# GPSnet configurations fil
#
# EW 15 juni 2001
# EW 29 december 2004 begyndt tilføjning for WatchGuard logins
# EW 18 juni 2008 tilrettet til ny Win2003 server: GPSnet_NTRIP
#

# Foreground er mandatory på NT
Foreground

# LogStdout giver al log information i et drift vindue
LogStdout

#LogDir 	c:\Radius\Log
LogFile C:\Radius\Log\Radius%Y%m%d.log
DbDir c:\Radius

# User a lower trace level in production systems: 4 = debuglevel
Trace 		4

# Cisco AS5300 Nuptse
<Client 192.168.34.206>
	Secret	AS5300
	DupInterval 2
</Client>
# WatchGuard Firebox X700 Dzong
<Client 192.168.34.200>
	Secret	Dzong
	DupInterval 2
</Client>


<SessionDatabase SQL>

	DBSource	dbi:mysql:radius
	DBUsername	root
	DBAuth		*********
	Identifier  AS5300DB
	
	AddQuery insert into RADONLINE (USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, NASPORTTYPE, SERVICETYPE, ISDNNR) values ('%{Calling-Station-Id}', '%N', 0%{NAS-Port}, '%{Acct-Session-Id}', %{Timestamp}, '%{NAS-Port-Type}', '%{Service-Type}', '%{Called-Station-Id}')
	DeleteQuery delete from RADONLINE where NASIDENTIFIER='%N' and NASPORT=0%{NAS-Port}
	ClearNasQuery delete from RADONLINE where NASIDENTIFIER='%N'
	CountQuery select NASIDENTIFIER, NASPORT, ACCTSESSIONID from RADONLINE where USERNAME='%{Calling-Station-Id}'

</SessionDatabase>

#<Realm DEFAULT>

<Handler NAS-IP-Address=192.168.34.206>
	# This will authenticate users from SUBSCRIBERS
   <AuthBy SQL>

	
		DBSource	dbi:mysql:radius
		DBUsername	root
		DBAuth		**********
	
   	#AuthSelect select PASSWORD from SUBSCRIBERS where USERNAME=%0
   	AuthSelect select PASSWORD from SUBSCRIBERS where USERNAME=%0 and FIND_IN_SET('%{Called-Station-Id}',TilladteNre)

		# You may want to tailor these for your ACCOUNTING table
		# You can add your own columns to store whatever you like
	
		DateFormat %Y-%m-%d %X
		AccountingStopsOnly
		AccountingTable	ACCOUNTING
		AcctColumnDef	UNAME_R,User-Name
		AcctColumnDef	USERNAME,Calling-Station-Id
		AcctColumnDef	TIME_STAMP,Timestamp,integer
		#AcctColumnDef	ACCTSTATUSTYPE,Acct-Status-Type
		#AcctColumnDef	ACCTDELAYTIME,Acct-Delay-Time,integer
		#AcctColumnDef	ACCTINPUTOCTETS,Acct-Input-Octets,integer
		#AcctColumnDef	ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
		AcctColumnDef	ACCTSESSIONID,Acct-Session-Id
		AcctColumnDef	ACCTSESSIONTIME,Acct-Session-Time,integer
		AcctColumnDef	ACCTTERMINATECAUSE,Acct-Terminate-Cause
		AcctColumnDef	NASIDENTIFIER,NAS-Identifier
		AcctColumnDef	NASPORT,NAS-Port,integer
		#AcctColumnDef	FRAMEDIPADDRESS,Framed-IP-Address
      AcctColumnDef	DATOTID,Timestamp,integer-date
      AcctColumnDef	ISDNNR,Called-Station-Id
 

		# You can arrange to log accounting to a file if the
		# SQL insert fails with AcctFailedLogFileName
		# That way you could recover from a broken SQL
		# server
		AcctFailedLogFileName %D/missedaccounting
   </AuthBy>
   SessionDatabase AS5300DB
</Handler>

<Handler>
	RejectHasReason
   <AuthBy SQL>

		DBSource	dbi:mysql:radius
		DBUsername	root
		DBAuth		********
	
#   	AuthSelect select PASSWORD, CHECKATTR, REPLYATTR from DzongLogin where USERNAME=%0
   	AuthSelect select PASSWORD, CHECKATTR, REPLYATTR from DzongLogin where USERNAME=%0 and CafeLoginAktiveret > 0

		AutoMPPEKeys
   </AuthBy>
	PostAuthHook file:"%D/runCafeLogin"
</Handler>

#</Realm>