/etc/yate/yradius.conf is in yate-core 5.0.0-1-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 | [general]
; set global parameters of the RADIUS client
; enabled: bool: Enable the RADIUS module
;enabled=true
; addr: ipaddress: IP address to bind to - must be set to enable, 0.0.0.0 is OK
;addr=
; port: integer: UDP port to bind to, must be non-zero
;port=1810
; single_socket: bool: Share the socket for requests (not recommended)
;single_socket=false
; local_time: bool: Use local timestamps instead of GMT
;local_time=false
; short_number: bool: Prefer to use parameter "called" over "calledfull"
;short_number=false
; auth_priority: integer: Priority of the user.auth handler
;auth_priority=70
; acct_priority: integer: Priority of the call.cdr handler
;acct_priority=70
; print_attributes: bool: Print returned attributes on debug level ALL
;print_attributes=false
; cisco_attributes: bool: Set hardcoded attributes in Cisco format
;cisco_attributes=true
; quintum_attributes: bool: Set hardcoded attributes in Quintum format
; NOTE: The Cisco and Quintum attributes can be enabled both at the same time
; and the hardcoded attributes will be added as Cisco and Quintum attributes
; quintum_attributes=false
[portabill]
; Settings related to interoperation with PortaOne's PortaBill
; enabled: bool: Enable handling of the routing parameters
;enabled=no
; parallel: bool: Make outgoing calls in parallel instead of sequence
;parallel=no
; simplify: bool: Simplify returned partial URIs by stripping parameters
;simplify=no
; maxcall: int: Maximum time to wait until call is answered in milliseconds
;maxcall=
; stoperror: string: Regular expression matching the names of the errors
; that will terminate the entire call, not just one route
;stoperror=busy
;[nas]
;There can be several sections named [nas] or [nas SOMETHING]
; rad_auth: bool: Enable authentication on this virtual NAS
;rad_auth=yes
; rad_acct: bool: Enable accounting on this virtual NAS
;rad_acct=yes
; rad_server: string: Name of the server to use, default [radius SOMETHING]
;rad_server=
; add: will add an attribute to the RADIUS request
;add:attribute-name=EXPRESSION
;add:subtype:attribute-name=EXPRESSION
; set: will set message parameters
;set:paramname=EXPRESSION
; ret: will set authentication returned attributes back into message
;ret:attribute-name=paramname
; ret-fail: will set returned attributes from auth rejection back into message
;ret-fail:attribute-name=paramname
; Any other parameter will attempt to match the right hand Regexp
;paramname=REGEXP
[nas register]
; Sample SIP REGISTER authentication NAS
rad_acct=false
rad_server=common
protocol=sip
method=REGISTER
add:Service-Type=15
add:Cisco-AVPair=h323-session-protocol=sipv2
[nas invite]
; Sample SIP INVITE authentication NAS
rad_acct=false
rad_server=common
protocol=sip
method=INVITE
add:Service-Type=15
add:Cisco-AVPair=h323-session-protocol=sipv2
; PortaOne specific
;add:Cisco-AVPair=h323-ivr-out=PortaBilling_Routing:SIP
[nas auth]
; Sample authentication NAS
; Settings and matching rules specific to this virtual Network Access Server
rad_acct=no
rad_server=common
; Some RADIUS attributes you're likely to set
add:Service-Type=8
[nas acct]
; Sample accounting NAS
; Settings and matching rules specific to this virtual Network Access Server
rad_auth=no
rad_server=common
; Some RADIUS attributes you're likely to set
add:h323-disconnect-cause=${cause_q931}
add:Acct-Delay-Time=0
[radius common]
; Settings specific to this RADIUS server
; server: ipaddress: IP address of the server - must be set
;server=
; secret: string: Secret token (password) used to authenticate to the server
;secret=
; auth_port: integer: UDP port used by the server for authentication
;auth_port=1812
; acct_port: integer: UDP port used by the server for accounting
;acct_port=1813
; timeout: integer: How much to wait for an answer from the server (milliseconds)
;timeout=2000
; retries: integer: How many attempts to make until timing out
;retries=2
; Some RADIUS attributes you're likely to set
add:Cisco-NAS-Port=${chan}
add:NAS-Identifier=Yate
;add:NAS-IP-Address=
|