Настройка агента HARD

...
10.02.2017 12:00:59. 90 136807/Master     MainThread INFO     All workers have been stopped
10.02.2017 12:00:59. 90 136807/Master     MainThread INFO     Stopped
11.02.2017 13:13:01.171 23117/MainThread       INFO
==================================================
 
11.02.2017 13:13:01.177 23117/MainThread       INFO
HARD (4.2.9.1). Configuration loaded:
  "sessions_loader":
    "bulk_size_limit": 50000,
    "plugins":
      "default":
        "sessions":
  "cache_cleaner":
    "expire_period":
      "accounting": 1440,
      "user_equip": 1440,
      "netservs": 1440
  "batch":
    "pid_path": "/var/run/hydra/hard/batch.pid",
    "mongo_pool": "main"
  "enabled_plugins": [
    "base/radius-ipoe",
    "proxy/dhcp",
    "base/dhcp-ont-mng",
    "base/dhcp-voip",
    "base/dhcp-iptv",
    "base/dhcp-internet",
    "base/dhcp-unknown"
  ],
  "log":
    "common":
...
  "plugins":
...
    "proxy":
      "main":
      "dhcp":
        "routes":
          "base/dhcp-ont-mng": "$request.RAD_REQUEST.try(\"DHCP-Relay-Circuit-Id\", \"0x00\").unhex().like?(\"^xpon 1010 GPON-H .+$\")",
          "base/dhcp-iptv": "$request.RAD_REQUEST.try(\"DHCP-Relay-Circuit-Id\", \"0x00\").unhex().like?(\"^xpon 1022 GPON-H .+$\")",
          "base/dhcp-voip": "$request.RAD_REQUEST.try(\"DHCP-Relay-Circuit-Id\", \"0x00\").unhex().like?(\"^xpon 1011 GPON-H .+$\")",
          "base/dhcp-internet": "$request.RAD_REQUEST.try(\"DHCP-Relay-Circuit-Id\", \"0x00\").unhex().like?(\"^xpon 11[0-9]2 GPON-H .+$\")"
        "default": "base/dhcp-unknown",
        "call_stack": []
11.02.2017 13:13:59.185 23123/Master     MainThread INFO     Running
11.02.2017 13:13:59.186 23123/Master     MainThread DEBUG    Handling signals
11.02.2017 13:13:59.188 23123/Master     MainThread DEBUG    Adding Worker#1, lifetime: 0.001 seconds to process pool
...

enabled_plugins:
  - 'proxy/dhcp'
  - 'base/dhcp-o82'
  - 'base/dhcp-ip-private'
  - 'base/dhcp-ip-public'

...
log:
  common:
    level: 'debug'
    path: '/var/log/hydra/hard/hard.log'
    rotate:
      size: 20480
      count: 250
 
  batch:
    level: 'info'
    path: '/var/log/hydra/hard/batch.log'
    rotate:
      size: 10240
      count: 50
...

pid_path: '/var/run/hydra-testing/hard-testing/hard.pid'

...
filters:
  agent.basic_auth:
    main:
      login: 'FreeRADIUS'
      password: 'q0IkVhQf10ZKUgKYAyoE'
...

server:
  address: '127.0.0.1'
  port: 11080
  workers: 3

systemLog:
  destination: 'file'
  path: '/var/log/hydra/mongodb3/mongod3.log'
  logAppend: true
  logRotate: 'reopen'

processManagement:
  fork: false

net:
  bindIp: '127.0.0.1'
  port: 27027
  http:
    enabled: false

security:
  authorization: 'enabled'

storage:
  dbPath: '/var/lib/hydra/mongodb3'
  directoryPerDB: true
  journal:
    enabled: true
  engine: 'wiredTiger'
  wiredTiger:
    engineConfig:
      cacheSizeGB: 1

user@server:~$ mongo3 admin           # К «чистой» СУБД подключаемся без аутентификации (используется MongoDB Localhost Exception)
MongoDB shell version: 3.0.4
connecting to: 127.0.0.1:27027/admin

> // Находясь в БД admin, создаём учётную запись администратора
> db.createUser(
      {
          user: 'admin',
          pwd: 'r08gS19tZfrs51ntZEC4',
          roles: [
              {
                  role: 'root',
                  db:   'admin'
              }
          ]
      }
  );
Successfully added user: {
	"user" : "admin",
	"roles" : [
		{
			"role" : "root",
			"db" : "admin"
		}
	]
}
 
> // Авторизуемся под учётной записью администратора
> db.auth('admin', 'r08gS19tZfrs51ntZEC4');
1
 
> // Переключаемся на БД hard_cache, которая будет указана в ключе connection_pools → mongo → <spec_name> → name конфигурации агента
> use hard_cache;
switched to db hard_cache

> // Создаём в этой БД учётную запись пользователя hard, под которым будет работать агент
> db.createUser(
      {
          user: 'hard',                 // Имя пользователя - ключ connection_pools → mongo → <spec_name> → user конфигурации агента
          pwd: '56kiEh1N61GC3ga17SgD',  // Пароль пользователя - ключ connection_pools → mongo → <spec_name> → password конфигурации агента
          roles: [
              {
                  role: 'readWrite',
                  db:   'hard_cache'
              }
          ]
      }
  );
Successfully added user: {
	"user" : "hard",
	"roles" : [
		{
			"role" : "readWrite",
			"db" : "hard_cache"
		}
	]
}

connection_pools:
  mongo:
    # Основная спецификация для обработки RADIUS-запросов
    main:
      name: 'hard_cache'
      user: 'hard'
      password: '56kiEh1N61GC3ga17SgD'
      replica_set:
        name: 'hard_rs'
        uris:
          - '192.168.125.11:27027'
          - '192.168.125.12:27027'
          - '192.168.125.13:27027'
 
    # Локальный экземпляр для загрузки аккаунтинга и обновления кэша
    local_instance:
      name: 'hard_cache'
      user: 'hard'
      password: '56kiEh1N61GC3ga17SgD'
      host: 'localhost'
      port: 27027

connection_pools:
  database:
    main:
      name: 'hydra'
      user: 'AIS_RADIUS'
      password: 'T7412Ph5Flzj1ApXY2SG'
      hydra:
        user: 'hard'
        password: 'aQ4kW3GP1O4LDG5WFUCI'

syncer:
  stomp:
    host: '192.168.123.15'
    port: 61613
    login: 'hydra'
    password: 'cq48L96pV41C5l4WtiW9'
  queues:
    profiles: 'hydra_profiles'
    binds: 'hydra_equipment_binds'