prefix 			= /usr/local
exec_prefix 		= ${prefix}
sysconfdir 		= ${prefix}/etc
localstatedir 		= ${prefix}/var
sbindir 		= ${exec_prefix}/sbin
logdir 			= ${localstatedir}/log/radius
raddbdir 		= ${sysconfdir}/raddb
radacctdir 		= ${logdir}/radacct
confdir 		= ${raddbdir}
run_dir 		= ${localstatedir}/run/radiusd
log_file 		= ${logdir}/radius.log
libdir 			= ${exec_prefix}/lib
pidfile 		= ${run_dir}/radiusd.pid
checkrad 		= ${sbindir}/checkrad

max_request_time 	= 30
delete_blocked_requests = no
cleanup_delay 		= 5
max_requests 		= 1024
bind_address 		= *
port 			= 0
hostname_lookups 	= no
allow_core_dumps 	= no
regular_expressions	= yes
extended_expressions	= yes
log_stripped_names 	= no
log_auth 		= no
log_auth_badpass 	= no
log_auth_goodpass 	= no
usercollide 		= no
lower_user 		= no
lower_pass 		= no
nospace_user 		= no
nospace_pass 		= no
proxy_requests  	= no

$INCLUDE  ${confdir}/clients.conf

security {
	max_attributes = 200
	reject_delay = 1
	status_server = no
}

thread pool {
 	start_servers		= 5
 	max_servers 		= 32
 	min_spare_servers 	= 3
 	max_spare_servers 	= 10
 	max_requests_per_server	= 0
}

modules {
	unix {
		cache 		= no
		cache_reload 	= 600
		radwtmp 	= ${logdir}/radwtmp
	}

	realm suffix {
		format 		= suffix
		delimiter 	= "@"
		ignore_default 	= no
		ignore_null 	= no
	}

	realm realmpercent {
		format 		= suffix
		delimiter 	= "%"
		ignore_default 	= no
		ignore_null 	= no
	}

	checkval {
		item-name 	= Calling-Station-Id
		check-name 	= Calling-Station-Id
		data-type 	= string
	}
	
	preprocess {
		huntgroups 			= ${confdir}/huntgroups
		hints 				= ${confdir}/hints
		with_ascend_hack 		= no
		ascend_channels_per_line 	= 23
		with_ntdomain_hack 		= no
		with_specialix_jetstream_hack 	= no
		with_cisco_vsa_hack 		= no
	}

	files {
		usersfile 	= ${confdir}/users
		acctusersfile 	= ${confdir}/acct_users
		compat 		= no
	}

	detail {
		detailfile 	= ${radacctdir}/%{Client-IP-Address}/detail-%Y%m%d
		detailperm 	= 0600
	}

	acct_unique {
		key 		= "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"
	}
	
	radutmp {
		filename 	= ${logdir}/radutmp
		username 	= %{User-Name}
		case_sensitive 	= yes
		check_with_nas 	= yes		
		perm 		= 0600
		callerid 	= "yes"
	}

	attr_filter {
		attrsfile 	= ${confdir}/attrs
	}

	counter daily {
		filename 	= ${raddbdir}/db.daily
		key 		= User-Name
		count-attribute = Acct-Session-Time
		reset 		= daily
		counter-name 	= Daily-Session-Time
		check-name 	= Max-Daily-Session
		allowed-servicetype 	= Framed-User
		cache-size 		= 5000
	}

	always fail {
		rcode 		= fail
	}
	always reject {
		rcode 		= reject
	}
	always ok {
		rcode 		= ok
		simulcount 	= 0
		mpp 		= no
	}

	expr {
	}

	digest {
	}

	exec {
		wait 		= yes
		input_pairs 	= request
	}

	exec echo {
		wait 		= yes
		program 	= "/bin/echo %{User-Name}"
		input_pairs 	= request
		output_pairs 	= reply
		#packet_type 	= Access-Accept
	}
}

instantiate {
 exec
 expr
}

authorize {
 preprocess
 suffix
 files
}

authenticate {
 unix
}

preacct {
 preprocess
 acct_unique
 suffix
 files
}

accounting {
 detail
 unix
 radutmp
}

session {
 radutmp
}