Update sites-available/default

diff --git a/raddb/sites-available/default b/raddb/sites-available/default
index 0a12d8f5d8496eb6a3770519544a8c712b5c0745..09a7fe6f9ac7c4a662faecfd30679cb83a94fcc4 100644 (file)
--- a/raddb/sites-available/default
+++ b/raddb/sites-available/default
@@ -2,9 +2,11 @@
 #
 #  :toc:
 #
-#  # The default Virtual Server
-#
 #  $Id$
+
+#######################################################################
+#
+#  = The default Virtual Server
 #
 #  The `default` virtual server is the first one that is enabled on a
 #  default installation of FreeRADIUS.  This configuration is
@@ -60,6 +62,8 @@
 #  This is the `default` virtual server.
 #
 server default {
+       #
+       #  namespace::
        #
        #  In v4, all "server" sections MUST start with a "namespace"
        #  parameter.  This tells the server which protocol is being used.
@@ -326,7 +330,6 @@ server default {
                        }
                }
 
-
                #
                #  #### TCP Transport
                #
@@ -340,14 +343,26 @@ server default {
                #
                tcp {
                        #
-                       #  As with v3, "ipaddr", "ipv4addr", and "ipv6addr"
+                       #  NOTE: As with v3, `ipaddr`, `ipv4addr`, and `ipv6addr`
                        #  are all allowed.
                        #
+
+                       #
+                       #  ipaddr::
+                       #
                        ipaddr = *
+
+                       #
+                       #  port:: the TCP where FreeRADIUS accepts
+                       #  packets.
+                       #
+                       #  The default port for Access-Accept packets
+                       #  is `1812`.
+                       #
                        port = 1812
 
                        #
-                       #  Whether or not we allow dynamic clients.
+                       #  dynamic_clients:: Whether or not we allow dynamic clients.
                        #
                        #  If set to true, then packets from unknown
                        #  clients are passed through the "new client"
@@ -356,6 +371,8 @@ server default {
                        #
 #                      dynamic_clients = true
 
+                       #
+                       #  networks { ... }::
                        #
                        #  If dynamic clients are allowed, then limit
                        #  them to only a small set of source
@@ -365,6 +382,9 @@ server default {
                        #  this section is ignored.
                        #
                        networks {
+                               #
+                               #  allow::
+                               #  deny::
                                #
                                #  Allow packets from these networks
                                #  to define dynamic clients.
@@ -412,6 +432,7 @@ server default {
                        #  increased flexibility.
                        #
                        log {
+                               #
                                #  stripped_names:: Log the full
                                #  `User-Name` attribute, as it was
                                #  found in the request.
@@ -420,6 +441,7 @@ server default {
                                #
                                stripped_names = no
 
+                               #
                                #  auth:: Log authentication requests
                                #  to the log file.
                                #
@@ -427,22 +449,28 @@ server default {
                                #
                                auth = no
 
+                               #
                                #  auth_goodpass:: Log "good"
                                #  passwords with the authentication
                                #  requests.
                                #
                                #  allowed values: {no, yes}
                                #
-                               auth_badpass = no
+                               auth_goodpass = no
 
+                               #
                                #  auth_badpass:: Log "bad"
                                #  passwords with the authentication
                                #  requests.
                                #
                                #  allowed values: {no, yes}
                                #
-                               auth_goodpass = no
+                               auth_badpass = no
 
+                               #
+                               #  msg_goodpass::
+                               #  msg_badpass::
+                               #
                                #  Log additional text at the end of the "Login OK" messages.
                                #  for these to work, the "auth" and "auth_goodpass" or "auth_badpass"
                                #  configurations above have to be set to "yes".
@@ -455,6 +483,9 @@ server default {
 #                              msg_goodpass = ""
 #                              msg_badpass = ""
 
+                               #
+                               #  msg_denied::
+                               #
                                #  The message when the user exceeds the Simultaneous-Use limit.
                                #
                                msg_denied = "You are already logged in - access denied"
@@ -475,6 +506,7 @@ server default {
                                #
 #                              max = 4096
 
+                               #
                                #  timeout:: How long to wait before expiring a
                                #  session.
                                #