Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

radiusconfig(8) [osx man page]

radiusconfig(8) 					    BSD System Manager's Manual 					   radiusconfig(8)

NAME
radiusconfig -- tool to configure radiusd SYNOPSIS
radiusconfig command [command-options] [-q] DESCRIPTION
radiusconfig is a utility for configuring radiusd and its configuration files. It must be run by root. USAGE
-q Suppress prompts. Queries -getconfig [RADIUS-DB-Directory] Returns configuration data from radiusd.conf and eap.conf in plist format. Reads the configuration files from /etc/raddb unless RADIUS-DB- Directory is specified. -getconfigxml [RADIUS-DB-Directory] Returns configuration data from radiusd.conf and eap.conf in xml plist format. Reads the configuration files from /etc/raddb unless RADIUS- DB-Directory is specified. -nascount Returns the number of RADIUS clients. -naslist [--with-status] Returns the list of RADIUS clients in plist format. If the --with-status option is used, an IMCP ping is sent to each client and the responses, or lack thereof, are included in the results. -naslistxml [--with-status] Returns the list of RADIUS clients in xml plist format. If the --with-status option is used, an IMCP ping is sent to each client and the responses, or lack thereof, are included in the results. -help Print usage information. -ver Displays version information. Setup ---capture-base-station base-station-IP primary-RADIUS-IP [secondary=IP] [wpa-key-timeout=minutes] [wait-for-restart] Pairs an Airport Base Station to a RADIUS server. The shared secret is set in the RADIUS client database and on the base station. -disable-tls Changes eap.conf to contain a commented-out TLS section. -enable-tls Changes eap.conf to contain an active TLS section. -installcerts private-key certificate [trusted-ca-list [yes | no [common-name]]] Changes eap.conf to contain an active TLS section and configures the certificates. The yes or no option specifies whether or not to check a certificate revocation list. The random file is replaced and the dh file is created if absent. -addclient nas-name shortname [type] Adds a client. -importclients xml-plist-file Imports a list of clients from a file. -removeclient nas-name [nas-name ...] Removes a client. -setconfig key value [key value ...] Sets parameters in the radiusd.conf and eap.conf files. -setgroup nas-name group-name Assigns an access control group for a specific client of the RADIUS server. -rotatelog [-n file-count] base-file Preserves file-count log files. -autorotatelog [on | off | status] [-n file-count] Configures a periodic task to rotate the radius logs on a daily basis. -getssid host Queries the base station at the host address for its WiFi network name (SSID). -start Tells launchd to keep RADIUS running. -stop Disables RADIUS in launchd. FILES
/usr/sbin/radiusconfig /etc/raddb/eap.conf /etc/raddb/radiusd.conf SEE ALSO
radiusd(8) MacOSX June 2, 2019 MacOSX

Check Out this Related Man Page

RADTEST(1)							Yard Radius Manual							RADTEST(1)

NAME
radtest - RADIUS server test program SYNOPSIS
radtest [ -afnrvx ] [ -d called_station_id ] [ -g calling_station_id ] [ -i id ] [ -p port ] [ -s secret ] [ -t type ] -u username pass- word DESCRIPTION
radtest is a program useful to test the configuration of a running RADIUS daemon. You need to add localhost to servers' authorized clients. This program is a client for authentication protocol only, it does not manage accounting packets currently. You could use it to test either the YARD RADIUS daemon or any other standard RADIUS server. OPTIONS
-a Sets accounting protocol on. Not yet implemented. -d called_station_id Sets the called station identifier for building packets. -f Sets user type to framed. This is overrided by -t option below. -g calling_station_id Sets the calling station identifier for building packets. -h Prints out usage of the command. -i id Sets the packet identifier to number `id'. -n Not yet implemented. -p port Uses udp port `port' instead of the value specified in /etc/services or the default one (1645). -r Not yet implemented. -s secret Specifies the secret key to use (default is localkey) -v Prints version information. -l file Changes the logging file. -x Prints (or should do so) debugging messages while compiling. FILES
/usr/conf/users This file contains the human readable information for users' accounting and authorization. See radius_attributes(5) for details about its syntax. /usr/conf/users.db The same of the previous one as compiled in by builddbm in GDBM format. It needs to be compiled again every time you make changes to the previous one and without restarting radiusd . /usr/conf/dictionary This read-only file contains the codes and formats for standard and vendor RADIUS protocol attributes and values along with their human readable representation. It is subject to change, due to new access server supports. It is a plain text file with a pletora of comments in it. SEE ALSO
radiusd(8), radlast(1), radlist(1), radtest(1), radwatch(1), radius_attributes(1), gdbm(3) COPYRIGHT
Copyright (C) 1992-1999 Lucent Inc. All rights reserved. Copyright (C) 1999-2004 Francesco Paolo Lovergine. All rights reserved. See the LICENSE file enclosed within this software for conditions of use and distribution. This is a pure ISO BSD Open Source License . NOTES
The syntax of the source users file is not described here. Please, refer to the official Livingston documentation, which includes the RADIUS for UNIX Administrator's Guide. 1.1 Aug 28, 2004 RADTEST(1)
Man Page

Featured Tech Videos