added env vars; added root user

env

@@ -1,19 +1,7 @@
-DHCP_TSIG_KEY_NAME=dhcpupdate
-DHCP_TSIG_KEY_ALGO=hmac-md5
-DHCP_TSIG_KEY_SECRET=Y2hhbmdlX2l0
+RADIUS_SECRET=change_it
+RADIUS_CLIENT_NAME=router
+RADIUS_CLIENT_IP=10.15.100.3
+RADIUS_CLIENT_NETMASK=32
 
-DHCP_DNS_MASTER=10.15.100.1
-DHCP_DNS_SERVER=10.15.100.1
-DHCP_TFTP_SERVER=10.15.100.1
-DHCP_ROUTERS=10.15.100.1
-
-DHCP_DOMAIN=example.com
-DHCP_SITE_DOMAIN=site.example.com
-DHCP_DYN_IPS_DOMAIN=dhcp.site.example.com
-DHCP_REV_DOMAIN=100.15.10.in-addr.arpa.
-
-DHCP_SUBNET=10.15.100.0
-DHCP_NETMASK=255.255.255.0
-DHCP_IP_FIRST=10.15.100.50
-DHCP_IP_LAST=10.15.100.250
-DHCP_BROADCAST=10.15.100.255
+RADIUS_ROOT_USER_NAME=root
+RADIUS_ROOT_USER_PASSWD=change_it

freeradius/config/clients.conf

@@ -98,7 +98,7 @@ client localhost {
   #  The default secret below is only for testing, and should
   #  not be used in any real environment.
   #
-  secret    = testing123
+  secret    = RADIUS_SECRET
 
   #
   #  Old-style clients do not send a Message-Authenticator
@@ -234,8 +234,8 @@ client localhost {
 #        }
 #}
 
-client everyone {
-  ipaddr = 0.0.0.0
-  netmask = 0
-  secret = testing123
+client RADIUS_CLIENT_NAME {
+  ipaddr = RADIUS_CLIENT_IP
+  netmask = RADIUS_CLIENT_NETMASK
+  secret = RADIUS_SECRET
 }

freeradius/config/users

@@ -200,6 +200,7 @@ DEFAULT Hint == "SLIP"
 # DEFAULT
 #   Service-Type = Administrative-User
 
-bob Cleartext-Password := "hello"
+# MUST be cleartext
+RADIUS_ROOT_USER_NAME Cleartext-Password := "RADIUS_ROOT_USER_PASSWD"
 
 # On no match, the user is denied access.

freeradius/vars-vars

@@ -1,19 +1,7 @@
-DHCP_TSIG_KEY_NAME
-DHCP_TSIG_KEY_ALGO
-DHCP_TSIG_KEY_SECRET
+RADIUS_SECRET
+RADIUS_CLIENT_NAME
+RADIUS_CLIENT_IP
+RADIUS_CLIENT_NETMASK
 
-DHCP_DNS_MASTER
-DHCP_DNS_SERVER
-DHCP_TFTP_SERVER
-DHCP_ROUTERS
-
-DHCP_DOMAIN
-DHCP_SITE_DOMAIN
-DHCP_DYN_IPS_DOMAIN
-DHCP_REV_DOMAIN
-
-DHCP_SUBNET
-DHCP_NETMASK
-DHCP_IP_FIRST
-DHCP_IP_LAST
-DHCP_BROADCAST
+RADIUS_ROOT_USER_NAME
+RADIUS_ROOT_USER_PASSWD

update_vars.sh

@@ -1,7 +1,7 @@
 #! /usr/bin/env sh
 
 vars=$(cat env | cut -d= -f1)
-for docker in isc-dhcp tftpd apache
+for docker in freeradius
 do
   echo "${vars}" > "./${docker}/vars-vars"
 done