users

RADIUS协议的认证计费服务

#anonymous Password = "guest", Framed-Protocol = PPP
#	Filter-Id = "anonymous"

#anonymous Password = "guest", Framed-Protocol = SLIP
#	Filter-Id = "anonymous"

#	A few simple examples:

bonze	Password = "bonze"
	Service-Type = Framed,
	Framed-Protocol = PPP

comma	Password = "comma"
xp	Password = "xp"

#[e-mail]	Password = "hi", Comment = "group accnt", Simultaneous-Use = 10
#	Session-Timeout = 7200,
#	Filter-Id = "anonymous"

#judy	Authentication-Type = Realm
#	Ascend:Ascend-Idle-Limit = 30
#	Filter-Id = "noway"

#	An authentication type of "Realm" indicates authentication is to
#	be done according to the realm name a user has appended to his/her
#	user name (i.e., <userid>@<realm>).  The authfile is used to indicate
#	how to perform authentication for all the valid realm names which
#	may appear.  A special DEFAULT entry may be placed in the authfile
#	to indicate the proper action to take with realm names which do not
#	explicitly appear in the authfile.  The DEFAULT entry will not,
#	however, match a null realm name (i.e., just <userid> is provided).
#	In this case, a special NULL entry may be placed in the authfile to
#	specify what to do with such requests.

DEFAULT	Authentication-Type = Realm
	Filter-Id = "unlim"

# These "canonical" user entries are searched for after matching a user
# from one of the above user entries (including the DEFAULT entry), but
# only if that first entry did not specify a "Service-Type" attribute.
# The server does this by matching the "hint" supplied by the client in
# the "Service-Type" attribute found in the request.
#
# This feature allows the same user name to be used for either PPP, SLIP,
# dumb-terminal or other access.  Note: the "Authentication-Type = None"
# check item on each of the following entries prevents it from ever being
# treated as a normal user id.
#
# The server checks for eight "Service-Type" values (Login, <<Framed>>,
# Callback-Login, Callback-Framed, Outbound-User, Administrative-User,
# Exec-User and Authenticate-Only) and equates them with the "dumbuser",
# <<"pppuser", "slipuser",>> "cblogin", "cbframed", "obuser", "admin",
# "execuser" and "authonly" entries.  The first three "users" are shown:

dumbuser Authentication-Type = None
	Service-Type = Login,
	Login-Service = Telnet,
	Login-IP-Host = 255.255.255.255

pppuser Authentication-Type = None
	Service-Type = Framed,
	Framed-Protocol = PPP,
	Framed-IP-Netmask = 255.255.255.0,
	Framed-Routing = None,
	Framed-MTU = 1500,
	Framed-Compression = Van-Jacobson-TCP-IP

slipuser Authentication-Type = None
	Service-Type = Framed,
	Framed-Protocol = SLIP,
	Framed-IP-Netmask = 255.255.255.0,
	Framed-Routing = None,
	Framed-MTU = 1500,
	Framed-Compression = Van-Jacobson-TCP-IP