Page Comparison

enable = no
      

     override_cert_url = yes
 

url = "http://127.0.0.1/ocsp/"
              

}
        }
       

tls 

{
                

tls = 

tls-common
        }

     ttls {
   

    tls = tls-common
  

root@RadiusApacheDS:~# more /etc/freeradius/3.0/modssites-availableenabled/eapdefault  | grep "#" -v | grep -v "^[[:space:]]*$"
server eapdefault {
listen  {
     default_eap_type = md5
        timer_expire = 60 type = auth
        ignore_unknown_eap_typesipaddr = no*
        cisco_accounting_username_bugport = no0
        max_sessions =limit ${max_requests}
        md5 {     max_connections = 16
 }         leap {   lifetime = 0
   }         gtc { idle_timeout = 30
        }
}
listen {
 auth_type = PAP     ipaddr = *
 }       port = tls-config tls-common {0
        type = acct
       private_key_password =limit whatever{
        }
}
listen {
    private_key_file = /etc/ssl/private/ssl-cert-snakeoil.key  type = auth
        port = 0
 certificate_file = /etc/ssl/certs/ssl-cert-snakeoil.pem     limit {
          ca_file = /etc/ssl/certs/ca-certificates.crt  max_connections = 16
            dh_file = ${certdir}/dh
  lifetime = 0
              caidle_pathtimeout = ${cadir}30
        }
}
listen {
    cipher_list    ipv6addr = "DEFAULT"::
        port = 0
     cipher_server_preference   type = acct
    no    limit {
        }
}
authorize disable_tlsv1_1{
= yes       filter_username
        preprocess
disable_tlsv1 = yes      chap
        mschap
 tls_min_version = "1.2"     digest
        suffix
  tls_max_version = "1.2"    eap {
           ecdh_curve = "prime256v1"   ok = return
        }
  cache {     files
        -sql
        -ldap
 enable = no     expiration
        logintime
        pap
}
storeauthenticate {
        Auth-Type PAP {
                pap
    Tunnel-Private-Group-Id    }
        Auth-Type CHAP {
         }       chap
        }
}        Auth-Type MS-CHAP {
      verify {         mschap
        }
        mschap
       ocsp {digest
        eap
}
preacct {
        preprocess
     enable = no acct_unique
        suffix
        files
}
accounting {
  override_cert_url = yes    detail
        unix
        -sql
  url = "http://127.0.0.1/ocsp/"    exec
        attr_filter.accounting_response
}
session {
}
post-auth {
      }         tls {
  if (session-state:User-Name && reply:User-Name && request:User-Name && (reply:User-Name == request:User-Name)) {
             tls = tls-common update reply {
     }         ttls {         &User-Name !* ANY
     tls = tls-common          }
      default_eap_type = md5   }
        update {
       copy_request_to_tunnel = no       &reply: += &session-state:
       use_tunneled_reply =}
no        -sql
        virtual_serverexec
= "inner-tunnel"       remove_reply_message_if_eap
 }         peapPost-Auth-Type REJECT {
 
              tls = tls-commonsql
                defaultattr_eapfilter.access_typereject
= mschapv2               eap
 copy_request_to_tunnel = no             remove_reply_message_if_eap
   use_tunneled_reply = no   }
        Post-Auth-Type Challenge {
  virtual_server = "inner-tunnel"      }
}
pre-proxy {
}
post-proxy {
       mschapv2 {eap
}
       }
}
root@RadiusApacheDS:~#

}
root@RadiusApacheDS: