From 70bf8712bfbccfccfbc088e9a866492453962514 Mon Sep 17 00:00:00 2001
From: Gabriel Detraz <detraz@crans.org>
Date: Sun, 10 May 2015 19:12:38 +0200
Subject: [PATCH] On met le freeradius/proxy.conf dans bcfg2 avec import de la
 clef depuis secret

---
 Bundler/freeradius.xml           |  1 +
 Python/etc/freeradius/proxy.conf | 30 ++++++++++++++++++++++++++++++
 2 files changed, 31 insertions(+)
 create mode 100644 Python/etc/freeradius/proxy.conf

diff --git a/Bundler/freeradius.xml b/Bundler/freeradius.xml
index 517c48d..e1014bc 100644
--- a/Bundler/freeradius.xml
+++ b/Bundler/freeradius.xml
@@ -2,6 +2,7 @@
   <Group name="nas-auth-server">
     <Path name="/etc/freeradius/radiusd.conf" />
     <Path name="/etc/freeradius/eap.conf" />
+    <Python name="/etc/freeradius/proxy.conf" />
   </Group>
   <Path name="/etc/init.d/freeradius" />
   <Package name="freeradius" />
diff --git a/Python/etc/freeradius/proxy.conf b/Python/etc/freeradius/proxy.conf
new file mode 100644
index 0000000..8f31005
--- /dev/null
+++ b/Python/etc/freeradius/proxy.conf
@@ -0,0 +1,30 @@
+info["owner"] = "root"
+info["group"] = "root"
+info["perms"] = 0644
+
+include("secrets")
+
+print """realm FEDEREZ {
+      auth_pool = federez_radius_servers
+      nostrip
+}
+
+home_server_pool federez_radius_servers {
+      type = fail-over
+      home_server = baldrick
+}
+
+home_server baldrick {
+      type = auth
+      ipaddr = 138.231.142.239
+      port = 1812 
+      secret = """ + secrets.federez_wifi + """
+      require_message_authenticator = yes
+      response_window = 20
+      zombie_period = 40
+      revive_interval = 120
+      status_check = status-server
+      check_interval = 30
+      num_answers_to_alive = 3
+}
+"""