denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

conf: Install config files world-readable but warn about permissions for certain options

Browse Source
This commit is contained in:
Tobias Brunner
2014-02-12 15:16:57 +01:00
parent 5422bb9070
commit efce4559e8
12 changed files with 28 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/plugins/attr-sql.opt
+2 -1
View File
@@ -1,5 +1,6 @@
charon.plugins.attr-sql.database
Database URI for attr-sql plugin used by charon.
Database URI for attr-sql plugin used by charon. If it contains a password,
make sure to adjust the permissions of the config file accordingly.
charon.plugins.attr-sql.lease_history = yes
Enable logging of SQL IP pool leases.
conf/plugins/eap-radius.opt
+4 -2
View File
@@ -27,7 +27,8 @@ charon.plugins.eap-radius.dae.port = 3799
Port to listen for DAE requests.
charon.plugins.eap-radius.dae.secret
Shared secret used to verify/sign DAE messages.
Shared secret used to verify/sign DAE messages. If set, make sure to adjust
the permissions of the config file accordingly.
charon.plugins.eap-radius.eap_start = no
Send EAP-Start instead of EAP-Identity to start RADIUS conversation.
@@ -65,7 +66,8 @@ charon.plugins.eap-radius.port = 1812
Port of RADIUS server (authentication).
charon.plugins.eap-radius.secret =
Shared secret between RADIUS and NAS.
Shared secret between RADIUS and NAS. If set, make sure to adjust the
permissions of the config file accordingly.
charon.plugins.eap-radius.server =
IP/Hostname of RADIUS server.
conf/plugins/sql.opt
+2 -1
View File
@@ -1,5 +1,6 @@
charon.plugins.sql.database =
Database URI for charons SQL plugin.
Database URI for charon's SQL plugin. If it contains a password, make
sure to adjust the permissions of the config file accordingly.
charon.plugins.sql.loglevel = -1
Loglevel for logging to SQL database.
conf/plugins/tnc-ifmap.opt
+2 -1
View File
@@ -17,4 +17,5 @@ charon.plugins.tnc-ifmap.server_cert =
Path to X.509 certificate file of IF-MAP server.
charon.plugins.tnc-ifmap.username_password =
Credentials of IF-MAP client of the form username:password.
Credentials of IF-MAP client of the form username:password. If set, make
sure to adjust the permissions of the config file accordingly.
conf/plugins/tnc-pdp.opt
+2 -1
View File
@@ -14,7 +14,8 @@ charon.plugins.tnc-pdp.radius.port = 1812
RADIUS server port the strongSwan PDP is listening on.
charon.plugins.tnc-pdp.radius.secret =
Shared RADIUS secret between strongSwan PDP and NAS.
Shared RADIUS secret between strongSwan PDP and NAS. If set, make sure to
adjust the permissions of the config file accordingly.
charon.plugins.tnc-pdp.server =
Name of the strongSwan PDP as contained in the AAA certificate.