gitea_admin
98c2fa6240
- update else condition on the line 239 in templates/Deployment - update st-common version from 0.1.10 to 0.1.12 on Chart.yaml file - add gitlab ci/cd pipeline to package the Helm chart into a .tgz. and Publish it to GitLab’s Helm package registry
126 lines
2.3 KiB
Plaintext
126 lines
2.3 KiB
Plaintext
######################################################################
|
|
#
|
|
# This is a virtual server that handles *only* inner tunnel
|
|
# requests for EAP-TTLS and PEAP types.
|
|
#
|
|
######################################################################
|
|
|
|
server inner-tunnel {
|
|
|
|
listen {
|
|
ipaddr = 127.0.0.1
|
|
port = 18120
|
|
type = auth
|
|
}
|
|
|
|
authorize {
|
|
filter_username
|
|
# filter_inner_identity
|
|
chap
|
|
mschap
|
|
# unix
|
|
# IPASS
|
|
suffix
|
|
# ntdomain
|
|
|
|
update control {
|
|
&Proxy-To-Realm := LOCAL
|
|
}
|
|
|
|
eap {
|
|
ok = return
|
|
}
|
|
|
|
files
|
|
-sql
|
|
# smbpasswd
|
|
-ldap
|
|
# daily
|
|
expiration
|
|
logintime
|
|
pap
|
|
}
|
|
|
|
authenticate {
|
|
Auth-Type PAP {
|
|
pap
|
|
}
|
|
|
|
Auth-Type CHAP {
|
|
chap
|
|
}
|
|
|
|
Auth-Type MS-CHAP {
|
|
mschap
|
|
}
|
|
|
|
mschap
|
|
# pam
|
|
|
|
# Auth-Type LDAP {
|
|
# ldap
|
|
# }
|
|
|
|
eap
|
|
}
|
|
|
|
session {
|
|
radutmp
|
|
# sql
|
|
}
|
|
|
|
# Post-Authentication
|
|
post-auth {
|
|
# cui-inner
|
|
|
|
# update outer.session-state {
|
|
# User-Name := &User-Name
|
|
# }
|
|
|
|
# reply_log
|
|
-sql
|
|
# ldap
|
|
# moonshot_host_tid
|
|
# moonshot_realm_tid
|
|
# moonshot_coi_tid
|
|
|
|
if (0) {
|
|
update reply {
|
|
User-Name !* ANY
|
|
Message-Authenticator !* ANY
|
|
EAP-Message !* ANY
|
|
Proxy-State !* ANY
|
|
MS-MPPE-Encryption-Types !* ANY
|
|
MS-MPPE-Encryption-Policy !* ANY
|
|
MS-MPPE-Send-Key !* ANY
|
|
MS-MPPE-Recv-Key !* ANY
|
|
}
|
|
|
|
update {
|
|
&outer.session-state: += &reply:
|
|
}
|
|
}
|
|
|
|
Post-Auth-Type REJECT {
|
|
-sql
|
|
attr_filter.access_reject
|
|
|
|
update outer.session-state {
|
|
&Module-Failure-Message := &request:Module-Failure-Message
|
|
}
|
|
}
|
|
}
|
|
|
|
pre-proxy {
|
|
# files
|
|
# attr_filter.pre-proxy
|
|
# pre_proxy_log
|
|
}
|
|
|
|
post-proxy {
|
|
# post_proxy_log
|
|
# attr_filter.post-proxy
|
|
eap
|
|
}
|
|
|
|
} # inner-tunnel server block |