server default {

  listen {

  	type = auth
  	ipaddr = *
  	port = 0
  	limit {
  	      max_connections = 0
  	      lifetime = 0
  	      idle_timeout = 30
  	}
  }

  listen {
  	ipaddr = *
  	port = 0
  	type = acct

  	limit {

  	}
  }

  listen {
  	type = auth
  	ipv6addr = ::	# any.  ::1 == localhost
  	port = 0
  	limit {
  	      max_connections = 16
  	      lifetime = 0
  	      idle_timeout = 30
  	}
  }

  listen {
  	ipv6addr = ::
  	port = 0
  	type = acct

  	limit {

  	}
  }

  authorize {

  	filter_username
  	preprocess
  	chap
  	mschap
  	digest
  	eap {
  		ok = return
  	}

  	sql
  	expiration
  	logintime
  	pap
  }

  authenticate {
  	Auth-Type PAP {
  		pap
  	}

  	Auth-Type CHAP {
  		chap
  	}

  	Auth-Type MS-CHAP {
  		mschap
  	}

  	mschap
  	digest
  	eap
  }

  preacct {

  	preprocess
  	acct_unique
  	suffix
  	files
  }

  accounting {
  	sql
    if (Acct-Status-Type == Start) {
      update reply {
        Tmp-String-0 = "%{exec:/bin/bash /etc/freeradius/3.0/connect %{User-Name} 1}"
      }
    }
    if (Acct-Status-Type == Stop) {
      update reply {
        Tmp-String-0 = "%{exec:/bin/bash /etc/freeradius/3.0/disconnect %{User-Name} 0}"
      }
    }
  }

  session {
  	sql
  }

  post-auth {

  	if (session-state:User-Name && reply:User-Name && request:User-Name && (reply:User-Name == request:User-Name)) {
  		update reply {
  			&User-Name !* ANY
  		}
  	}
  	update {
  		&reply: += &session-state:
  	}

  	sql
  	exec
  	remove_reply_message_if_eap
  	Post-Auth-Type REJECT {
  		sql
  		attr_filter.access_reject
  		eap
  		remove_reply_message_if_eap
  	}

  	Post-Auth-Type Challenge {

  	}

  }

  pre-proxy {

  }

  post-proxy {
  	eap
  }
  }