Adapt test configurations
Adapt test configurations to the new Debian-based system.
This commit is contained in:
committed by
Tobias Brunner
parent
766466b8d1
commit
533177003c
@@ -4,7 +4,7 @@ carol::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP
|
||||
moon:: cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
|
||||
moon:: ipsec status 2> /dev/null::rw-eap.*ESTABLISHED.*moon.strongswan.org.*[email protected]::YES
|
||||
carol::ipsec status 2> /dev/null::home.*ESTABLISHED.*[email protected].*moon.strongswan.org::YES
|
||||
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::YES
|
||||
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::YES
|
||||
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
|
||||
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
|
||||
moon:: cat /var/log/daemon.log::RADIUS authentication of '[email protected]' failed::YES
|
||||
@@ -12,4 +12,4 @@ moon:: cat /var/log/daemon.log::EAP method EAP_SIM failed for peer dave@strongsw
|
||||
moon:: ipsec status 2> /dev/null::rw-eap.*ESTABLISHED.*moon.strongswan.org.*[email protected]::NO
|
||||
dave:: cat /var/log/daemon.log::received EAP_FAILURE, EAP authentication failed::YES
|
||||
dave:: ipsec status 2> /dev/null::home.*ESTABLISHED::NO
|
||||
dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_seq=1::NO
|
||||
dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::NO
|
||||
|
||||
@@ -0,0 +1,5 @@
|
||||
eap {
|
||||
default_eap_type = sim
|
||||
sim {
|
||||
}
|
||||
}
|
||||
+3
@@ -0,0 +1,3 @@
|
||||
sim_files {
|
||||
simtriplets = "/etc/freeradius/triplets.dat"
|
||||
}
|
||||
-1
@@ -41,4 +41,3 @@ pre-proxy {
|
||||
post-proxy {
|
||||
eap
|
||||
}
|
||||
|
||||
-1
@@ -4,4 +4,3 @@ [email protected],32000000000000000000000000000000,32112233,325566778899AABB
|
||||
[email protected],33000000000000000000000000000000,33112233,335566778899AABB
|
||||
[email protected],34000000000000000000000000000000,34112233,345566778899AABB
|
||||
[email protected],35000000000000000000000000000000,35112233,355566778899AABB
|
||||
|
||||
@@ -1,4 +0,0 @@
|
||||
client PH_IP_MOON1 {
|
||||
secret = gv6URkSs
|
||||
shortname = moon
|
||||
}
|
||||
@@ -1,5 +0,0 @@
|
||||
eap {
|
||||
default_eap_type = sim
|
||||
sim {
|
||||
}
|
||||
}
|
||||
@@ -1,123 +0,0 @@
|
||||
# radiusd.conf -- FreeRADIUS server configuration file.
|
||||
|
||||
prefix = /usr
|
||||
exec_prefix = ${prefix}
|
||||
sysconfdir = /etc
|
||||
localstatedir = /var
|
||||
sbindir = ${exec_prefix}/sbin
|
||||
logdir = ${localstatedir}/log/radius
|
||||
raddbdir = ${sysconfdir}/raddb
|
||||
radacctdir = ${logdir}/radacct
|
||||
|
||||
# name of the running server. See also the "-n" command-line option.
|
||||
name = radiusd
|
||||
|
||||
# Location of config and logfiles.
|
||||
confdir = ${raddbdir}
|
||||
run_dir = ${localstatedir}/run/radiusd
|
||||
|
||||
# Should likely be ${localstatedir}/lib/radiusd
|
||||
db_dir = ${raddbdir}
|
||||
|
||||
# libdir: Where to find the rlm_* modules.
|
||||
libdir = ${exec_prefix}/lib
|
||||
|
||||
# pidfile: Where to place the PID of the RADIUS server.
|
||||
pidfile = ${run_dir}/${name}.pid
|
||||
|
||||
# max_request_time: The maximum time (in seconds) to handle a request.
|
||||
max_request_time = 30
|
||||
|
||||
# cleanup_delay: The time to wait (in seconds) before cleaning up
|
||||
cleanup_delay = 5
|
||||
|
||||
# max_requests: The maximum number of requests which the server keeps
|
||||
max_requests = 1024
|
||||
|
||||
# listen: Make the server listen on a particular IP address, and send
|
||||
listen {
|
||||
type = auth
|
||||
ipaddr = PH_IP_ALICE
|
||||
port = 0
|
||||
}
|
||||
|
||||
# This second "listen" section is for listening on the accounting
|
||||
# port, too.
|
||||
#
|
||||
listen {
|
||||
type = acct
|
||||
ipaddr = PH_IP_ALICE
|
||||
port = 0
|
||||
}
|
||||
|
||||
# hostname_lookups: Log the names of clients or just their IP addresses
|
||||
hostname_lookups = no
|
||||
|
||||
# Core dumps are a bad thing. This should only be set to 'yes'
|
||||
allow_core_dumps = no
|
||||
|
||||
# Regular expressions
|
||||
regular_expressions = yes
|
||||
extended_expressions = yes
|
||||
|
||||
# Logging section. The various "log_*" configuration items
|
||||
log {
|
||||
destination = files
|
||||
file = ${logdir}/radius.log
|
||||
syslog_facility = daemon
|
||||
stripped_names = no
|
||||
auth = yes
|
||||
auth_badpass = yes
|
||||
auth_goodpass = yes
|
||||
}
|
||||
|
||||
# The program to execute to do concurrency checks.
|
||||
checkrad = ${sbindir}/checkrad
|
||||
|
||||
# Security considerations
|
||||
security {
|
||||
max_attributes = 200
|
||||
reject_delay = 1
|
||||
status_server = yes
|
||||
}
|
||||
|
||||
# PROXY CONFIGURATION
|
||||
proxy_requests = yes
|
||||
$INCLUDE proxy.conf
|
||||
|
||||
# CLIENTS CONFIGURATION
|
||||
$INCLUDE clients.conf
|
||||
|
||||
# THREAD POOL CONFIGURATION
|
||||
thread pool {
|
||||
start_servers = 5
|
||||
max_servers = 32
|
||||
min_spare_servers = 3
|
||||
max_spare_servers = 10
|
||||
max_requests_per_server = 0
|
||||
}
|
||||
|
||||
# MODULE CONFIGURATION
|
||||
modules {
|
||||
$INCLUDE ${confdir}/modules/
|
||||
$INCLUDE eap.conf
|
||||
$INCLUDE sql.conf
|
||||
$INCLUDE sql/mysql/counter.conf
|
||||
sim_files {
|
||||
simtriplets = "/etc/raddb/triplets.dat"
|
||||
}
|
||||
}
|
||||
|
||||
# Instantiation
|
||||
instantiate {
|
||||
exec
|
||||
expr
|
||||
expiration
|
||||
logintime
|
||||
}
|
||||
|
||||
# Policies
|
||||
$INCLUDE policy.conf
|
||||
|
||||
# Include all enabled virtual hosts
|
||||
$INCLUDE sites-enabled/
|
||||
@@ -1,7 +1,7 @@
|
||||
moon::ipsec stop
|
||||
carol::ipsec stop
|
||||
dave::ipsec stop
|
||||
alice::/etc/init.d/radiusd stop
|
||||
alice::killall radiusd
|
||||
moon::/etc/init.d/iptables stop 2> /dev/null
|
||||
carol::/etc/init.d/iptables stop 2> /dev/null
|
||||
dave::/etc/init.d/iptables stop 2> /dev/null
|
||||
|
||||
@@ -4,8 +4,8 @@ dave::/etc/init.d/iptables start 2> /dev/null
|
||||
moon::rm /etc/ipsec.d/cacerts/*
|
||||
carol::rm /etc/ipsec.d/cacerts/*
|
||||
dave::rm /etc/ipsec.d/cacerts/*
|
||||
alice::cat /etc/raddb/triplets.dat
|
||||
alice::/etc/init.d/radiusd start
|
||||
alice::cat /etc/freeradius/triplets.dat
|
||||
alice::radiusd
|
||||
moon::ipsec start
|
||||
carol::ipsec start
|
||||
dave::ipsec start
|
||||
|
||||
Reference in New Issue
Block a user