Added the cui hash to cui policy

diff --git a/raddb/policy.d/cui b/raddb/policy.d/cui
index 52c4de69fb51928909b0a7b3639cc4727162eee5..2b580b373c88cdbadd7680713f065bc292f037f1 100644 (file)
--- a/raddb/policy.d/cui
+++ b/raddb/policy.d/cui
@@ -6,6 +6,14 @@
 #  cui.authorize etc..)  from the various config sections.
 #
 
+#
+#  cui_hash_key definition
+#  This key serves the purpose of protecting CUI values against
+#  dictionary attacks, therefore should be chosen as a "random"
+#  string and kept secret.
+#
+cui_hash_key = "some_hash_key"
+
 #
 #  The client indicates it can do CUI by sending a CUI attribute       
 #  containing one zero byte