added more template entries. They're commented out so they don't

	confuse people, but they're included in the standard 'users' file
	so that there will be fewer FAQ questions to the list.

diff --git a/raddb/users b/raddb/users
index 37e6ddd..42e7b82 100644 (file)
--- a/raddb/users
+++ b/raddb/users
@@ -1,7 +1,7 @@
 #
 #      This file contains security and configuration information
 #      for each user.  The first field is the user's name and
-#      can be up to 8 characters in length.  This is followed (on
+#      can be up to 253 characters in length.  This is followed (on
 #      the same line) with the list of authentication requirements
 #      for that user.  This can include password, comm server name,
 #      comm server port number, protocol type (perhaps set by the "hints"
@@ -21,7 +21,7 @@
 #      file, the DEFAULT entries _have_ to be at the end of this file and
 #      you can't have multiple entries for one username.
 #
-#      You don't need to specify a password if you set Auth-Type = System
+#      You don't need to specify a password if you set Auth-Type := System
 #      on the list of authentication requirements. The RADIUS server
 #      will then check the system password file.
 #
@@ -49,6 +49,13 @@
 #      Framed-Compression = Van-Jacobsen-TCP-IP
 
 #
+# This is an entry for a user with a space in their name.
+# Note the double quotes surrounding the name.
+#
+#"John Doe"    Password == "hello", Auth-Type := Local
+#              Reply-Message = "Hello, John."
+
+#
 # Dial user back and telnet to the default host for that port
 #
 #Deg   Auth-Type := Local, Password == "ge55ged"
@@ -80,6 +87,21 @@
 #              Fall-Through = Yes
 
 #
+# Deny access for a specific user.  Note that this entry MUST
+# be before any other 'Auth-Type' attribute which results in the user
+# being authenticated.
+#
+#lameuser      Auth-Type := Reject
+#              Reply-Message = "Your account has been disabled."
+
+#
+# Deny access for a group of users.
+#
+#DEFAULT       Group == "disabled", Auth-Type := Reject
+#              Reply-Message = "Your account has been disabled."
+#
+
+#
 # The rest of this file contains the several DEFAULT entries.
 # DEFAULT entries match with all login names.
 # Note that DEFAULT entries can also Fall-Through (see first entry).