Skip to content

Commit 7281df2

Browse files
committed
add proxy.conf as a helpful hint
which contains pointers to the real docs, and examples of how the old proxy.conf has moved to the new configuration.
1 parent 68cc08e commit 7281df2

File tree

3 files changed

+64
-1
lines changed

3 files changed

+64
-1
lines changed

raddb/all.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
# The list of files to install.
33
#
44
LOCAL_FILES := clients.conf dictionary \
5-
radiusd.conf trigger.conf panic.gdb
5+
radiusd.conf trigger.conf panic.gdb proxy.conf
66

77
DEFAULT_SITES := default inner-tunnel proxy
88
LOCAL_SITES := $(addprefix raddb/sites-enabled/,$(DEFAULT_SITES))

raddb/proxy.conf

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
#
2+
# = Proxy Configuration
3+
#
4+
# The `proxy.conf` file is not used in version 4. The functionality
5+
# in the old proxy.conf has moved.
6+
#
7+
# For detailed information on upgrading, see:
8+
# doc/antora/modules/howto/pages/upgrade/index.adoc
9+
#
10+
# == home_server sections
11+
#
12+
# The `home_server` definitions are now just RADIUS modules.
13+
#
14+
# See `mods-available/radius`. You can create a module for each home
15+
# server. The configuration is very similar.
16+
#
17+
# You can also send packets to dynamic home servers, without updating
18+
# the configuration or adding new modules!. See the
19+
# `%proxy.sendto.ipaddr()` function in `mods-enabled/radius`.
20+
#
21+
# == home_server_pool sections
22+
#
23+
# The `home_server_pool` sections are now just virtual modules.
24+
#
25+
# See the `load-balance`, `redundant`, and `redundant-load-balance`
26+
# keywords. Since a `home_server` is now just a RADIUS module, there
27+
# is no need to have a separate configuration for load-balanced pools
28+
# of home servers!
29+
#
30+
# The `load-balance` and `redundant-load-balance` keywords now also
31+
# take an optional parameter which can be used to do keyed load
32+
# balancing.
33+
#
34+
# The `instantiate` section is also gone from v4. Instead, you can
35+
# just create a "virtual" module, by putting a `load-balance`
36+
# section as a file directly in the `mods-enabled/` directory.
37+
#
38+
# i.e. instead of using this in `proxy.conf`:
39+
#
40+
# home_server_pool foo {
41+
# type = load-balance
42+
#
43+
# home_server = radius1
44+
# home_server = radius2
45+
# home_server = radius3
46+
#
47+
# }
48+
#
49+
# You can instead use this in `mods-enabled/foo`:
50+
#
51+
# load-balance foo {
52+
# radius1
53+
# radius2
54+
# radius3
55+
# }
56+
#
57+
# == Realms
58+
#
59+
# There is "realm" configuration section. The `realms` module has also been removed.
60+
#
61+
# @todo - this should really be addressed before a v4 release.
62+
#

redhat/freeradius.spec

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1088,6 +1088,7 @@ fi
10881088
%config(noreplace) %{_sysconfdir}/raddb/panic.gdb
10891089
%config(noreplace) %{_sysconfdir}/raddb/radiusd.conf
10901090
%config(noreplace) %{_sysconfdir}/raddb/trigger.conf
1091+
%config(noreplace) %{_sysconfdir}/raddb/proxy.conf
10911092
%config(noreplace) %{_sysconfdir}/raddb/users
10921093

10931094
%config(noreplace) %{_sysconfdir}/raddb/certs

0 commit comments

Comments
 (0)