<Handler NAS-Port-Type=/Wireless/,Called-Station-Id=/SSID-FOOBAR/>
	<AuthBy LDAP2>
		Debug 8
		Host	1.1.1.1
		AuthDN	CN=XXX
		AuthPassword	XXX
		BaseDN	OU=...

		RewriteUsername s/.*?\/(.*?)\..*/$1/
		UsernameAttr CN

		EAPType TLS
		EAPTLS_CAFile %D/cert/chain.pem
		EAPTLS_CertificateFile %D/cert/radius.pem
		EAPTLS_CertificateType PEM
		EAPTLS_PrivateKeyFile %D/cert/key.pem
		EAPTLS_MaxFragmentSize 1000
		EAPTLS_NoCheckId
		AutoMPPEKeys

		# ACCOUNTING
		<AcctLog SQL>
			Identifier	acctlog-sql
			DBSource	dbi:mysql:radius
			DBUsername	radiator
			DBAuth		XXX
			LogQuery insert into ACCOUNTING (TIME_STAMP, USERNAME, ACCTSESSIONID, ACCTSTATUSTYPE, FRAMEDIPADDRESS) values (?, ?, ?, ?, ?)
			LogQueryParam %t
			LogQueryParam %2
			LogQueryParam %{Acct-Session-Id}
			LogQueryParam %{Acct-Status-Type}
			LogQueryParam %{Framed-IP-Address}
		</AcctLog>

		# AUTHENTICATION LOG
		<AuthLog SQL>
			Identifier	authlog-sql
			DBSource	dbi:mysql:radius
			DBUsername	radiator
			DBAuth		XXX
			LogSuccess
			SuccessQuery insert into RADAUTHLOG (TIME_STAMP, USERNAME, TYPE) values (?, ?, 1)
			SuccessQueryParam %t
			SuccessQueryParam %n
			LogFailure
			FailureQuery insert into RADAUTHLOG (TIME_STAMP, USERNAME, TYPE, REASON) values (?, ?, 0, ?)
			FailureQueryParam %t
			FailureQueryParam %n
			FailureQueryParam %1
		</AuthLog>

	</AuthBy>
</Handler>