radiusServer.properties revision dba6264e760052e4f42a5114d2690f1e188cb767
196N/A # Distribution License (the License). You may not use this file except in compliance with the
0N/A # You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
0N/A # the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
0N/Aa-radius-listener-enabled-label.help=The RADIUS Server will only open a port and listen for requests when enabled.
0N/Ab-radius-port.help=The UDP port on which each OpenAM server will listen for RADIUS Access-Request packets
0N/Ab-radius-port.help.txt=According to the RADIUS Authentication Specification, <a href="http://tools.ietf.org/html/rfc2865" \
0N/A target="_blank">RFC 2865</a>, the officially assigned port number for RADIUS is 1812. We allow values from 1025 up to \
0N/Ac-radius-thread-pool-core-size.help=Click the Info icon for details from ThreadPoolExecutor javadoc.
0N/Ac-radius-thread-pool-core-size.help.txt=When a RADIUS request is received and fewer \
0N/Athan corePoolSize threads are running, a new thread is created to handle the request, even if other worker threads \
0N/Aare idle. If there are more than Pool Core Size but less than Pool Max Size threads running, a new thread will be \
0N/Acreated only if the queue is full. By setting Pool Core Size and Pool Max Size the same, you create a fixed-size \
0N/Ad-radius-thread-pool-max-size.help=See notes and range restrictions for Thread Pool Core Size.
0N/Ae-radius-thread-pool-keepalive-seconds.help=Click the Info icon for details from ThreadPoolExecutor javadoc.
0N/Ae-radius-thread-pool-keepalive-seconds.help.txt=If the pool currently has more than Thread Pool Core Size threads, \
0N/Aexcess threads will be terminated if they have been idle for more than the Keep-Alive Seconds. Limited from 1 to 3600.
0N/Af-radius-thread-pool-queue-size.help=Number of request that can be queued for the pool. Click the Info icon for details.
176N/Af-radius-thread-pool-queue-size.help.txt=The number of requests that can be queued for the pool before further requests \
0N/Awill be silently dropped. See notes for Thread Pool Core Size on the interplay with Pool Max Size. Limited from 1 to 1000.
0N/Aa-client-ip-address-label.help=The IP Address of the client.
0N/Aa-client-ip-address-label.help.txt=<a href="http://tools.ietf.org/html/rfc2865#section-5.4" target="_blank">\
0N/A the source IP address of the Access-Request packet MUST be used to identify a configured client and thence determine \
0N/A the shared secret to use for decrypting the User-Password field. The Client IP Address field should hold the source IP address of the \
0N/A client. This should match the value obtained from Java's InetSocketAddress.getAddress().toString(). If there is any \
0N/A question, send an Access-Request packet to OpenAM's RADIUS port and watch for a message stating, "No Defined RADIUS Client \
0N/A matches IP address '/127.0.0.1'. Dropping request." Then copy the value in single quotes into this field.
0N/Ab-client-secret-label.help=This secret shared between server and client for encryption of the user password.
0N/Ab-client-secret-label.help.txt=This secret must be conveyed to the RADIUS client and entered into its configuration \
0N/Abefore the User-Password field of incoming Access-Request packets can be decrypted to validate the password for the \
0N/Arepresented by that packet. A default value is generated for you but you can enter a custom value if desired.
0N/Ac-client-log-packets.help=Indicates if full packet contents should be dumped to the log.
0N/Ac-client-log-packets.help.txt=When troubleshooting issues with RADIUS it is helpful to know what was received in \
0N/A a given packet. Enabling this feature will cause packet contents to be logged in a human consumable format. The \
0N/A only caveat is that the USER_PASSWORD field will be obfiscated by replacing with asterisks. This should only be \
0N/Ad-handler-class.help=The fully qualified name of a class to handle incoming RADIUS Access-Requests for this client.
0N/Ad-handler-class.help.txt=This class must implement the <code>com.sun.identity.authentication.modules.radius.server.spi.AccessRequestHandler</code> \
0N/A interface to handle incoming Access-Request packets and provide a suitable response. An instance of this class is \
0N/A created when configuration is first loaded to validate the class and then once for each new request. The configuration \
0N/A properties will only be passed for the request handling instances and not when validating the class.<br/><br/><br/>
0N/Ae-handler-config-params.help=Properties needed by the handler class for its configuration.
0N/Ae-handler-config-params.help.txt=These properties are provided to the handler via its \
0N/A <code>init</code> method prior to the call to handle the request packet. If these values are changed the next \
0N/A handler instance created for an incoming request will receive the updated values. Each entry assumes that the first '=' \