crans/crans_bcfg2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

freeradius: definition du fichier clients.conf

Browse source
This commit is contained in:
Daniel STAN 2014-11-17 20:24:42 +01:00
parent 21ee918d9e
commit df20e00961
2 changed files with 35 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Bundler/freeradius.xml
View file

@ -1,4 +1,5 @@
<Bundle name="freeradius"> <Bundle name="freeradius">
<Python name="/etc/freeradius/clients.conf" />
<Group name="wifi-auth"> <Group name="wifi-auth">
<!-- Ce fichier n'est nécessaire que pour l'auth wifi (eap) <!-- Ce fichier n'est nécessaire que pour l'auth wifi (eap)
en filaire, on utilise un script custom (qui se connecte en filaire, on utilise un script custom (qui se connecte

42
Python/etc/freeradius/clients.conf
View file

@ -2,12 +2,38 @@
include("secrets") include("secrets")
#info["owner"] = "root" info["owner"] = "root"
#info["group"] = "freeradius" info["group"] = "adm"
#info["perms"] = 0640 info["perms"] = 0640
if has("radius-server") : # TODO: dehardcoder les IPs
@# Les switchs print """
@client 10.231.136.0/24 { # Les switchs
% secret = secrets.radius_key client netmask {
@ shortname = switchs ipaddr = 10.231.136.0
netmask = 24
secret = %(wired_secret)s
shortname = switchs
}
# Les bornes wifi
client netmask {
ipaddr = 138.231.148.0
netmask = 24
secret = %(wifi_secret)s
shortname = wifi
nastype = other
}
# Les bornes wifi (en ipv6)
client netmask {
ipv6addr = fda8:5d34:a228:c04::
netmask = 64
secret = %(wifi_secret)s
shortname = wifi
nastype = other
}
""" % {
'wired_secret': secrets.radius_key,
'wifi_secret': secrets.radius_eap_key,
}