# radius.cfg
#
Trace	4

PidFile	/var/run/radiusd.pid

AuthPort 1812
AcctPort 1813

LogDir		/var/log/radius	
LogFile		%L/%Y-%m-%d-logfile

DictionaryFile /etc/radius/dictionary

<Client 192.168.100.11>
	IdenticalClients \
	xxx.xxx.xxx.xxx
	Secret xxxxxx
</Client>

<Client xxx.xxx.xxx.xxx>
	Secret xxxxxxxx
	PreHandlerHook sub { ${$_[0]}->add_attr('Vendor-Specific', 'dialup'); }
</Client>


<AuthBy LDAP2>
	Identifier ldap_dialup
	Host 192.168.100.10
	Port 389
	AuthDN cn=root,o=easynet.net
	AuthPassword xxxxxxxxxxx
	BaseDN o=easynet.net
	UsernameAttr uid
	PasswordAttr userPassword
	#EncryptedPasswordAttr userPassword 
	HoldServerConnection
	AuthAttrDef ipaddr,Framed-IP-Address,reply
	AuthAttrDef ipNetmask,Framed-IP-Netmask,reply
	AuthAttrDef protocol,Framed-Protocol,reply
	AuthAttrDef ipPool,Ascend-Assign-IP-Pool,reply
	AuthAttrDef ipRouteMetric,Ascend-Metric,reply
	AuthAttrDef minChannels,Ascend-Minimum-Channels,reply
	AuthAttrDef maxChannels,Ascend-Maximum-Channels,reply
	AuthAttrDef baseChannels,Ascend-Base-Channel-Count,reply
	AuthAttrDef idleTime,Ascend-Idle-Limit,reply
	SearchFilter (&(uid=$name)(|(services=pstn)(services=isdn))(status=active))
</AuthBy>

<Handler Vendor-Specific=dialup>
	RewriteUsername s/^([^@]+)$/$1\@easynet.fr/
	AuthBy ldap_dialup 
	AcctLogFileName %L/dial/%c/%f-%g-%i
</Handler>