Radiator® AAA Server

Installation and reference manual for Radiator® 4.28. Last revised on December 19, 2023
Copyright © 1998-2023 Radiator Software Oy.

Table of Contents

1. Introduction to Radiator® AAA Server

2. Installing and upgrading Radiator

3. Configuring Radiator

3.1. Tips for using Radiator configuration files

3.2. Including parts of configuration from external files

3.3. Special formatters

3.4. Date formatting

3.5. Address binding

3.6. IPv6 support

3.7. Global parameters

3.7.1. Foreground

3.7.2. LogStdout

3.7.3. Trace

3.7.4. LogTraceId

3.7.5. LogRejectLevel

3.7.6. AuthPort

3.7.7. AcctPort

3.7.8. KeepSocketsOnReload

3.7.9. BindAddress

3.7.10. BindV6Only

3.7.11. DbDir

3.7.12. LogDir

3.7.13. LogFile

3.7.14. LogMicroseconds

3.7.15. PidFile

3.7.16. DictionaryFile

3.7.17. ProxyUnknownAttributes

3.7.18. DiameterDictionaryFile

3.7.19. DictionaryReloadInterval

3.7.20. Syslog

3.7.21. LicenseFile

3.7.22. SnmpgetProg

3.7.23. SnmpwalkProg

3.7.24. FingerProg

3.7.25. PmwhoProg

3.7.26. LivingstonMIB

3.7.27. LivingstonOffs

3.7.28. LivingstonHole

3.7.29. RewriteUsername

3.7.30. SocketQueueLength

3.7.31. DefineFormattedGlobalVar

3.7.32. DefineGlobalVar

3.7.33. StartupHook

3.7.34. ShutdownHook

3.7.35. DelayedShutdownTime

3.7.36. DelayedShutdownHook

3.7.37. PreClientHook

3.7.38. ClientHook

3.7.39. HandlerFindHook

3.7.40. USR1Hook

3.7.41. USR2Hook

3.7.42. WINCHHook

3.7.43. MainLoopHook

3.7.44. UsernameCharset

3.7.45. User

3.7.46. Group

3.7.47. MaxChildren

3.7.48. SnmpNASErrorTimeout

3.7.49. ForkClosesFDs

3.7.50. ResponseTimeThreshold

3.7.51. GlobalMessageLog

3.7.52. FarmSize

3.7.53. LogFarmInstance

3.7.54. FarmChildHook

3.7.55. DupCache

3.7.56. DupCacheFile

3.7.57. EAP_UseState

3.7.58. Identifier

3.7.59. DisableMTUDiscovery

3.7.60. PacketDumpOmitAttributes

3.7.61. StatusServer

3.7.62. DisabledRuntimeChecks

3.7.63. PBKDF2_MinRounds

3.7.64. PBKDF2_MaxRounds

3.8. SQL configuration

3.9. LDAP configuration

3.9.1. BaseDN

3.9.2. SearchFilter

3.9.3. Scope

3.9.4. AuthDN

3.9.5. AuthPassword

3.9.6. Host

3.9.7. Port

3.9.8. ResolveHost

3.9.9. UseSSL

3.9.10. UseTLS

3.9.11. Debug

3.9.12. DebugTLS

3.9.13. Timeout

3.9.14. FailureBackoffTime

3.9.15. BindFailedHook

3.9.16. HoldServerConnection

3.9.17. NoBindBeforeOp

3.9.18. SSLVerify

3.9.19. SSLCiphers

3.9.20. SSLCAPath

3.9.21. SSLCAFile

3.9.22. SSLCAClientCert

3.9.23. SSLCAClientKey

3.9.24. SSLCAClientKeyPassword

3.9.25. SSLExpectedServerName

3.9.26. Version

3.9.27. Deref

3.9.28. UseSASL

3.9.29. SASLUser

3.9.30. SASLPassword

3.9.31. SASLMechanism

3.9.32. BindAddress

3.9.33. MultiHomed

3.10. EAP configuration

3.10.1. EAPType

3.10.2. EAPContextTimeout

3.10.3. EAPAnonymous

3.10.4. EAPTLS_CAFile

3.10.5. EAPTLS_CAPath

3.10.6. EAPTLS_CertificateFile

3.10.7. EAPTLS_CertificateChainFile

3.10.8. EAPTLS_CertificateType

3.10.9. EAPTLS_PrivateKeyFile

3.10.10. EAPTLS_PrivateKeyPassword

3.10.11. EAPTLS_Protocols

3.10.12. EAPTLS_Ciphers

3.10.13. EAPTLS_SecurityLevel

3.10.14. EAPTLS_RandomFile

3.10.15. EAPTLS_DHFile

3.10.16. EAPTLS_ECDH_Curve

3.10.17. EAPTLS_AllowUnsafeLegacyRenegotiation

3.10.18. EAPTLS_MaxFragmentSize

3.10.19. EAPTLS_CRLCheck

3.10.20. EAPTLS_CRLCheckUseDeltas

3.10.21. EAPTLS_CRLCheckAll

3.10.22. EAPTLS_CRLFile

3.10.23. EAPTLS_SessionResumption

3.10.24. EAPTLS_SessionResumptionLimit

3.10.25. EAPTLS_SessionContextId

3.10.26. EAPTLSRewriteCertificateCommonName

3.10.27. EAPTLS_PEAPVersion

3.10.28. EAPTLS_PEAPBrokenV1Label

3.10.29. EAP_PEAP_MSCHAP_Convert

3.10.30. EAPTLS_RequireClientCert

3.10.31. EAPTLS_PolicyOID

3.10.32. EAP_LEAP_MSCHAP_Convert

3.10.33. EAP_GTC_MaxLength

3.10.34. EAP_GTC_PAP_Convert

3.10.35. EAP_MSCHAPv2_UseMultipleAuthBys

3.10.36. EAPTLS_NoCheckId

3.10.37. EAPTLS_CertificateVerifyHook

3.10.38. EAPTLS_CertificateVerifyFailedHook

3.10.39. EAPTLS_CommonNameHook

3.10.40. EAPTLS_TraceState

3.10.41. EAPTLS_CopyToInnerRequest

3.10.42. EAPTLS_CAPartialChain

3.10.43. EAPTLS_UseCADefaultLocations

3.10.44. EAPTLS_NoClientCert

3.10.45. EAPTLS_OCSPCheck

3.10.46. EAPTLS_OCSPAsyncCheck

3.10.47. EAPTLS_OCSPStapling

3.10.48. EAPTLS_OCSPURI

3.10.49. EAPTLS_OCSPFailureBackoffTime

3.10.50. EAPTLS_OCSPStrict

3.10.51. EAPTLS_OCSPCacheTime

3.10.52. EAPTLS_OCSPCacheSize

3.10.53. EAPFAST_PAC_Lifetime

3.10.54. EAPFAST_PAC_Reprovision

3.10.55. EAP_TTLS_AllowInRequest

3.10.56. EAP_TTLS_AllowInReply

3.10.57. EAP_Identity_MaxLength

3.10.58. EAP_PWD_PrepMethod

3.10.59. UsernameCharset

3.10.60. NoEAP

3.10.61. PreHandlerHook

3.10.62. EAPTLS_KeylogFilename

3.11. TLS configuration

3.12. HTTP client configuration

3.13. Gossip configuration

3.13.1. Identifier

3.13.2. Debug

3.13.3. Secret

3.13.4. EncryptedSecret

3.14. <Client xxxxxx>

3.15. <ClientListLDAP>

3.15.1. BaseDN

3.15.2. SearchFilter

3.15.3. ClientAttrDef

3.15.4. RefreshPeriod

3.15.5. FarmWorkerSpacing

3.15.6. PostSearchHook

3.16. <ClientListSQL>

3.17. <SessionDatabase xxxxxx>

3.17.1. Identifier

3.18. <SessionDatabase SQL>

3.19. <SessionDatabase REDIS>

3.20. <SessionDatabase DBM>

3.20.1. Filename

3.20.2. DBType

3.20.3. SessionIdentifier

3.21. <SessionDatabase NULL>

3.22. <ServiceDatabase xxxxxx>

3.22.1. Identifier

3.22.2. Tenant

3.23. <ServiceDatabase INTERNAL>

3.23.1. Service

3.24. <ServiceDatabase SQL>

3.25. <Log FILE>

3.25.1. Filename

3.25.2. Trace

3.25.3. LogMicroseconds

3.25.4. LogTraceId

3.25.5. Identifier

3.25.6. IgnorePacketTrace

3.25.7. LogFormat

3.25.8. LogFormatHook

3.26. <Log SYSLOG>

3.26.1. Facility

3.26.2. Trace

3.26.3. IgnorePacketTrace

3.26.4. Identifier

3.26.5. LogSock

3.26.6. LogPath

3.26.7. LogHost

3.26.8. LogOpt

3.26.9. LogIdent

3.26.10. LogPort

3.26.11. LogFormat

3.26.12. LogFormatHook

3.26.13. MaxMessageLength

3.27. <Log SQL>

3.27.1. Table

3.27.2. Trace

3.27.3. IgnorePacketTrace

3.27.4. Identifier

3.27.5. LogQuery

3.27.6. LogQueryParam

3.27.7. MaxMessageLength

3.28. <Log EMERALD>

3.29. <SNMPAgent>

3.29.1. Port

3.29.2. BindAddress

3.29.3. Community

3.29.4. ROCommunity

3.29.5. RWCommunity

3.29.6. Managers

3.29.7. Identifier

3.29.8. SNMPVersion

3.29.9. PacketTrace

3.30. <Realm realmname>

3.31. <Handler attribute=value,attribute=value, ....>

3.32. <AuthBy xxxxxx>

3.33. <AuthBy ACE>

3.34. <AuthBy TEST>

3.34.1. Identifier

3.35. <AuthBy FILE>

3.35.1. Filename

3.35.2. GroupFilename

3.35.3. Nocache

3.36. <AuthBy DBFILE>

3.36.1. Filename

3.36.2. DBType

3.37. <AuthBy CDB>

3.37.1. Filename

3.38. <AuthBy GROUP>

3.39. <AuthBy UNIX>

3.39.1. Filename

3.39.2. Match

3.39.3. GroupFilename

3.39.4. Nocache

3.40. <AuthBy EXTERNAL>

3.41. <AuthBy SQL>

3.42. <AuthBy RADIUS>

3.43. <Host xxxxxx> within <AuthBy RADIUS>

3.43.1. BogoMips

3.44. <AuthBy RADMIN>

3.45. <AuthBy EMERALD4>

3.45.1. AuthSelect

3.45.2. ConcurrencyControl

3.45.3. TimeBanking

3.45.4. HonourServers

3.45.5. HonourServerPortAccess

3.45.6. HonourDNISGroups

3.45.7. HonourRoamServers

3.45.8. DNISGroupQuery

3.45.9. PortAccessQuery

3.45.10. RadUserQuery

3.45.11. ClientQuery

3.45.12. RoamQuery

3.46. <AuthBy PLATYPUS>

3.47. <AuthBy LDAP2>

3.48. <AuthBy SYSTEM>

3.49. <AuthBy TACACSPLUS>

3.49.1. Host

3.49.2. Key

3.49.3. Port

3.49.4. Timeout

3.49.5. AuthType

3.50. <AuthBy PAM>

3.50.1. Service

3.50.2. UsePamEnv

3.50.3. PasswordPrompt

3.51. <AuthBy ADSI>

3.51.1. BindString

3.51.2. AuthUser

3.51.3. AuthFlags

3.51.4. AuthAttrDef

3.51.5. GroupBindString

3.51.6. GroupUserBindString

3.51.7. CheckGroupServer

3.51.8. CheckGroup

3.52. <AuthBy PORTLIMITCHECK>

3.52.1. CountQuery

3.52.2. SessionLimit

3.52.3. ClassForSessionLimit

3.52.4. LimitQuery

3.52.5. IgnoreErrors

3.53. <AuthBy DYNADDRESS>

3.53.1. AddressAllocator

3.53.2. PoolHint

3.53.3. MapAttribute

3.53.4. MapResultHook

3.53.5. RunWhenMissing

3.54. <AuthBy ROUNDROBIN>, <AuthBy VOLUMEBALANCE>, <AuthBy LOADBALANCE>, <AuthBy HASHBALANCE>, <AuthBy EAPBALANCE>

3.55. <AuthBy LDAPRADIUS>

3.55.1. BaseDN

3.55.2. SearchFilter

3.55.3. NumHosts

3.55.4. HostAttrDef

3.56. <AuthBy SQLRADIUS>

3.56.1. HostSelect

3.56.2. HostSelectParam

3.56.3. NumHosts

3.56.4. StartHost

3.56.5. HostColumnDef

3.57. <AuthBy INTERNAL>

3.57.1. DefaultResult

3.57.2. AuthResult

3.57.3. AcctResult

3.57.4. AcctStartResult

3.57.5. AcctStopResult

3.57.6. AcctAliveResult

3.57.7. RequestHook

3.57.8. AuthHook

3.57.9. AcctHook

3.57.10. AcctStartHook

3.57.11. AcctStopHook

3.57.12. AcctAliveHook

3.57.13. AcctOtherHook

3.57.14. OtherHook

3.57.15. StripFromRequest

3.57.16. AddToRequest

3.57.17. AddToRequestIfNotExist

3.58. <AuthBy POP3>

3.58.1. Host

3.58.2. Port

3.58.3. LocalAddr

3.58.4. AuthMode

3.58.5. Timeout

3.58.6. Debug

3.58.7. SSLVerify

3.58.8. SSLCAFile

3.58.9. SSLCAPath

3.58.10. SSLCAClientCert

3.58.11. SSLCAClientKey

3.58.12. SSLCAClientKeyPassword

3.59. <AuthBy IMAP>

3.59.1. Host

3.59.2. Port

3.59.3. LocalAddr

3.59.4. Timeout

3.59.5. Debug

3.59.6. SSLVerify

3.59.7. SSLCAFile

3.59.8. SSLCAPath

3.59.9. SSLCAClientCert

3.59.10. SSLCAClientKey

3.59.11. SSLCAClientKeyPassword

3.60. <AuthBy LSA>

3.60.1. Domain

3.60.2. DefaultDomain

3.60.3. Workstation

3.60.4. ProcessName

3.60.5. Origin

3.60.6. Source

3.60.7. LSARewriteHook

3.60.8. Group

3.60.9. DomainController

3.61. <AuthBy SOAP>

3.61.1. Endpoint

3.61.2. URI

3.61.3. SOAPTrace

3.61.4. Timeout

3.62. <AuthBy OTP>

3.62.1. ChallengeHook

3.62.2. VerifyHook

3.62.3. PasswordPattern

3.62.4. ContextTimeout

3.63. <AuthBy RSAAM>

3.63.1. Host

3.63.2. Endpoint

3.63.3. Protocol

3.63.4. URI

3.63.5. Policy

3.63.6. SessionUsername

3.63.7. SessionPassword

3.63.8. ChallengeHasPrompt

3.63.9. SessionRealm

3.63.10. Timeout

3.63.11. SOAPTrace

3.63.12. Message

3.63.13. SSLVerify

3.63.14. SSLCAFile

3.63.15. SSLCAPath

3.63.16. SSLVerifyCNName and SSLVerifyCNScheme

3.63.17. SSL_CertificateFile

3.63.18. SSL_PrivateKeyFile

3.64. <AuthBy SQLDIGIPASS>

3.65. <AuthBy LDAPDIGIPASS>

3.66. <AuthBy LDAP_APS>

3.67. <AuthBy REST>

3.68. <AuthBy URL>

3.68.1. AuthUrl

3.68.2. AcctUrl

3.68.3. UrlMethod

3.68.4. Debug

3.68.5. Timeout

3.68.6. UserParam

3.68.7. PasswordParam

3.68.8. AuthOKKeyword

3.68.9. AuthChallengeKeyword

3.68.10. BadUserKeyword

3.68.11. BadPasswordKeyword

3.68.12. PasswordEncryption

3.68.13. ChapChallengeParam

3.68.14. ChapResponseParam

3.68.15. MSChapChallengeParam

3.68.16. MSChapResponseParam

3.68.17. MSChapV2ChallengeParam

3.68.18. MSChapV2ResponseParam

3.68.19. CopyRequestItem

3.68.20. CopyReplyItem

3.69. <AuthBy KRB5>

3.69.1. KrbRealm

3.69.2. KrbServerRealm

3.69.3. KrbKeyTab

3.69.4. KrbService

3.69.5. KrbServer

3.70. <AuthBy MULTICAST>

3.70.1. LoopDetection

3.71. <AuthBy RADSEC>

3.72. <Host xxxxxx> within <AuthBy RADSEC>

3.73. <AuthBy SASLAUTHD>

3.73.1. SocketPath

3.73.2. Service

3.74. <AuthBy NTLM>

3.75. <AuthBy DNSROAM>

3.76. <Route>

3.76.1. Realm

3.76.2. Address

3.76.3. Transport

3.76.4. Protocol

3.76.5. Port

3.76.6. UseTLS and TSL_Protocols

3.76.7. Secret

3.76.8. <AuthBy RADIUS> parameters

3.76.9. <AuthBy RADSEC> parameters

3.77. <AuthBy SAFEWORD>

3.78. <AuthBy FREERADIUSSQL>

3.79. <AuthBy HTGROUP>

3.79.1. GroupFilename

3.80. <AuthBy HOTSPOT>

3.81. <AuthBy FIDELIO>

3.81.1. Protocol

3.81.2. Port

3.81.3. Host

3.81.4. Baudrate

3.81.5. Databits

3.81.6. Parity

3.81.7. Stopbits

3.81.8. Handshake

3.81.9. ReadCharTimeout

3.81.10. TransmitTimeout

3.81.11. ReconnectTimeout

3.81.12. InterfaceFamily

3.81.13. FieldSeparator

3.81.14. BindAddress

3.81.15. MaxBufferSize

3.81.16. UseChecksums

3.81.17. LinkRecords

3.81.18. GuestNameField

3.81.19. GuestPasswordField

3.81.20. ComputeCostHook

3.81.21. UserPasswordHook

3.81.22. CentsPerSecond

3.81.23. PostingRecordID

3.81.24. PostingExtraFields

3.81.25. MessageHook

3.81.26. CheckoutGraceTime

3.81.27. HandleAcctStatusTypes

3.82. <AuthBy HOTSPOTFIDELIO>

3.83. <AuthBy FIDELIOHOTSPOT>

3.84. <AuthBy PRESENCESQL>

3.85. <AuthBy HANDLER>

3.85.1. HandlerId

3.86. <AuthBy WIMAX>

3.87. <AuthBy SQLYUBIKEY>

3.87.1. AuthSelect

3.87.2. UpdateQuery

3.87.3. Require2Factor

3.87.4. CheckSecretId

3.88. <AuthBy YUBIKEYVALIDATIONSERVER>

3.88.1. ValidationServerURL

3.88.2. OTPProtocol

3.88.3. APIVersion

3.88.4. ClientID

3.88.5. APIKey

3.88.6. OTPCharset

3.88.7. Timeout

3.88.8. SSLVerify

3.88.9. SSLCAPath

3.88.10. SSLCAFile

3.89. <AuthBy SQLHOTP>

3.89.1. AuthSelect

3.89.2. AuthSelectParam

3.89.3. UpdateQuery

3.89.4. UpdateQueryParam

3.89.5. Require2Factor

3.89.6. DefaultDigits

3.89.7. MaxBadLogins

3.89.8. BadLoginWindow

3.89.9. ResyncWindow

3.90. <AuthBy SQLTOTP>

3.90.1. AuthSelect

3.90.2. AuthSelectParam

3.90.3. UpdateQuery

3.90.4. UpdateQueryParam

3.90.5. Require2Factor

3.90.6. EncryptedPIN

3.90.7. DefaultDigits

3.90.8. MaxBadLogins

3.90.9. BadLoginWindow

3.90.10. DelayWindow

3.90.11. TimeStep

3.90.12. TimeStepOrigin

3.91. <AuthBy SQLAUTHBY>

3.91.1. AuthBySelect

3.91.2. AuthBySelectParam

3.91.3. Class

3.91.4. DefaultParam

3.91.5. ParamColumnDef

3.92. <AuthBy HEIMDALDIGEST>

3.92.1. KdigestPath

3.92.2. KdigestSuffix

3.92.3. KdigestRealm

3.93. <AuthBy SIP2>

3.93.1. Port

3.93.2. Host

3.93.3. Delimiter

3.93.4. Timeout

3.93.5. Retries

3.93.6. FailureBackoffTime

3.93.7. LoginUserID

3.93.8. LoginPassword

3.93.9. LocationCode

3.93.10. TerminalPassword

3.93.11. Institution

3.93.12. SendChecksum

3.93.13. VerifyChecksum

3.93.14. SIP2Hook

3.94. <AuthBy DUO>

3.95. <AuthBy DIAMETER>

3.96. <AuthBy RATELIMIT>

3.96.1. MaxRate

3.96.2. MaxRateResult

3.97. <AuthBy GOSSIP>

3.97.1. Gossip

3.98. <AuthBy DYNAUTH>

3.98.1. NasAddrAttribute

3.98.2. SessionCheck

3.98.3. PreHandlerHook

3.99. <AuthBy RADIUSBYATTR>

3.100. <AuthBy RADIATORPROXY>

3.100.1. DynAuthPort

3.101. <AuthBy RATELIMITSOURCE>

3.101.1. SourceKey1

3.101.2. SourceKey2

3.101.3. MaxRate1

3.101.4. MaxRate2

3.101.5. Policer1_Size

3.101.6. Policer2_Size

3.101.7. TimeWindow1

3.101.8. TimeWindow2

3.101.9. MaxRateResult

3.102. <AuthBy FAILUREPOLICY>

3.103. <AuthBy SQLFAILUREPOLICY>

3.104. <AuthLog xxxxxx>

3.104.1. Identifier

3.104.2. LogSuccess

3.104.3. LogFailure

3.104.4. LogIgnore

3.105. <AuthLog FILE>

3.105.1. Filename

3.105.2. SuccessFormat

3.105.3. FailureFormat

3.105.4. IgnoreFormat

3.105.5. LogFormatHook

3.106. <AuthLog SQL>

3.106.1. SuccessQuery

3.106.2. SuccessQueryParam

3.106.3. FailureQuery

3.106.4. FailureQueryParam

3.106.5. IgnoreQuery

3.106.6. IgnoreQueryParam

3.107. <AuthLog SYSLOG>

3.107.1. Facility

3.107.2. Priority

3.107.3. SuccessFormat

3.107.4. FailureFormat

3.107.5. IgnoreFormat

3.107.6. LogSock

3.107.7. LogPath

3.107.8. LogHost

3.107.9. LogOpt

3.107.10. LogIdent

3.107.11. LogPort

3.107.12. MaxMessageLength

3.108. <AuthLog EVENTLOG>

3.108.1. SuccessFormat

3.108.2. FailureFormat

3.108.3. IgnoreFormat

3.109. <AcctLog xxxxxx>

3.109.1. LogFormatHook

3.110. <AcctLog EVENTLOG>

3.110.1. LogFormat

3.111. <AcctLog FILE>

3.111.1. LogFormat

3.111.2. OutputFormat

3.111.3. AcctLogOutputDef

3.111.4. Filename

3.112. <AcctLog SQL>

3.112.1. LogQuery

3.112.2. LogQueryParam

3.113. <AcctLog SYSLOG>

3.113.1. Facility

3.113.2. Priority

3.113.3. LogFormat

3.113.4. LogSock

3.113.5. LogPath

3.113.6. LogPort

3.113.7. LogIdent

3.113.8. LogOpt

3.113.9. LogHost

3.113.10. MaxMessageLength

3.114. <AddressAllocator SQL>

3.115. <AddressAllocator DHCP>

3.115.1. Identifier

3.115.2. Host

3.115.3. Port

3.115.4. LocalAddress

3.115.5. DHCPClientIdentifier

3.115.6. DefaultLease

3.115.7. TimeoutMinimum

3.115.8. TimeoutMaximum

3.115.9. TimeoutFactor

3.115.10. ServerPort

3.115.11. Synchronous

3.115.12. SubnetSelectionOption

3.115.13. UserClass

3.115.14. ClientHardwareAddress

3.115.15. UseClassForAllocationInfo

3.115.16. DHCPHostName

3.115.17. DHCPVendorClass

3.116. <AddressAllocator DHCPv6>

3.116.1. Identifier

3.116.2. Host

3.116.3. Port

3.116.4. ClientPort

3.116.5. LocalAddress

3.116.6. InterfaceName

3.116.7. InterfaceIndex

3.116.8. DHCPClientIdentifier

3.116.9. DefaultLease

3.116.10. Synchronous

3.116.11. UserClass

3.116.12. AllocateDoneHook

3.117. <Resolver>

3.117.1. Nameservers

3.117.2. Debug

3.117.3. Recurse

3.117.4. TCPTimeout

3.117.5. UDPTimeout

3.117.6. TCPPersistent

3.117.7. UDPPersistent

3.117.8. GetIPV4

3.117.9. GetIPV6

3.117.10. GetRadius

3.117.11. GetRadSec

3.117.12. DirectAddressLookup

3.117.13. NAPTR-Pattern

3.117.14. NegativeCacheTtl

3.117.15. FailureBackoffTime

3.118. <ServerDIAMETER>

3.118.1. Port

3.118.2. BindAddress

3.118.3. Protocol

3.118.4. ReadTimeout

3.118.5. OriginHost

3.118.6. OriginRealm

3.118.7. ProductName

3.118.8. AddToRequest

3.118.9. DefaultRealm

3.118.10. PreHandlerHook

3.118.11. SupportedVendorIds

3.118.12. ConvertCommand

3.118.13. AuthApplicationIds

3.118.14. AcctApplicationIds

3.118.15. MaxBufferSize

3.118.16. DisconnectTraceLevel

3.118.17. StreamMaxClients

3.118.18. PacketTrace

3.118.19. PostDiaToRadiusConversionHook

3.118.20. PostRadiusToDiaConversionHook

3.118.21. Clients

3.119. <ServerTACACSPLUS>

3.119.1. Key

3.119.2. EncryptedKey

3.119.3. Port

3.119.4. BindAddress

3.119.5. AuthorizationReplace

3.119.6. AuthorizationAdd

3.119.7. AddToRequest

3.119.8. AuthorizationTimeout

3.119.9. DefaultRealm

3.119.10. GroupMemberAttr

3.119.11. AuthorizeGroup

3.119.12. AuthorizeGroupAttr

3.119.13. AllowAuthorizeOnly

3.119.14. UsernamePrompt

3.119.15. PasswordPrompt

3.119.16. IdleTimeout

3.119.17. AuthenticationStartHook

3.119.18. AuthenticationContinueHook

3.119.19. PreHandlerHook

3.119.20. SingleSession

3.119.21. PacketTrace

3.119.22. DisconnectTraceLevel

3.119.23. DisconnectWhenIgnore

3.119.24. ContextId

3.119.25. GroupCacheFile

3.119.26. Clients

3.120. <ServerRADSEC>

3.120.1. Port

3.120.2. BindAddress

3.120.3. Secret

3.120.4. RewriteUsername

3.120.5. StripFromRequest

3.120.6. AddToRequest

3.120.7. AddToRequestIfNotExist

3.120.8. AllowInReject

3.120.9. DefaultRealm

3.120.10. Protocol

3.120.11. PreHandlerHook

3.120.12. Identifier

3.120.13. PacketTrace

3.120.14. StatusServer

3.120.15. MaxBufferSize

3.120.16. DisconnectTraceLevel

3.120.17. StreamMaxClients

3.120.18. Clients

3.121. <ServerHTTP>

3.121.1. Port

3.121.2. Username

3.121.3. Password

3.121.4. AuthBy

3.121.5. AuthByPolicy

3.121.6. AuthLog

3.121.7. AuditTrail

3.121.8. LogMicroseconds

3.121.9. SessionTimeout

3.121.10. LogMaxLines

3.121.11. Trace

3.121.12. DefaultPrivilegeLevel

3.121.13. PageNotFoundHook

3.121.14. Clients

3.122. <StatsLog xxxxxx>

3.122.1. Interval

3.122.2. StatsType

3.122.3. RateCalculationInterval

3.122.4. OutputFormat

3.122.5. StatsExcludeObject

3.122.6. StatsInclude

3.122.7. FarmWorkerSpacing

3.123. <StatsLog FILE>

3.123.1. Filename

3.123.2. Format

3.123.3. Header

3.124. <StatsLog SQL>

3.124.1. InsertQuery

3.125. <StatsLog REDIS>

3.125.1. StatsKey

3.126. <DiaStatsLog xxxxxx>

3.127. <DiaStatsLog FILE>

3.127.1. Filename

3.128. <DiaStatsLog REDIS>

3.128.1. StatsKey

3.128.2. OutputFormat

3.129. <DiaStatsLog SQL>

3.129.1. InsertQuery

3.129.2. TableName

3.130. <MessageLog xxxxxx>

3.130.1. Identifier

3.130.2. LogSelectHook

3.131. <MessageLog FILE>

3.131.1. Filename

3.131.2. Format

3.131.3. Encoding

3.132. <Monitor>

3.132.1. Port

3.132.2. Clients

3.132.3. BindAddress

3.132.4. AuthBy, <AuthBy xxxxxx> and AuthByPolicy

3.132.5. Username

3.132.6. Password

3.132.7. TraceOnly

3.132.8. StatisticsOnly

3.132.9. LogMicroseconds

3.132.10. LogTraceId

3.132.11. LogFarmInstance

3.133. <GossipRedis>

3.133.1. Host

3.133.2. Port

3.133.3. Sock

3.133.4. Sentinels

3.133.5. SentinelService

3.133.6. SentinelPort

3.133.7. Password

3.133.8. Prefix

3.133.9. InstanceId

3.133.10. DbIndex

3.133.11. Timeout

3.133.12. FailureBackoffTime

3.134. <GossipUDP>

4. Running radiusd

5. Details on starting Radiator during system start-up

6. Testing tools

7. Check and reply items

7.1. Check items

7.2. Reply items

8. Rewriting user names

9. File formats

10. Configuring Radiator with GUI

10.1. Login page

10.2. Home Page

10.3. Administration

10.3.1. Server status

10.3.2. View log

10.3.3. Logout

10.4. Configuration

10.4.1. Edit

10.4.2. Load config file

10.4.3. Save

10.5. Miscellaneous

10.5.1. Licence

10.5.2. Support

10.5.3. System

10.5.4. Perl

10.5.5. Modules

10.6. Advanced

10.6.1. Manual edit

10.6.2. Reset server

11. Using Gossip framework

12. Adding custom AuthBy modules

13. Compatibility with other servers

14. Execution sequence and hook processing

15. Interoperation with iPASS Roaming

16. RadSec (RFC 6614)

17. Extensible Authentication Protocol (EAP)

17.1. EAP MD5-Challenge

17.2. EAP One-Time-Password

17.3. EAP Generic-Token

17.4. EAP TLS

17.5. EAP LEAP

17.6. EAP TTLS

17.7. EAP SIM

17.8. EAP AKA

17.9. EAP AKA’

17.10. EAP PEAP

17.11. EAP MSCHAPV2

17.12. EAP PAX

17.13. EAP PSK

17.14. EAP PWD

18. Monitor command language

18.1. Object naming

18.2. Commands

18.2.1. BINARY

18.2.2. CHALLENGE

18.2.3. DESCRIBE objectname

18.2.4. GET objectname

18.2.5. HELP

18.2.6. ID

18.2.7. LIST objectname

18.2.8. LOGIN username password

18.2.9. RESTART

18.2.10. TRACE n

18.2.11. TRACE_USERNAME user name

18.2.12. SET objectname parameter value

18.2.13. STATS objectname

18.2.14. QUIT

19. Using SQL with various database vendors

19.1. General

19.2. MySQL and MariaDB

19.3. PostgreSQL

19.4. Oracle

19.5. Microsoft SQL Server

19.6. SQLite

19.7. Firebird

19.8. ODBC

19.9. Sybase

19.10. InterBase

19.11. Informix

19.12. CSV

19.13. DB2 and other database servers

20. Performance and tuning

21. Getting help