Skip to content
Snippets Groups Projects
Select Git revision
  • 4b7f32a853383b292f600ffefc2c51a9c860e7b2
  • master default protected
  • ll-workflow
  • alc-scindage-donnees-pj
  • b24
  • FJ_LL_Tbl_Contrat
  • alc-docker-node
  • ll-apiplatform
  • php84
  • ll-rgpd
  • b23
  • alc-filtre-type-intervenant
  • ll-sans-mdb5
  • formules-ancienne-infra
  • ll-formules
  • alc-intervenant-dmep
  • ll-suppr-v_vol-s
  • b20
  • ll-postgresql
  • b23.0.1
  • b22
  • 24.8
  • 24.7
  • 24.6
  • 24.5
  • 24.4
  • 24.3
  • 24.2
  • 24.1
  • 24.0
  • 23.15
  • 24.0-beta19
  • 24.0-beta18
  • 24.0-beta17
  • 24.0-beta16
  • 24.0-beta15
  • 24.0-beta14
  • 24.0-beta13
  • 23.14
  • 24.0-beta12
  • 24.0-beta11
41 results

GenerateRubrique.php

Blame
  • Code owners
    Assign users and groups as approvers for specific file changes. Learn more.
    client.pp 2.57 KiB
    # Install FreeRADIUS clients (WISMs or testing servers)
    define freeradius::client (
      $secret,
      $shortname                     = $title,
      $ip                            = undef,
      $ip6                           = undef,
      $proto                         = undef,
      $require_message_authenticator = 'no',
      $virtual_server                = undef,
      $nastype                       = undef,
      $login                         = undef,
      $password                      = undef,
      $coa_server                    = undef,
      $response_window               = undef,
      $max_connections               = undef,
      $lifetime                      = undef,
      $idle_timeout                  = undef,
      $redirect                      = undef,
      $port                          = undef,
      $srcip                         = undef,
      $firewall                      = false,
      $ensure                        = present,
      $attributes                    = [],
    ) {
      $fr_package  = $::freeradius::params::fr_package
      $fr_service  = $::freeradius::params::fr_service
      $fr_basepath = $::freeradius::params::fr_basepath
      $fr_group    = $::freeradius::params::fr_group
    
      if $proto {
        unless $proto in ['*', 'udp', 'tcp'] {
          fail('$proto must be one of udp, tcp or *')
        }
      }
    
      unless $require_message_authenticator in ['yes', 'no'] {
        fail('$require_message_authenticator must be one of yes or no')
      }
    
      if $nastype {
        unless $nastype in ['cisco', 'computone', 'livingston', 'juniper', 'max40xx',
        'multitech', 'netserver', 'pathras', 'patton', 'portslave', 'tc', 'usrhiper', 'other'] {
          fail('$nastype must be one of cisco, computone, livingston, juniper, max40xx, multitech, netserver, pathras, patton, portslave, tc, usrhiper, other')
        }
      }
    
      file { "${fr_basepath}/clients.d/${shortname}.conf":
        ensure  => $ensure,
        mode    => '0640',
        owner   => 'root',
        group   => $fr_group,
        content => template('freeradius/client.conf.erb'),
        require => [File["${fr_basepath}/clients.d"], Group[$fr_group]],
        notify  => Service[$fr_service],
      }
    
      if ($firewall and $ensure == 'present') {
        if $port {
          if $ip {
            firewall { "100-${shortname}-${port}-v4":
              proto  => 'udp',
              dport  => $port,
              action => 'accept',
              source => $ip,
            }
          } elsif $ip6 {
            firewall { "100-${shortname}-${port}-v6":
              proto    => 'udp',
              dport    => $port,
              action   => 'accept',