summaryrefslogtreecommitdiff
path: root/radsecproxy.conf.5.xml
diff options
context:
space:
mode:
authorLinus Nordberg <linus@nordu.net>2012-04-12 20:23:14 +0200
committerLinus Nordberg <linus@nordu.net>2012-04-12 20:23:14 +0200
commitc807e7de8300f2bd56c574173c362451182e0e53 (patch)
tree9ed91ebc7727d777f626da61852dca3d7df4a5b3 /radsecproxy.conf.5.xml
parent0b229b06e65ea2d204e32e44fcf26ffd0cfdcc99 (diff)
Document the DynamicLookupCommand option.dynconf2
Closes RADSECPROXY-36.
Diffstat (limited to 'radsecproxy.conf.5.xml')
-rw-r--r--radsecproxy.conf.5.xml16
1 files changed, 16 insertions, 0 deletions
diff --git a/radsecproxy.conf.5.xml b/radsecproxy.conf.5.xml
index 428f2de..2b6367c 100644
--- a/radsecproxy.conf.5.xml
+++ b/radsecproxy.conf.5.xml
@@ -644,6 +644,7 @@ blocktype name {
<literal>AddTTL</literal>, <literal>rewrite</literal>,
<literal>rewriteIn</literal>, <literal>rewriteOut</literal>,
<literal>statusServer</literal>, <literal>retryCount</literal>,
+ <literal>dynamicLookupCommand</literal> and
<literal>retryInterval</literal> and
<literal>LoopPrevention</literal>.
</para>
@@ -679,6 +680,21 @@ blocktype name {
an interval of 5s.
</para>
<para>
+ The option <literal>dynamicLookupCommand</literal> can be used
+ to specify a command that should be executed to dynamically
+ configure a server. The executable file should be given with
+ full path and will be invoked with the name of the realm as its
+ first and only argument. It should either print a valid
+ <literal>server</literal> option on stdout and exit with a code
+ of 0 or print nothing and exit with a non-zero exit code. An
+ example of a shell script resolving the DNS NAPTR records for
+ the realm and then the SRV records for each NAPTR matching
+ 'x-eduroam:radius.tls' is provided in
+ <literal>tools/naptr-eduroam.sh</literal>. This option was
+ added in radsecproxy-1.3 but tends to crash radsecproxy versions
+ earlier than 1.6.
+ </para>
+ <para>
Using the <literal>LoopPrevention</literal> option here
overrides any basic setting of this option. See section
<literal>BASIC OPTIONS</literal> for details on this option.