<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN" 
   "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">

<section id="auth_radius.parameters" xmlns:xi="http://www.w3.org/2001/XInclude">
    <sectioninfo>
    </sectioninfo>

    <title>Parameters</title>

    <section id="auth_radius.radius_config">
	<title><varname>radius_config</varname> (string)</title>
	<para>
	    This is the location of the configuration file of radius client
	    libraries.
	</para>
	<para>
	    Default value is "/usr/local/etc/radiusclient/radiusclient.conf".
	</para>
	<example>
	    <title><varname>radius_config</varname> parameter usage</title>
	    <programlisting>
modparam("auth_radius", "radius_config", "/etc/radiusclient.conf")
	    </programlisting>
	</example>
    </section>

    <section id="auth_radius.service_type">
	<title><varname>service_type</varname> (integer)</title>
	<para>
	    This is the value of the Service-Type radius attribute to be
	    used. The default should be fine for most people. See your radius
	    client include files for numbers to be put in this parameter if you
	    need to change it.
	</para>
	<para>
	    Default value is "15".
	</para>
	<example>
	    <title><varname>service_type</varname> usage</title>
	    <programlisting>
modparam("auth_radius", "service_type", 15)
	    </programlisting>
	</example>
    </section>

    <section id="auth_radius.use_ruri_flag">
	<title><varname>use_ruri_flag</varname> (integer)</title>
	<para>
	    When this parameter is set to the value other than "-1" and the
	    request being authenticated has flag with matching number set
	    via setflag() function, use Request URI instead of uri parameter
	    value from the Authorization / Proxy-Authorization header field
	    to perform RADIUS authentication.  This is intended to provide
	    workaround for misbehaving NAT / routers / ALGs that alter request
	    in the transit, breaking authentication.  At the time of this
	    writing, certain versions of Linksys WRT54GL are known to do that.
	</para>
	<para>
	    Default value is "-1".
	</para>
	<example>
	    <title><varname>use_ruri_flag</varname> usage</title>
	    <programlisting>
modparam("auth_radius", "use_ruri_flag", 22)
	    </programlisting>
	</example>
    </section>

</section>
