summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authortron <tron@NetBSD.org>2005-09-21 15:06:22 +0000
committertron <tron@NetBSD.org>2005-09-21 15:06:22 +0000
commit3cc3e3c7a37e8eda2fb60d694d1ec44ea4ffbb22 (patch)
treefa3e2b356c844ad78361a02d556a7a30beb63c39
parentcf833f9d3922a34e5af0f7c52a1a1f3322f1ab49 (diff)
Correct documentation about Mode Config. It now works without XAuth, too.
Patch supplied by Emmanuel Dreyfus on the "ipsec-tools" mailing list.
-rw-r--r--crypto/dist/ipsec-tools/src/racoon/racoon.conf.522
1 files changed, 8 insertions, 14 deletions
diff --git a/crypto/dist/ipsec-tools/src/racoon/racoon.conf.5 b/crypto/dist/ipsec-tools/src/racoon/racoon.conf.5
index 90056451eff..291af47ad4e 100644
--- a/crypto/dist/ipsec-tools/src/racoon/racoon.conf.5
+++ b/crypto/dist/ipsec-tools/src/racoon/racoon.conf.5
@@ -1,6 +1,6 @@
-.\" $NetBSD: racoon.conf.5,v 1.20 2005/08/20 00:57:06 manu Exp $
+.\" $NetBSD: racoon.conf.5,v 1.21 2005/09/21 15:06:22 tron Exp $
.\"
-.\" Id: racoon.conf.5,v 1.27.2.8 2005/07/07 14:55:58 manubsd Exp
+.\" Id: racoon.conf.5,v 1.41 2005/09/21 14:35:16 manubsd Exp
.\"
.\" Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
.\" All rights reserved.
@@ -480,9 +480,6 @@ Default is
.\"
.It Ic mode_cfg (on \(ba off) ;
Gather network information through ISAKMP mode configuration.
-This only works if
-.Ic hybrid_rsa_client
-is the approved proposal.
Default is off.
.\"
.It Ic peers_certfile ( dnssec | Ar certfile ) ;
@@ -939,15 +936,12 @@ The default is off.
Defines the information to return for remote hosts' ISAKMP mode config
requests.
Also defines the authentication source for remote peers
-authenticating through Xauth/hybrid auth.
+authenticating through Xauth.
.Pp
-This section is currently only useful if you selected the
-.Ic hybrid_rsa_server
-authentication method.
The following are valid statements:
.Bl -tag -width Ds -compact
.It Ic auth_source (system \(ba radius \(ba pam) ;
-Specify the source for authentication of users through Xauth/hybrid auth.
+Specify the source for authentication of users through Xauth.
.Ar system
means to use the Unix user database.
This is the default.
@@ -963,8 +957,8 @@ It works only if
.Xr racoon 8
was built with libpam support.
.It Ic conf_source (local \(ba radius) ;
-Specify the source for IP addresses and netmask of users authenticated
-through Xauth/hybrid auth.
+Specify the source for IP addresses and netmask allocated through ISAKMP
+mode config.
.Ar local
means to use the local IP pool defined by the
.Ic network4
@@ -980,7 +974,7 @@ was built with libradius support, and the configuration is done in
.Xr radius.conf 5 .
RADIUS configuration requires RADIUS authentication.
.It Ic accounting (none \(ba radius \(ba pam) ;
-Enable or disable accounting.
+Enable or disable accounting for Xauth logins and logouts.
Default is
.Ar none ,
which disable accounting.
@@ -1002,7 +996,7 @@ Specify the size of the IP address pool, either local or allocated
through RADIUS.
.Ic conf_source
selects the local pool or the RADIUS configuration, but in both
-configuration, you cannot have more than
+configurations, you cannot have more than
.Ar size
users connected at the same time.
The default is 255.