47 lines
1.1 KiB
Django/Jinja
47 lines
1.1 KiB
Django/Jinja
{{ ansible_managed | comment }}
|
|
|
|
eap {
|
|
|
|
default_eap_type = peap
|
|
timer_expire = 60
|
|
ignore_unknown_eap_types = no
|
|
cisco_accounting_username_bug = no
|
|
max_sessions = ${max_requests}
|
|
|
|
tls-config tls-common {
|
|
private_key_file = {{ radiusd__tls_private_key_file }}
|
|
certificate_file = {{ radiusd__tls_certificate_file }}
|
|
ca_file = {{ radiusd__tls_ca_file }}
|
|
dh_file = ${certdir}/dh
|
|
cipher_list = {{ radiusd__tls_cipher_list | enquote }}
|
|
cipher_server_preferences = yes
|
|
tls_min_version = "1.2"
|
|
tls_max_version = "1.2" # TODO: 1.3
|
|
# TODO
|
|
# cache {
|
|
# enable = yes
|
|
# lifetime = 24
|
|
# name = "eap"
|
|
# persistdir = "${logdir}/tlscache"
|
|
# store {
|
|
# Tunnel-Private-Group-Id
|
|
# }
|
|
# }
|
|
}
|
|
|
|
peap {
|
|
tls = tls-common
|
|
default_eap_type = gtc
|
|
copy_request_to_tunnel = no
|
|
use_tunneled_reply = no
|
|
virtual_server = inner-tunnel
|
|
}
|
|
|
|
gtc {
|
|
auth_type = local
|
|
}
|
|
|
|
mschapv2 {
|
|
}
|
|
|
|
}
|