.TH RADIUSD 8
.\" NAME should be all caps, SECTION should be 1-8, maybe w/ subsection
.\" other parms are allowed: see man(7), man(1)
.SH NAME
radiusd \- RADIUS authentication/accounting server
.SH SYNOPSIS
.ad l
.HP
.B radiusd
.RB [ \-a\ DIR ]
.RB [ \-b ]
.RB [ \-d\ DIR ]
.RB [ \-h ]
.RB [ \-f\ FILE ]
.RB [ \-i\ IP_ADDRESS ]
.RB [ \-l\ FILE ]
.RB [ \-o ]
.RB [ \-p\ NUM ]
.RB [ \-q\ NUM ]
.RB [ \-s ]
.RB [ \-t\ NUM ]
.RB [ \-v ]
.RB [ \-w\ NUM ]
.RB [ \-x ]
.ad b
.SH DESCRIPTION
.B radiusd
is the RADIUS authentication and accounting server.
.SH OPTIONS
.TP
.B \-a DIR
Set the directory for RADIUS accounting logs to
.I DIR\fR.
The default location is
.I /var/log/radiusd-livingston\fR.
.TP
.B \-b
Use users DB database file
.I /etc/radiusd-livingston/users.db
rather than the flat text file
.I /etc/radiusd-livingston/users\fR.
.I builddbm(8)
may be used to create this database file.
.TP
.B \-d DIR
Set the database directory to DIR, rather than the default
.I /etc/radiusd-livingston\fR.
.TP
.B \-f FILE
Use FILE as a password file instead of using
.I getpwnam(3)
calls for "System" type authentication.
.TP
.B \-h
Show summary of options.
.TP
.B \-i IP_ADDR
Bind the RADIUS server to
.I IP_ADDR
address, rather than accepting for all IP addresses on the local machine.
.TP
.B \-l FILE
Log to
.I FILE
rather than the default behaviour of logging through syslog.

If debugging is set, the default behaviour is to log to
.I /dev/tty
and setting
.I \-l syslog
in this case only will log through syslog.
.TP
.B \-p NUM
Sets the listening port of
.I radiusd
to
.I NUM
for access requests,
.I NUM+1
for accounting requests,
.I NUM+5
and
.I NUM+6
for handling proxy requests. The default is to use the entries
.I radius\fR,
.I radacct\fR,
.I radius-proxy\fR,
and
.I radacct-proxy\fR
in
.I /etc/services
or 1645, 1646, 1815 and 1816 respectively. (Debian's /etc/services has
radius as 1812 and radacct as 1813 in accordance with the RFCs, but has
no entries for proxy services.) Most RADIUS clients default to 1645 and
1646, even though that is at variance with the RFCs.
.TP
.B \-o
Accept all-zero accounting request authenticators.

The 
.I \-o
flag is provided for backwards compatibility with non-compliant
RADIUS clients. If 
.I radiusd
is run with the 
.I \-o
flag, it logs unsigned accounting records, and flags them with
"Request-Authenticator = None".  If 
.I radiusd 
is run without the
.I \-o 
flag, it does not log unsigned accounting records.
.TP
.B \-q NUM
Set the maximum number of outstanding requests (default 100), setting a
limit on the number of child processes
.I radiusd
will spawn off to handle authentication.
.TP
.B \-s
Single process mode. When set
.I radiusd
does not fork off a separate accounting server, and does not fork off
separate authentication responders for each authentication request.
This mode is needed if you wish to use the Virtual Ports feature.
.TP
.B \-t NUM
Set the maximum time in seconds for a child authentication responder to
live to NUM. This catches responders that have become unresponsive. The
default is 30 seconds.
.TP
.B \-v
Print version number of
.I radiusd
on standard error.
.TP
.B \-w NUM
Sets the maximum time in seconds for the proxy server to wait for a
response before discarding the request to NUM. The default is 30 seconds.
.TP 
.B \-x
Debug mode.
.SH SIGNALS
.TP
.B SIGUSR1
Increment debugging level.
.TP
.B SIGUSR2
Disables debugging.
.TP
.B SIGHUP
is ignored. Changes to the clients and proxy files are automatically
noticed and acted upon. There is no need to tell
.I radiusd
to reread them.
.SH FILES
.TP
.B /etc/radiusd-livingston/dictionary
RADIUS dictionary.
.B /etc/radiusd-livingston/clients
List of RADIUS clients and their shared secrets.
.TP
.B /etc/radiusd-livingston/proxy
Proxy configuration.
.TP
.B /etc/radiusd-livingston/users
RADIUS users database (plain ASCII format)
.TP
.B /etc/radiusd-livingston/users.db
RADIUS users database (Berkeley DB 2.x format), made by builddbm
.TP
.B /var/log/radiusd-livingston/CLIENT/details
RADIUS accounting logs for CLIENT.
.SH AUTHOR
radiusd is copyright 1999 Lucent Technologies Inc. All rights reserved.
.PP
This manual page was written by Paul Martin <pm@debian.org>,
for the Debian GNU/Linux system (but may be used by others).
.SH SEE ALSO
builddbm(8), db_intro(3)