From: Alan T. DeKok <aland@freeradius.org>
Date: Tue, 7 Feb 2023 15:14:01 +0000 (-0500)
Subject: document local clients
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b21904a17f2725ba563145ae9188d34b3225230e;p=thirdparty%2Ffreeradius-server.git

document local clients
---

diff --git a/raddb/sites-available/tacacs b/raddb/sites-available/tacacs
index ca28ef3e909..965d9d2b9bb 100644
--- a/raddb/sites-available/tacacs
+++ b/raddb/sites-available/tacacs
@@ -201,6 +201,37 @@ server tacacs {
 		}
 	}
 
+	#
+	#  ## Clients
+	#
+	#  A virtual server can have multiple `client` definitions.  These clients take priority
+	#  over  the global `client` definitions.
+	#
+	#  See the main `clients.conf` file for documentation on the `client` section.
+	#
+	client tacacs {
+		ipaddr = 127.0.0.1
+
+		#
+		#  This has to be specified for all TACACS+ clients.
+		#
+		#  There is no standard for TACACS+ over UDP.
+		#
+		proto = tcp
+
+		#
+		#  The TACACS+ key, or secret.  If a secret is defined, then
+		#  it will be used.  All packets coming from this client MUST be
+		#  encrypted with the shared secret.
+		#
+		#  The `secret` configuration item can be omitted or deleted,
+		#  in which case all of the information (including passwords)
+		#  are sent over the network in the clear.  This practice is
+		#  not recommended.
+		#
+		secret = testing123
+	}
+
 	#
 	#  ## Authentication-Start
 	#