.
@@ -19,7 +19,7 @@
# One entry must be listed per line, and 'ocpasswd' should be used
# to generate password entries.
#
# radius[/etc/radiusclient/radiusclient.conf,groupconfig]:
# radius[config=/etc/radiusclient/radiusclient.conf,groupconfig=true]:
# The radius option requires specifying freeradius-client configuration
# file. If the groupconfig option is set, then config-per-user will be overriden,
# and all configuration will be read from radius. The supported atributes for
@@ -31,7 +31,7 @@
#auth = "pam[gid-min=1000]"
auth = "plain[./sample.passwd]"
#auth = "certificate"
#auth = "radius[/etc/radiusclient/radiusclient.conf,groupconfig]"
#auth = "radius[config=/etc/radiusclient/radiusclient.conf,groupconfig=true]"
# Specify alternative authentication methods that are sufficient
# for authentication. That is, if set, any of the methods enabled
@@ -49,7 +49,7 @@ auth = "plain[./sample.passwd]"
#
# Only one accounting method can be specified.
#acct = "pam"
#acct = "radius[/etc/radiusclient/radiusclient.conf]"
#acct = "radius[config=/etc/radiusclient/radiusclient.conf]"
# Whether to enable seccomp/Linux namespaces worker isolation. That restricts the number of
# system calls allowed to a worker process, in order to reduce damage from a