|
|
|
|
radiusconfig(8) BSD System Manager's Manual radiusconfig(8) NAME
radiusconfig -- tool to configure radiusd SYNOPSIS
radiusconfig command [command-options] [-q] DESCRIPTION
radiusconfig is a utility for configuring radiusd and its configuration files. It must be run by root. USAGE
-q Suppress prompts. Queries -getconfig [RADIUS-DB-Directory] Returns configuration data from radiusd.conf and eap.conf in plist format. Reads the configuration files from /etc/raddb unless RADIUS-DB- Directory is specified. -getconfigxml [RADIUS-DB-Directory] Returns configuration data from radiusd.conf and eap.conf in xml plist format. Reads the configuration files from /etc/raddb unless RADIUS- DB-Directory is specified. -nascount Returns the number of RADIUS clients. -naslist [--with-status] Returns the list of RADIUS clients in plist format. If the --with-status option is used, an IMCP ping is sent to each client and the responses, or lack thereof, are included in the results. -naslistxml [--with-status] Returns the list of RADIUS clients in xml plist format. If the --with-status option is used, an IMCP ping is sent to each client and the responses, or lack thereof, are included in the results. -help Print usage information. -ver Displays version information. Setup ---capture-base-station base-station-IP primary-RADIUS-IP [secondary=IP] [wpa-key-timeout=minutes] [wait-for-restart] Pairs an Airport Base Station to a RADIUS server. The shared secret is set in the RADIUS client database and on the base station. -disable-tls Changes eap.conf to contain a commented-out TLS section. -enable-tls Changes eap.conf to contain an active TLS section. -installcerts private-key certificate [trusted-ca-list [yes | no [common-name]]] Changes eap.conf to contain an active TLS section and configures the certificates. The yes or no option specifies whether or not to check a certificate revocation list. The random file is replaced and the dh file is created if absent. -addclient nas-name shortname [type] Adds a client. -importclients xml-plist-file Imports a list of clients from a file. -removeclient nas-name [nas-name ...] Removes a client. -setconfig key value [key value ...] Sets parameters in the radiusd.conf and eap.conf files. -setgroup nas-name group-name Assigns an access control group for a specific client of the RADIUS server. -rotatelog [-n file-count] base-file Preserves file-count log files. -autorotatelog [on | off | status] [-n file-count] Configures a periodic task to rotate the radius logs on a daily basis. -getssid host Queries the base station at the host address for its WiFi network name (SSID). -start Tells launchd to keep RADIUS running. -stop Disables RADIUS in launchd. FILES
/usr/sbin/radiusconfig /etc/raddb/eap.conf /etc/raddb/radiusd.conf SEE ALSO
radiusd(8) MacOSX June 2, 2019 MacOSX
