The *freeradius* role is used to install and configure FreeRADIUS. The configuration system for it is extremely complicated, with dozens of files in several directories. The default configuration has a plethora of options enabled that are not needed in most cases, so they are disabled here. Since the initial (and perhaps only) use case I have for RADIUS is WiFi authentication via certificates, only the EAP-TLS mechanism is enabled currently.
7 lines
156 B
YAML
7 lines
156 B
YAML
- name: restart radiusd
|
|
service:
|
|
name=radiusd
|
|
state=restarted
|
|
- name: save firewalld configuration
|
|
command: firewall-cmd --runtime-to-permanent
|