testing: Remove support for Debian jessie and FreeRADIUS 2

This commit is contained in:
Tobias Brunner
2021-10-01 15:05:44 +02:00
parent dff5a0cab8
commit 5b9c46b988
97 changed files with 3 additions and 1705 deletions
@@ -1,5 +0,0 @@
eap {
default_eap_type = md5
md5 {
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,43 +0,0 @@
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1 +0,0 @@
carol Cleartext-Password := "4iChxLT3"
@@ -1,5 +0,0 @@
eap {
default_eap_type = md5
md5 {
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,39 +0,0 @@
authorize {
suffix
files
}
authenticate {
pap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
}
@@ -1 +0,0 @@
carol Cleartext-Password := "4iChxLT3"
@@ -1,5 +0,0 @@
eap {
default_eap_type = md5
md5 {
}
}
@@ -1,5 +0,0 @@
realm LOCAL {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,42 +0,0 @@
authorize {
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
@@ -1,5 +0,0 @@
eap {
default_eap_type = md5
md5 {
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,43 +0,0 @@
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
@@ -1,18 +0,0 @@
eap {
md5 {
}
default_eap_type = peap
tls {
private_key_file = /etc/raddb/certs/aaaKey.pem
certificate_file = /etc/raddb/certs/aaaCert.pem
CA_file = /etc/raddb/certs/strongswanCert.pem
cipher_list = "DEFAULT"
dh_file = /etc/raddb/certs/dh
random_file = /etc/raddb/certs/random
}
peap {
default_eap_type = md5
use_tunneled_reply = yes
virtual_server = "inner-tunnel"
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,43 +0,0 @@
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,32 +0,0 @@
server inner-tunnel {
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
session {
radutmp
}
post-auth {
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
} # inner-tunnel server block
@@ -1,2 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
dave Cleartext-Password := "W7R0g3do"
@@ -1,5 +0,0 @@
eap {
default_eap_type = sim
sim {
}
}
@@ -1,5 +0,0 @@
realm LOCAL {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,53 +0,0 @@
authorize {
files
update reply {
EAP-Sim-Rand1 := "%{control:EAP-Sim-Rand1}"
EAP-Sim-Rand2 := "%{control:EAP-Sim-Rand2}"
EAP-Sim-Rand3 := "%{control:EAP-Sim-Rand3}"
EAP-Sim-SRES1 := "%{control:EAP-Sim-SRES1}"
EAP-Sim-SRES2 := "%{control:EAP-Sim-SRES2}"
EAP-Sim-SRES3 := "%{control:EAP-Sim-SRES3}"
EAP-Sim-KC1 := "%{control:EAP-Sim-KC1}"
EAP-Sim-KC2 := "%{control:EAP-Sim-KC2}"
EAP-Sim-KC3 := "%{control:EAP-Sim-KC3}"
}
eap {
ok = return
}
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1 +0,0 @@
228060123456001 EAP-Type := SIM, EAP-Sim-RAND1 := 0x30000000000000000000000000000000, EAP-Sim-SRES1 := 0x30112233, EAP-Sim-KC1 := 0x305566778899AABB, EAP-Sim-RAND2 := 0x31000000000000000000000000000000, EAP-Sim-SRES2 := 0x31112233, EAP-Sim-KC2 := 0x315566778899AABB, EAP-Sim-RAND3 := 0x32000000000000000000000000000000, EAP-Sim-SRES3 := 0x32112233, EAP-Sim-KC3 := 0x325566778899AABB
@@ -1,5 +0,0 @@
eap {
default_eap_type = sim
sim {
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,54 +0,0 @@
authorize {
files
suffix
update reply {
EAP-Sim-Rand1 := "%{control:EAP-Sim-Rand1}"
EAP-Sim-Rand2 := "%{control:EAP-Sim-Rand2}"
EAP-Sim-Rand3 := "%{control:EAP-Sim-Rand3}"
EAP-Sim-SRES1 := "%{control:EAP-Sim-SRES1}"
EAP-Sim-SRES2 := "%{control:EAP-Sim-SRES2}"
EAP-Sim-SRES3 := "%{control:EAP-Sim-SRES3}"
EAP-Sim-KC1 := "%{control:EAP-Sim-KC1}"
EAP-Sim-KC2 := "%{control:EAP-Sim-KC2}"
EAP-Sim-KC3 := "%{control:EAP-Sim-KC3}"
}
eap {
ok = return
}
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,2 +0,0 @@
[email protected] EAP-Type := SIM, EAP-Sim-RAND1 := 0x30000000000000000000000000000000, EAP-Sim-SRES1 := 0x30112233, EAP-Sim-KC1 := 0x305566778899AABB, EAP-Sim-RAND2 := 0x31000000000000000000000000000000, EAP-Sim-SRES2 := 0x31112233, EAP-Sim-KC2 := 0x315566778899AABB, EAP-Sim-RAND3 := 0x32000000000000000000000000000000, EAP-Sim-SRES3 := 0x32112233, EAP-Sim-KC3 := 0x325566778899AABB
[email protected] EAP-Type := SIM, EAP-Sim-RAND1 := 0x33000000000000000000000000000000, EAP-Sim-SRES1 := 0x33112233, EAP-Sim-KC1 := 0x335566778899AABB, EAP-Sim-RAND2 := 0x34000000000000000000000000000000, EAP-Sim-SRES2 := 0x34112233, EAP-Sim-KC2 := 0x345566778899AABB, EAP-Sim-RAND3 := 0x35000000000000000000000000000000, EAP-Sim-SRES3 := 0x35112233, EAP-Sim-KC3 := 0x355566778899AABB
@@ -1,5 +0,0 @@
eap {
default_eap_type = sim
sim {
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,72 +0,0 @@
authorize {
preprocess
chap
mschap
files
suffix
update reply {
EAP-Sim-Rand1 := "%{control:EAP-Sim-Rand1}"
EAP-Sim-Rand2 := "%{control:EAP-Sim-Rand2}"
EAP-Sim-Rand3 := "%{control:EAP-Sim-Rand3}"
EAP-Sim-SRES1 := "%{control:EAP-Sim-SRES1}"
EAP-Sim-SRES2 := "%{control:EAP-Sim-SRES2}"
EAP-Sim-SRES3 := "%{control:EAP-Sim-SRES3}"
EAP-Sim-KC1 := "%{control:EAP-Sim-KC1}"
EAP-Sim-KC2 := "%{control:EAP-Sim-KC2}"
EAP-Sim-KC3 := "%{control:EAP-Sim-KC3}"
}
eap {
ok = return
}
unix
files
expiration
logintime
pap
}
authenticate {
Auth-Type PAP {
pap
}
Auth-Type CHAP {
chap
}
Auth-Type MS-CHAP {
mschap
}
unix
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,2 +0,0 @@
[email protected] EAP-Type := SIM, EAP-Sim-RAND1 := 0x30000000000000000000000000000000, EAP-Sim-SRES1 := 0x30112233, EAP-Sim-KC1 := 0x305566778899AABB, EAP-Sim-RAND2 := 0x31000000000000000000000000000000, EAP-Sim-SRES2 := 0x31112233, EAP-Sim-KC2 := 0x315566778899AABB, EAP-Sim-RAND3 := 0x32000000000000000000000000000000, EAP-Sim-SRES3 := 0x32112233, EAP-Sim-KC3 := 0x325566778899AABB
[email protected] EAP-Type := SIM, EAP-Sim-RAND1 := 0x33000000000000000000000000000000, EAP-Sim-SRES1 := 0x33112233, EAP-Sim-KC1 := 0x335566778899AABB, EAP-Sim-RAND2 := 0x34000000000000000000000000000000, EAP-Sim-SRES2 := 0x34112233, EAP-Sim-KC2 := 0x345566778899AABB, EAP-Sim-RAND3 := 0x35000000000000000000000000000000, EAP-Sim-SRES3 := 0x35112233, EAP-Sim-KC3 := 0x355566778899AABB
@@ -1,13 +0,0 @@
eap {
default_eap_type = tls
tls {
certdir = /etc/raddb/certs
cadir = /etc/raddb/certs
private_key_file = /etc/raddb/certs/aaaKey.pem
certificate_file = /etc/raddb/certs/aaaCert.pem
CA_file = /etc/raddb/certs/strongswanCert.pem
cipher_list = "DEFAULT"
dh_file = /etc/raddb/certs/dh
random_file = /etc/raddb/certs/random
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,41 +0,0 @@
authorize {
eap {
ok = return
}
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
@@ -1,18 +0,0 @@
eap {
md5 {
}
default_eap_type = ttls
tls {
private_key_file = /etc/raddb/certs/aaaKey.pem
certificate_file = /etc/raddb/certs/aaaCert.pem
CA_file = /etc/raddb/certs/strongswanCert.pem
cipher_list = "DEFAULT"
dh_file = /etc/raddb/certs/dh
random_file = /etc/raddb/certs/random
}
ttls {
default_eap_type = md5
use_tunneled_reply = yes
virtual_server = "inner-tunnel"
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,43 +0,0 @@
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,32 +0,0 @@
server inner-tunnel {
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
session {
radutmp
}
post-auth {
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
} # inner-tunnel server block
@@ -1,2 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
dave Cleartext-Password := "W7R0g3do"
@@ -1,5 +0,0 @@
eap {
default_eap_type = sim
sim {
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,72 +0,0 @@
authorize {
preprocess
chap
mschap
files
suffix
update reply {
EAP-Sim-Rand1 := "%{control:EAP-Sim-Rand1}"
EAP-Sim-Rand2 := "%{control:EAP-Sim-Rand2}"
EAP-Sim-Rand3 := "%{control:EAP-Sim-Rand3}"
EAP-Sim-SRES1 := "%{control:EAP-Sim-SRES1}"
EAP-Sim-SRES2 := "%{control:EAP-Sim-SRES2}"
EAP-Sim-SRES3 := "%{control:EAP-Sim-SRES3}"
EAP-Sim-KC1 := "%{control:EAP-Sim-KC1}"
EAP-Sim-KC2 := "%{control:EAP-Sim-KC2}"
EAP-Sim-KC3 := "%{control:EAP-Sim-KC3}"
}
eap {
ok = return
}
unix
files
expiration
logintime
pap
}
authenticate {
Auth-Type PAP {
pap
}
Auth-Type CHAP {
chap
}
Auth-Type MS-CHAP {
mschap
}
unix
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,2 +0,0 @@
228060123456001 EAP-Type := SIM, EAP-Sim-RAND1 := 0x30000000000000000000000000000000, EAP-Sim-SRES1 := 0x30112233, EAP-Sim-KC1 := 0x305566778899AABB, EAP-Sim-RAND2 := 0x31000000000000000000000000000000, EAP-Sim-SRES2 := 0x31112233, EAP-Sim-KC2 := 0x315566778899AABB, EAP-Sim-RAND3 := 0x32000000000000000000000000000000, EAP-Sim-SRES3 := 0x32112233, EAP-Sim-KC3 := 0x325566778899AABB
228060123456002 EAP-Type := SIM, EAP-Sim-RAND1 := 0x33000000000000000000000000000000, EAP-Sim-SRES1 := 0x33112233, EAP-Sim-KC1 := 0x335566778899AABB, EAP-Sim-RAND2 := 0x34000000000000000000000000000000, EAP-Sim-SRES2 := 0x34112233, EAP-Sim-KC2 := 0x345566778899AABB, EAP-Sim-RAND3 := 0x35000000000000000000000000000000, EAP-Sim-SRES3 := 0x35112233, EAP-Sim-KC3 := 0x355566778899AABB
@@ -1,5 +0,0 @@
eap {
default_eap_type = md5
md5 {
}
}
@@ -1,5 +0,0 @@
realm LOCAL {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,42 +0,0 @@
authorize {
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,4 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
Framed-IP-Address = 10.3.0.1
dave Cleartext-Password := "W7R0g3do"
Framed-IP-Address = 10.3.0.2
@@ -1,5 +0,0 @@
eap {
default_eap_type = md5
md5 {
}
}
@@ -1,5 +0,0 @@
realm LOCAL {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,42 +0,0 @@
authorize {
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,4 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
Class = "Research"
dave Cleartext-Password := "W7R0g3do"
Class = "Accounting"
@@ -1,5 +0,0 @@
eap {
default_eap_type = md5
md5 {
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,43 +0,0 @@
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
@@ -1,5 +0,0 @@
eap {
default_eap_type = md5
md5 {
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,43 +0,0 @@
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
@@ -1,18 +0,0 @@
eap {
md5 {
}
default_eap_type = peap
tls {
private_key_file = /etc/raddb/certs/aaaKey.pem
certificate_file = /etc/raddb/certs/aaaCert.pem
CA_file = /etc/raddb/certs/strongswanCert.pem
cipher_list = "DEFAULT"
dh_file = /etc/raddb/certs/dh
random_file = /etc/raddb/certs/random
}
peap {
default_eap_type = md5
use_tunneled_reply = yes
virtual_server = "inner-tunnel"
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,43 +0,0 @@
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,32 +0,0 @@
server inner-tunnel {
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
session {
radutmp
}
post-auth {
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
} # inner-tunnel server block
@@ -1,2 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
dave Cleartext-Password := "W7R0g3do"
@@ -1,5 +0,0 @@
eap {
default_eap_type = sim
sim {
}
}
@@ -1,5 +0,0 @@
realm LOCAL {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,53 +0,0 @@
authorize {
files
update reply {
EAP-Sim-Rand1 := "%{control:EAP-Sim-Rand1}"
EAP-Sim-Rand2 := "%{control:EAP-Sim-Rand2}"
EAP-Sim-Rand3 := "%{control:EAP-Sim-Rand3}"
EAP-Sim-SRES1 := "%{control:EAP-Sim-SRES1}"
EAP-Sim-SRES2 := "%{control:EAP-Sim-SRES2}"
EAP-Sim-SRES3 := "%{control:EAP-Sim-SRES3}"
EAP-Sim-KC1 := "%{control:EAP-Sim-KC1}"
EAP-Sim-KC2 := "%{control:EAP-Sim-KC2}"
EAP-Sim-KC3 := "%{control:EAP-Sim-KC3}"
}
eap {
ok = return
}
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1 +0,0 @@
228060123456001 EAP-Type := SIM, EAP-Sim-RAND1 := 0x30000000000000000000000000000000, EAP-Sim-SRES1 := 0x30112233, EAP-Sim-KC1 := 0x305566778899AABB, EAP-Sim-RAND2 := 0x31000000000000000000000000000000, EAP-Sim-SRES2 := 0x31112233, EAP-Sim-KC2 := 0x315566778899AABB, EAP-Sim-RAND3 := 0x32000000000000000000000000000000, EAP-Sim-SRES3 := 0x32112233, EAP-Sim-KC3 := 0x325566778899AABB
@@ -1,5 +0,0 @@
eap {
default_eap_type = sim
sim {
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,72 +0,0 @@
authorize {
preprocess
chap
mschap
files
suffix
update reply {
EAP-Sim-Rand1 := "%{control:EAP-Sim-Rand1}"
EAP-Sim-Rand2 := "%{control:EAP-Sim-Rand2}"
EAP-Sim-Rand3 := "%{control:EAP-Sim-Rand3}"
EAP-Sim-SRES1 := "%{control:EAP-Sim-SRES1}"
EAP-Sim-SRES2 := "%{control:EAP-Sim-SRES2}"
EAP-Sim-SRES3 := "%{control:EAP-Sim-SRES3}"
EAP-Sim-KC1 := "%{control:EAP-Sim-KC1}"
EAP-Sim-KC2 := "%{control:EAP-Sim-KC2}"
EAP-Sim-KC3 := "%{control:EAP-Sim-KC3}"
}
eap {
ok = return
}
unix
files
expiration
logintime
pap
}
authenticate {
Auth-Type PAP {
pap
}
Auth-Type CHAP {
chap
}
Auth-Type MS-CHAP {
mschap
}
unix
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,2 +0,0 @@
[email protected] EAP-Type := SIM, EAP-Sim-RAND1 := 0x30000000000000000000000000000000, EAP-Sim-SRES1 := 0x30112233, EAP-Sim-KC1 := 0x305566778899AABB, EAP-Sim-RAND2 := 0x31000000000000000000000000000000, EAP-Sim-SRES2 := 0x31112233, EAP-Sim-KC2 := 0x315566778899AABB, EAP-Sim-RAND3 := 0x32000000000000000000000000000000, EAP-Sim-SRES3 := 0x32112233, EAP-Sim-KC3 := 0x325566778899AABB
[email protected] EAP-Type := SIM, EAP-Sim-RAND1 := 0x33000000000000000000000000000000, EAP-Sim-SRES1 := 0x33112233, EAP-Sim-KC1 := 0x335566778899AABB, EAP-Sim-RAND2 := 0x34000000000000000000000000000000, EAP-Sim-SRES2 := 0x34112233, EAP-Sim-KC2 := 0x345566778899AABB, EAP-Sim-RAND3 := 0x35000000000000000000000000000000, EAP-Sim-SRES3 := 0x35112233, EAP-Sim-KC3 := 0x355566778899AABB
@@ -1,5 +0,0 @@
eap {
default_eap_type = sim
sim {
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,72 +0,0 @@
authorize {
preprocess
chap
mschap
files
suffix
update reply {
EAP-Sim-Rand1 := "%{control:EAP-Sim-Rand1}"
EAP-Sim-Rand2 := "%{control:EAP-Sim-Rand2}"
EAP-Sim-Rand3 := "%{control:EAP-Sim-Rand3}"
EAP-Sim-SRES1 := "%{control:EAP-Sim-SRES1}"
EAP-Sim-SRES2 := "%{control:EAP-Sim-SRES2}"
EAP-Sim-SRES3 := "%{control:EAP-Sim-SRES3}"
EAP-Sim-KC1 := "%{control:EAP-Sim-KC1}"
EAP-Sim-KC2 := "%{control:EAP-Sim-KC2}"
EAP-Sim-KC3 := "%{control:EAP-Sim-KC3}"
}
eap {
ok = return
}
unix
files
expiration
logintime
pap
}
authenticate {
Auth-Type PAP {
pap
}
Auth-Type CHAP {
chap
}
Auth-Type MS-CHAP {
mschap
}
unix
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,2 +0,0 @@
[email protected] EAP-Type := SIM, EAP-Sim-RAND1 := 0x30000000000000000000000000000000, EAP-Sim-SRES1 := 0x30112233, EAP-Sim-KC1 := 0x305566778899AABB, EAP-Sim-RAND2 := 0x31000000000000000000000000000000, EAP-Sim-SRES2 := 0x31112233, EAP-Sim-KC2 := 0x315566778899AABB, EAP-Sim-RAND3 := 0x32000000000000000000000000000000, EAP-Sim-SRES3 := 0x32112233, EAP-Sim-KC3 := 0x325566778899AABB
[email protected] EAP-Type := SIM, EAP-Sim-RAND1 := 0x33000000000000000000000000000000, EAP-Sim-SRES1 := 0x33112233, EAP-Sim-KC1 := 0x335566778899AABB, EAP-Sim-RAND2 := 0x34000000000000000000000000000000, EAP-Sim-SRES2 := 0x34112233, EAP-Sim-KC2 := 0x345566778899AABB, EAP-Sim-RAND3 := 0x35000000000000000000000000000000, EAP-Sim-SRES3 := 0x35112233, EAP-Sim-KC3 := 0x355566778899AABB
@@ -1,13 +0,0 @@
eap {
default_eap_type = tls
tls {
certdir = /etc/raddb/certs
cadir = /etc/raddb/certs
private_key_file = /etc/raddb/certs/aaaKey.pem
certificate_file = /etc/raddb/certs/aaaCert.pem
CA_file = /etc/raddb/certs/strongswanCert.pem
cipher_list = "DEFAULT"
dh_file = /etc/raddb/certs/dh
random_file = /etc/raddb/certs/random
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,41 +0,0 @@
authorize {
eap {
ok = return
}
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
@@ -1,18 +0,0 @@
eap {
md5 {
}
default_eap_type = ttls
tls {
private_key_file = /etc/raddb/certs/aaaKey.pem
certificate_file = /etc/raddb/certs/aaaCert.pem
CA_file = /etc/raddb/certs/strongswanCert.pem
cipher_list = "DEFAULT"
dh_file = /etc/raddb/certs/dh
random_file = /etc/raddb/certs/random
}
ttls {
default_eap_type = md5
use_tunneled_reply = yes
virtual_server = "inner-tunnel"
}
}
@@ -1,5 +0,0 @@
realm strongswan.org {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,43 +0,0 @@
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1,32 +0,0 @@
server inner-tunnel {
authorize {
suffix
eap {
ok = return
}
files
}
authenticate {
eap
}
session {
radutmp
}
post-auth {
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
} # inner-tunnel server block
@@ -1,2 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"
dave Cleartext-Password := "W7R0g3do"
@@ -1,5 +0,0 @@
eap {
default_eap_type = md5
md5 {
}
}
@@ -1,5 +0,0 @@
realm LOCAL {
type = radius
authhost = LOCAL
accthost = LOCAL
}
@@ -1,42 +0,0 @@
authorize {
eap {
ok = return
}
files
}
authenticate {
eap
}
preacct {
preprocess
acct_unique
suffix
files
}
accounting {
detail
unix
radutmp
attr_filter.accounting_response
}
session {
radutmp
}
post-auth {
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
pre-proxy {
}
post-proxy {
eap
}
@@ -1 +0,0 @@
carol Cleartext-Password := "Ar3etTnp"