#Foreground
#LogStdout
LogDir		/var/log/radiator
DbDir		/etc/radiator

# User a lower trace level in production systems:
Trace 		4

AuthPort 1812
AcctPort 1813

# You will probably want to add other Clients to suit your site,
# one for each NAS you want to work with
#<Client 45.200.1.54>
# 	Secret nit44nac
# 	Identifier IntegerVLANTag
#</Client>

<Client DEFAULT>
	Secret	nit44nac
	DupInterval 0
</Client>

# This handler intercepts the inner authentication requests and sends them to another
# server. The remote Radius server does not need to know anything about TTLS.
<Handler TunnelledByTTLS=1>
	<AuthBy FILE>
		Filename %D/users
	</AuthBy>
</Handler>

<Handler TunnelledByPEAP=1>
	<AuthBy FILE>
		#RewriteUsername         s/^(.*?)\@.*$/$1/

		Filename %D/users
		EAPType MSCHAP-V2
	</AuthBy>
</Handler>

<Handler Realm=test>
	<AuthBy FILE>
		Filename %D/users
		EAPType TTLS,PEAP

		EAPTLS_CAFile %D/cacert.pem

		EAPTLS_CertificateFile %D/cert-srv.pem
		EAPTLS_CertificateType PEM

		EAPTLS_PrivateKeyFile %D/cert-srv.pem
		EAPTLS_PrivateKeyPassword whatever

		EAPTLS_MaxFragmentSize 1000

		AutoMPPEKeys

		SSLeayTrace 4

		# You can configure the User-Name that will be used for the inner
		# authentication. Defaults to 'anonymous'. This can be useful
		# when proxying the inner authentication. If tehre is a realm, it can 
		# be used to choose a local Realm to handle the inner authentication.
		# EAPAnonymous anonymous@some.other.realm
	</AuthBy>
</Handler>

#<Handler Realm=acs>
#	<AuthBy RADIUS>
#		Host 45.200.1.71
#		Secret nit44nac
#	</AuthBy>
#</Handler>

#<Handler Realm=nps>
 #       RewriteUsername s/^([^@]+).*/$1/
#	<AuthBy RADIUS>
#		Host 45.200.1.85
#		Secret nit44nac
#	</AuthBy>
#</Handler>

<Handler User-Name=/nps$/>
 #       RewriteUsername s/^([^@]+).*/$1/
	<AuthBy RADIUS>
		Host 45.200.1.85
		Secret nit44nac
	</AuthBy>
</Handler>

<Handler User-Name=/acs$/>
 #       RewriteUsername s/^([^@]+).*/$1/
	<AuthBy RADIUS>
		Host 45.200.1.71
		Secret nit44nac
	</AuthBy>
</Handler>

<Handler User-Name=/uac$/>
 #       RewriteUsername s/^([^@]+).*/$1/
	<AuthBy RADIUS>
		Host 45.200.1.78
		Secret nit44nac
		AuthPort 1812
		AcctPort 1813
	</AuthBy>
</Handler>

<Handler User-Name=/ide$/>
 #       RewriteUsername s/^([^@]+).*/$1/
	<AuthBy RADIUS>
		AuthPort 1812
		AcctPort 1813
		Host 45.200.1.73
		Secret nit44nac
	</AuthBy>
</Handler>

<Handler User-Name=/rad$/>
 #       RewriteUsername s/^([^@]+).*/$1/
	<AuthBy RADIUS>
		AuthPort 1812
		AcctPort 1813
		Host 45.200.1.72
		Secret nit44nac
	</AuthBy>
</Handler>

<Handler User-Name=/testUser$/>
 #       RewriteUsername s/^([^@]+).*/$1/
	<AuthBy RADIUS>
		AuthPort 1812
		AcctPort 1813
		Host 45.200.1.72
		Secret nit44nac
	</AuthBy>
</Handler>

<Handler User-Name=/xag$/>
 #       RewriteUsername s/^([^@]+).*/$1/
	<AuthBy RADIUS>
                AuthPort 1812
                AcctPort 1813
		Host 45.200.1.90
		Secret nit44nac
	</AuthBy>
</Handler>

<Handler User-Name=/ad$/>
 #       RewriteUsername s/^([^@]+).*/$1/
	<AuthBy RADIUS>
		Host 45.200.1.98
		Secret nit44nac
	</AuthBy>
</Handler>


#<Handler User-Name=/CORP\\/>
 #       RewriteUsername s/^([^@]+).*/$1/
#	<AuthBy RADIUS>
#		Host 45.200.1.85
#		Secret nit44nac
#	</AuthBy>
#</Handler>



#<Handler User-Name=/CORP\/>
 #       RewriteUsername s/^([^@]+).*/$1/
#	<AuthBy RADIUS>
#		Host 45.200.1.85
#		Secret nit44nac
#	</AuthBy>
#</Handler>

#<Handler User-Name=/CORP\\\\/>
 #       RewriteUsername s/^([^@]+).*/$1/
#	<AuthBy RADIUS>
#		Host 45.200.1.85
#		Secret nit44nac
#	</AuthBy>
#</Handler>

#<Handler Realm=radiator>
#	<AuthBy RADIUS>
#		Host 45.200.1.72
#		Secret nit44nac
#	</AuthBy>
#</Handler>

#<Handler Realm=ide>
#        RewriteUsername s/^([^@]+).*/$1/
#	<AuthBy RADIUS>
#		Host 45.200.1.73
#		Secret nit44nac
#                AuthPort 1812
#                AcctPort 1813
#	</AuthBy>
#</Handler>

#<Handler Realm=uac>
#	<AuthBy RADIUS>
#		Host 45.200.1.78
#		Secret nit44nac
#	</AuthBy>
#</Handler>

#<Handler Realm=ad>
#        RewriteUsername s/^([^@]+).*/$1/
#        <AuthBy LDAP2>
#                Host 45.200.1.98
#                Port 3268
#                AuthDN 		corp\ldapadmin
#                AuthPassword    nit44nac
#                BaseDN          cn=Users,dc=corp,dc=nac,dc=ilabs,dc=interop,dc=net
#                ServerChecksPassword
#                UsernameAttr SAMAccountName

#                AuthAttrDef logonHours,MS-Login-Hours,check
#        </AuthBy>
#</Handler>

# Send unknown requests to ACS
<Handler>
	<AuthBy RADIUS>
		Host 45.200.1.71
		Secret nit44nac
	</AuthBy>
</Handler>