######################################################################
#  Modifications to the httpd.conf file for mod_auth_radius.c
#  written by Alan DeKok <aland@freeradius.org> for
#  CRYPTOCard Inc.  http://www.cryptocard.com/
#
#  Version: $Id: httpd.conf,v 1.3 2000/06/24 12:11:25 aland Exp $
#
######################################################################
#
#  These configuration options should be ADDED to the httpd.conf file
#  for your site.
#
######################################################################


######################################################################
#
# Tell Apache to load the module.
#
LoadModule radius_auth_module   libexec/mod_auth_radius.so

######################################################################
#
#  The order of the modules listed by 'AddModule' can be important.
# This seems to work for me.
#

#
# just AFTER 'AddModule mod_auth.c
# Add the module 'mod_auth_radius.c'
#
AddModule mod_auth_radius.c


######################################################################
#
# Add to the BOTTOM of httpd.conf
# If we're using mod_auth_radius, then add it's specific
# configuration options.
#
<IfModule mod_auth_radius.c>

#
# AddRadiusAuth server[:port] <shared-secret> [ timeout ]
#
AddRadiusAuth localhost:1645 testing123 5

#
# AddRadiusCookieValid <minutes-for-which-cookie-is-valid>
#
# the special value of 0 (zero) means the cookie is valid forever.
#
AddRadiusCookieValid 5
</IfModule>

######################################################################
#
#  A sample per-directory access-control configuration.  This may
#  go into httpd.conf.  When used in an '.htaccess' file, the
#  text BETWEEN the <Location /secure/> </Location> directives
#  should go into the .htaccess file.
#
#  If you want to be sure it only applies when mod_auth_radius is used,
#  you can also wrap it in an <IfModule> directive, as above.
#
<Location /secure/>

#
# Use basic password authentication.
# AuthType Digest won't work with RADIUS authentication.
#
AuthType Basic

#
# Tell the user the realm to which they're authenticating.
# This string should be configured for your site.
#
AuthName "RADIUS authentication for localhost"

#
# don't use 'mod_auth'.
# You might want to disable other authentication types here.
# You can get a similar effect by commenting out the
# 'AddModule mod_auth_*' lines, previously in httpd.conf
#
AuthAuthoritative off

#
# Use mod_auth_radius for all authentication, and make the responses
# from it authoritative.
#
AuthRadiusAuthoritative on

#
# Make a local variation of AddRadiusCookieValid.  The server will choose
# the MINIMUM of the two values.
#
# AuthRadiusCookieValid <minutes-for-which-cookie-is-valid>
#
AuthRadiusCookieValid 5

#
# require that mod_auth_radius return a valid user, otherwise
# access is denied.
#
require valid-user

#
# end of the per-location directives
#
</Location>