From: Jorge Pereira <jpereiran@gmail.com>
Date: Thu, 18 Apr 2019 00:43:11 +0000 (-0300)
Subject: Update sites-available/default
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cfde4de178ba45e2080828b4a9f7e44ededf436c;p=thirdparty%2Ffreeradius-server.git

Update sites-available/default
---

diff --git a/raddb/sites-available/default b/raddb/sites-available/default
index 0a12d8f5d84..09a7fe6f9ac 100644
--- a/raddb/sites-available/default
+++ b/raddb/sites-available/default
@@ -2,9 +2,11 @@
 #
 #  :toc:
 #
-#  # The default Virtual Server
-#
 #  $Id$
+
+#######################################################################
+#
+#  = The default Virtual Server
 #
 #  The `default` virtual server is the first one that is enabled on a
 #  default installation of FreeRADIUS.  This configuration is
@@ -60,6 +62,8 @@
 #  This is the `default` virtual server.
 #
 server default {
+	#
+	#  namespace::
 	#
 	#  In v4, all "server" sections MUST start with a "namespace"
 	#  parameter.  This tells the server which protocol is being used.
@@ -326,7 +330,6 @@ server default {
 			}
 		}
 
-
 		#
 		#  #### TCP Transport
 		#
@@ -340,14 +343,26 @@ server default {
 		#
 		tcp {
 			#
-			#  As with v3, "ipaddr", "ipv4addr", and "ipv6addr"
+			#  NOTE: As with v3, `ipaddr`, `ipv4addr`, and `ipv6addr`
 			#  are all allowed.
 			#
+
+			#
+			#  ipaddr::
+			#
 			ipaddr = *
+
+			#
+			#  port:: the TCP where FreeRADIUS accepts
+			#  packets.
+			#
+			#  The default port for Access-Accept packets
+			#  is `1812`.
+			#
 			port = 1812
 
 			#
-			#  Whether or not we allow dynamic clients.
+			#  dynamic_clients:: Whether or not we allow dynamic clients.
 			#
 			#  If set to true, then packets from unknown
 			#  clients are passed through the "new client"
@@ -356,6 +371,8 @@ server default {
 			#
 #			dynamic_clients = true
 
+			#
+			#  networks { ... }::
 			#
 			#  If dynamic clients are allowed, then limit
 			#  them to only a small set of source
@@ -365,6 +382,9 @@ server default {
 			#  this section is ignored.
 			#
 			networks {
+				#
+				#  allow::
+				#  deny::
 				#
 				#  Allow packets from these networks
 				#  to define dynamic clients.
@@ -412,6 +432,7 @@ server default {
 			#  increased flexibility.
 			#
 			log {
+				#
 				#  stripped_names:: Log the full
 				#  `User-Name` attribute, as it was
 				#  found in the request.
@@ -420,6 +441,7 @@ server default {
 				#
 				stripped_names = no
 
+				#
 				#  auth:: Log authentication requests
 				#  to the log file.
 				#
@@ -427,22 +449,28 @@ server default {
 				#
 				auth = no
 
+				#
 				#  auth_goodpass:: Log "good"
 				#  passwords with the authentication
 				#  requests.
 				#
 				#  allowed values: {no, yes}
 				#
-				auth_badpass = no
+				auth_goodpass = no
 
+				#
 				#  auth_badpass:: Log "bad"
 				#  passwords with the authentication
 				#  requests.
 				#
 				#  allowed values: {no, yes}
 				#
-				auth_goodpass = no
+				auth_badpass = no
 
+				#
+				#  msg_goodpass::
+				#  msg_badpass::
+				#
 				#  Log additional text at the end of the "Login OK" messages.
 				#  for these to work, the "auth" and "auth_goodpass" or "auth_badpass"
 				#  configurations above have to be set to "yes".
@@ -455,6 +483,9 @@ server default {
 #				msg_goodpass = ""
 #				msg_badpass = ""
 
+				#
+				#  msg_denied::
+				#
 				#  The message when the user exceeds the Simultaneous-Use limit.
 				#
 				msg_denied = "You are already logged in - access denied"
@@ -475,6 +506,7 @@ server default {
 				#
 #				max = 4096
 
+				#
 				#  timeout:: How long to wait before expiring a
 				#  session.
 				#