NAME

       radiusd - RADIUS authentication/accounting server

SYNOPSIS

       radiusd [-a DIR] [-b] [-d DIR] [-h] [-f FILE] [-i IP_ADDRESS] [-l FILE] [-o] [-p NUM]
              [-q NUM] [-s] [-t NUM] [-v] [-w NUM] [-x]

DESCRIPTION

       radiusd is the RADIUS authentication and accounting server.

OPTIONS

       -a DIR Set the directory for RADIUS accounting logs  to  DIR.   The  default  location  is
              /var/log/radiusd-livingston.

       -b     Use  users  DB  database file /etc/radiusd-livingston/users.db rather than the flat
              text file /etc/radiusd-livingston/users.  builddbm(8) may be used  to  create  this
              database file.

       -d DIR Set the database directory to DIR, rather than the default /etc/radiusd-livingston.

       -f FILE
              Use  FILE  as  a password file instead of using getpwnam(3) calls for "System" type
              authentication.

       -h     Show summary of options.

       -i IP_ADDR
              Bind the RADIUS server to  IP_ADDR  address,  rather  than  accepting  for  all  IP
              addresses on the local machine.

       -l FILE
              Log to FILE rather than the default behaviour of logging through syslog.

              If  debugging  is  set,  the default behaviour is to log to /dev/tty and setting -l
              syslog in this case only will log through syslog.

       -p NUM Sets the listening port of radiusd to NUM for access requests, NUM+1 for accounting
              requests,  NUM+5  and  NUM+6 for handling proxy requests. The default is to use the
              entries radius, radacct, radius-proxy, and radacct-proxy in /etc/services or  1645,
              1646,  1815  and  1816 respectively. (Debian's /etc/services has radius as 1812 and
              radacct as 1813 in  accordance  with  the  RFCs,  but  has  no  entries  for  proxy
              services.)  Most  RADIUS  clients  default to 1645 and 1646, even though that is at
              variance with the RFCs.

       -o     Accept all-zero accounting request authenticators.

              The -o flag is provided  for  backwards  compatibility  with  non-compliant  RADIUS
              clients.  If  radiusd is run with the -o flag, it logs unsigned accounting records,
              and flags them with "Request-Authenticator = None".  If radiusd is run without  the
              -o flag, it does not log unsigned accounting records.

       -q NUM Set  the  maximum  number of outstanding requests (default 100), setting a limit on
              the number of child processes radiusd will spawn off to handle authentication.

       -s     Single process mode. When set radiusd does  not  fork  off  a  separate  accounting
              server,  and  does  not  fork  off  separate  authentication  responders  for  each
              authentication request.  This mode is needed if you wish to use the  Virtual  Ports
              feature.

       -t NUM Set  the  maximum  time  in seconds for a child authentication responder to live to
              NUM. This catches responders that have  become  unresponsive.  The  default  is  30
              seconds.

       -v     Print version number of radiusd on standard error.

       -w NUM Sets the maximum time in seconds for the proxy server to wait for a response before
              discarding the request to NUM. The default is 30 seconds.

       -x     Debug mode.

SIGNALS

       SIGUSR1
              Increment debugging level.

       SIGUSR2
              Disables debugging.

       SIGHUP is ignored. Changes to the clients and proxy files are  automatically  noticed  and
              acted upon. There is no need to tell radiusd to reread them.

FILES

       /etc/radiusd-livingston/dictionary
              RADIUS  dictionary.   /etc/radiusd-livingston/clients  List  of  RADIUS clients and
              their shared secrets.

       /etc/radiusd-livingston/proxy
              Proxy configuration.

       /etc/radiusd-livingston/users
              RADIUS users database (plain ASCII format)

       /etc/radiusd-livingston/users.db
              RADIUS users database (Berkeley DB 2.x format), made by builddbm

       /var/log/radiusd-livingston/CLIENT/details
              RADIUS accounting logs for CLIENT.

AUTHOR

       radiusd is copyright 1999 Lucent Technologies Inc. All rights reserved.

       This manual page was written by Paul Martin  <pm@debian.org>,  for  the  Debian  GNU/Linux
       system (but may be used by others).

SEE ALSO

       builddbm(8), db_intro(3)

                                                                                       RADIUSD(8)