Use the new syntax, listen for accounting, and use file module.

Author: yasuoka

etc/examples/radiusd.conf

@@ -1,7 +1,9 @@
-#	$OpenBSD: radiusd.conf,v 1.5 2023/09/24 06:09:35 yasuoka Exp $
+#	$OpenBSD: radiusd.conf,v 1.6 2025/03/10 04:05:14 yasuoka Exp $
 
 listen on 0.0.0.0
+listen on 0.0.0.0 accounting
 #listen on ::
+#listen on :: accounting
 
 client 127.0.0.1/32 {
 	secret "secret"
@@ -13,20 +15,29 @@ client 192.168.0.0/24 {
 	secret "secret"
 }
 
-module load bsdauth "/usr/libexec/radiusd/radiusd_bsdauth"
-#module set bsdauth restrict-group users
-
-module load radius "/usr/libexec/radiusd/radiusd_radius"
-module set radius secret "testing123"
-module set radius server "127.0.0.1"
+module bsdauth {
+	set restrict-group users
+#	set restrict-group operator
+}
 
-module load strip-realm "/usr/libexec/radiusd/radiusd_standard"
-module set strip-realm strip-atmark-realm true
+module file {
+	set path "/etc/npppd/npppd-users"
+}
 
-authenticate *@local {
-	authenticate-by bsdauth
-	decorate-by strip-realm
+module radius {
+	set secret "testing123"
+	set server "127.0.0.1"
 }
-authenticate *@example.com {
-	authenticate-by radius
+
+module standard
+
+# Use a special name "strip-realm", then the path must be sepecified
+module strip-realm "/usr/libexec/radiusd/radiusd_standard" {
+	set strip-atmark-realm true
 }
+
+authenticate *@local by bsdauth decorate-by strip-realm
+authenticate *@file  by file    decorate-by strip-realm
+authenticate *       by radius
+
+account * to standard