#
# = Stats Module
#
-# The `stats` module tracks RADIUS statistics.
+# The `stats` module tracks packet statistics.
#
-# It should be listed LAST in any `send ... { }` section.
+# It should be listed *last* in any `send ... { }` section.
#
# When listed in a `send` section, it will increment statistics for
# input / output packets.
#
# = Unix Module
#
-# The `unix` module calls the system functions to get the `known good`
-# password. This password is usually in the `crypt` form, and is
-# incompatible with `CHAP`, `MS-CHAP`, `PEAP`, etc.
+# The `unix` module calls the system `getpwent()` functions to get
+# the `known good` password. This password is usually in the `crypt`
+# form, and is incompatible with `CHAP`, `MS-CHAP`, `PEAP`, etc.
#
-# If passwords are in /etc/shadow, you will need to set the `group`
-# configuration in `radiusd.conf`.
+# If the passwords are in /etc/shadow, you will need to set the
+# `group` configuration in `radiusd.conf` so that the server can read
+# /etc/shadow.
#
-# Look for `shadow`, and follow the instructions there.
+# Look for "shadow", and follow the instructions there.
#
#
#
# radwtmp:: The location of the `wtmp` file.
#
- # The only use for 'radlast'. If you don't use 'radlast',
+ # The only use for `radlast`. If you don't use `radlast`,
# then you can comment out this item.
#
# NOTE: The radwtmp file may get large! You should rotate it
# (cp /dev/null radwtmp), or just not use it.
#
- radwtmp = ${logdir}/radwtmp
+ # The default is to not use radwtmp files. It's better to
+ # use a database.
+ #
+# radwtmp = ${logdir}/radwtmp
}
# An attribute of type "string" containing non-UTF-8 data makes
# the module return `FAIL`.
#
+# The module can be used as a simple check for non-conforming
+# packets. If the contents of the Access-Request packets are not
+# UTF-8, it's likely best to just reject the request.
+#
#
# ## Default instance