support 'user' and 'group' directives, where the server does

[freeradius.git] / raddb / radiusd.conf.in

diff --git a/raddb/radiusd.conf.in b/raddb/radiusd.conf.in
index 2ea8c92..d8e1d1c 100644 (file)
--- a/raddb/radiusd.conf.in
+++ b/raddb/radiusd.conf.in
@@ -42,6 +42,22 @@ run_dir    = ${localstatedir}/run
 pidfile    = ${run_dir}/radiusd.pid
 
 #
+# user/group: The name (or #number) of the user/group to run httpd as.
+#    On SCO (ODT 3) use "user = nouser" and "group = nogroup".
+#    On HPUX you may not be able to use shared memory as nobody, and the
+#    suggested workaround is to create a user www and use that user.
+#
+#  NOTE that some kernels refuse to setgid(group)
+#  when the value of (unsigned)group is above 60000;
+#  don't use group nobody on these systems!
+#
+#  On systems with shadow passwords, you might have to set 'group = shadow'
+#  for the server to be able to read the shadow password file.
+#
+user = nobody
+group = nobody
+
+#
 #  max_request_time: The maximum time (in seconds) to handle a request.
 #
 #  Requests which take more time than this to process are killed, and