summaryrefslogtreecommitdiff
path: root/radsecproxy.conf-example
diff options
context:
space:
mode:
authorLinus Nordberg <linus@nordu.net>2011-04-01 20:42:49 +0200
committerLinus Nordberg <linus@nordu.net>2011-04-01 20:42:49 +0200
commit010285e8814349c31ffb04f7ed0f3c0e3a3c878c (patch)
treeb884a8d5473d26763a6d2bae175ecdd0c71a5e7e /radsecproxy.conf-example
parentfb2fa29c56639e83fce9867b0dafe802e02bf8fe (diff)
Add configuration options for F-Ticks logging.
Diffstat (limited to 'radsecproxy.conf-example')
-rw-r--r--radsecproxy.conf-example25
1 files changed, 25 insertions, 0 deletions
diff --git a/radsecproxy.conf-example b/radsecproxy.conf-example
index 6d24ba8..9ec003d 100644
--- a/radsecproxy.conf-example
+++ b/radsecproxy.conf-example
@@ -17,6 +17,7 @@
#SourceTCP *:33000
#SourceTLS *:33001
#SourceDTLS *:33001
+
# Optional log level. 3 is default, 1 is less, 5 is more
#LogLevel 3
# Optional LogDestination, else stderr used for logging
@@ -28,6 +29,30 @@
#LogDestination x-syslog:///
#LogDestination x-syslog:///log_local2
+# For generating log entries conforming to the F-Ticks system, specify
+# F-Ticks-Reporting with one of
+# None -- Do not log in F-Ticks format. This is the default.
+# Basic -- Do log in F-Ticks format but do not log VISINST.
+# Full -- Do log in F-Ticks format and do log VISINST.
+
+# You can optionally specify F-Ticks-MAC in order to determine if and
+# how Calling-Station-Id is logged.
+# Static -- Use a static string as a placeholder for
+# Calling-Station-Id. This is the default.
+# Original -- Log Calling-Station-Id as-is.
+# VendorHashed -- Keep first three segments as-is, hash the rest.
+# VendorKeyHashed -- Like VendorHashed but salt with F-Ticks-Key.
+# FullyHashed -- Hash the entire string.
+# FullyKeyHashed -- Like FullyHashed but salt with F-Ticks-Key.
+
+# In order to use F-Ticks-MAC with one of VendorKeyHashed or
+# FullyKeyHashed, specify a key with F-Ticks-Key.
+# F-Ticks-Key <key>
+
+# Default F-Ticks configuration:
+#F-Ticks-Reporting None
+#F-Ticks-Mac FullyKeyHashed
+
# There is an option for doing some simple loop prevention. Note that
# the LoopPrevention directive can be used in server blocks too,
# overriding what's set here in the basic settings.