You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
142 lines
3.4 KiB
142 lines
3.4 KiB
#!/bin/sh /etc/rc.common
|
|
# Copyright (C) 2006-2011 OpenWrt.org
|
|
|
|
START=70
|
|
|
|
USE_PROCD=1
|
|
PROG=/usr/sbin/radsecproxy
|
|
CONFFILE=/var/etc/radsecproxy.conf
|
|
LIST_SEP="
|
|
"
|
|
append_params() {
|
|
local param
|
|
local value
|
|
local section="$1"
|
|
shift
|
|
for param in $*; do
|
|
config_get value "$section" "$param"
|
|
[ -z "$value" ] && {
|
|
param=$(echo $param | tr [A-Z] [a-z])
|
|
config_get value "$section" "$param"
|
|
}
|
|
IFS="$LIST_SEP"
|
|
for value in $value; do
|
|
[ -n "$value" ] && echo " $param '$value'" >> "$CONFFILE"
|
|
done
|
|
unset IFS
|
|
done
|
|
}
|
|
|
|
append_bools() {
|
|
local param
|
|
local value
|
|
local section="$1"
|
|
shift
|
|
for param in $*; do
|
|
config_get_bool value "$section" "$param"
|
|
[ -z "$value" ] && {
|
|
param=$(echo $param | tr [A-Z] [a-z])
|
|
config_get_bool value "$section" "$param"
|
|
}
|
|
[ -n "$value" ] && {
|
|
[ "$value" -eq 0 ] && echo " $param off" >> "$CONFFILE"
|
|
[ "$value" -eq 1 ] && echo " $param on" >> "$CONFFILE"
|
|
}
|
|
done
|
|
}
|
|
|
|
radsecproxy_options() {
|
|
local cfg="$1"
|
|
append_params "$cfg" \
|
|
Include PidFile LogLevel LogDestination FTicksReporting FTicksMAC FTicksKey \
|
|
FTicksSyslogFacility ListenUDP ListenTCP ListenTLS ListenDTLS SourceUDP \
|
|
SourceTCP SourceTLS SourceDTLS TTLAttribute AddTTL
|
|
append_bools "$cfg" \
|
|
LoopPrevention IPv4Only IPv6Only
|
|
}
|
|
|
|
tls_block() {
|
|
local cfg="$1"
|
|
local name
|
|
config_get name "$cfg" name
|
|
echo "tls '$name' {" >> "$CONFFILE"
|
|
append_params "$cfg" \
|
|
Include CACertificateFile CACertificatePath certificateFile certificateKeyFile \
|
|
certificateKeyPassword cacheExpiry policyOID
|
|
append_bools "$cfg" \
|
|
CRLCheck
|
|
echo "}" >> "$CONFFILE"
|
|
}
|
|
|
|
rewrite_block() {
|
|
local cfg="$1"
|
|
local name
|
|
config_get name "$cfg" name
|
|
echo "rewrite '$name' {" >> "$CONFFILE"
|
|
append_params "$cfg" \
|
|
Include addAttribute addVendorAttribute removeAttribute removeVendorAttribute \
|
|
modifyAttribute
|
|
echo "}" >> "$CONFFILE"
|
|
}
|
|
|
|
client_block() {
|
|
local cfg="$1"
|
|
local name
|
|
config_get name "$cfg" name
|
|
echo "client '$name' {" >> "$CONFFILE"
|
|
append_params "$cfg" \
|
|
Include host type secret tls matchCertificateAttribute duplicateInterval \
|
|
AddTTL fticksVISCOUNTRY fticksVISINST rewrite rewriteIn rewriteOut \
|
|
rewriteAttribute
|
|
append_bools "$cfg" \
|
|
IPv4Only IPv6Only certificateNameCheck
|
|
echo "}" >> "$CONFFILE"
|
|
}
|
|
|
|
server_block() {
|
|
local cfg="$1"
|
|
local name
|
|
config_get name "$cfg" name
|
|
echo "server '$name' {" >> "$CONFFILE"
|
|
append_params "$cfg" \
|
|
Include host port type secret tls matchCertificateAttribute \
|
|
AddTTL rewrite rewriteIn rewriteOut retryCount dynamicLookupCommand \
|
|
retryInterval
|
|
append_bools "$cfg" \
|
|
IPv4Only IPv6Only certificateNameCheck statusServer LoopPrevention
|
|
echo "}" >> "$CONFFILE"
|
|
}
|
|
|
|
realm_block() {
|
|
local cfg="$1"
|
|
local name
|
|
config_get name "$cfg" name
|
|
echo "realm '$name' {" >> "$CONFFILE"
|
|
append_params "$cfg" \
|
|
Include server accountingServer replyMessage
|
|
append_bools "$cfg" \
|
|
accountingResponse
|
|
echo "}" >> "$CONFFILE"
|
|
}
|
|
|
|
start_service() {
|
|
mkdir -p $(dirname $CONFFILE)
|
|
echo "# auto-generated config file from /etc/config/radsecproxy" > $CONFFILE
|
|
config_load 'radsecproxy'
|
|
config_foreach radsecproxy_options options
|
|
config_foreach tls_block tls
|
|
config_foreach rewrite_block rewrite
|
|
config_foreach client_block client
|
|
config_foreach server_block server
|
|
config_foreach realm_block realm
|
|
|
|
procd_open_instance
|
|
procd_set_param command $PROG -f -c $CONFFILE
|
|
procd_set_param file $CONFFILE
|
|
procd_set_param respawn
|
|
procd_close_instance
|
|
}
|
|
|
|
service_triggers() {
|
|
procd_add_reload_trigger 'radsecproxy'
|
|
}
|