Initial "gts1" commit.

[tac_plus.git] / tac_plus.1

diff --git a/tac_plus.1 b/tac_plus.1
index 579c7ee..69f3502 100644 (file)
--- a/tac_plus.1
+++ b/tac_plus.1
@@ -24,7 +24,7 @@ tac_plus \- tacacs plus daemon
 .SH DESCRIPTION
 tac_plus listens on tcp port
 .B
-49 
+49
 and provides Cisco systems routers and access servers with
 authentication, authorisation and accounting services.
 .LP
@@ -42,7 +42,7 @@ if possible, containing its process id.
 Specify the configuration file name. A configuration file is
 .B
 always required.
-.TP 
+.TP
 .B \-P
 Just parse the configuration file, echoing it to standard output while
 parsing, and then exit. Used for debugging configuration file syntax.
@@ -50,14 +50,14 @@ parsing, and then exit. Used for debugging configuration file syntax.
 .B \-t
 Log all informational, debugging or error messages to
 .B
-/dev/console 
+/dev/console
 in addition to logging to syslogd. Useful for debugging.
 .IP
 .B
-NOTE: 
+NOTE:
 messages at priority LOG_DEBUG are never logged to syslog, Use the
 .B
-\-t, \-d or \-g 
+\-t, \-d or \-g
 flags to see all messages produced by tac_plus.  These flags
 should not be used in normal service.
 .TP
@@ -77,7 +77,7 @@ logging, instead of just using its ip address.
 .B \-p <port>
 Use the specified port number instead of the default port
 .B
-49 
+49
 for incoming tcp connections. Note that this changes the name of the
 pid file created by the daemon, which will append the port number to
 the file name if the port is not the default one.
@@ -85,25 +85,25 @@ the file name if the port is not the default one.
 .B \-d <level>
 Switch on debugging and write debug output into
 .B
-/var/log/tac_plus.log. 
+/var/log/tac_plus.log.
 
 See the definitions of debugging flags at the bottom of tac_plus.h for
 available flags and their meanings.  Most flags cause extra messages
-to be sent to 
+to be sent to
 .B
-/var/log/tac_plus.log 
-and also to 
+/var/log/tac_plus.log
+and also to
 .B
 syslog.
 .IP
 .B
-NOTE: 
-The 
+NOTE:
+The
 .B
-\-g 
+\-g
 flag will cause these messages to also appear on stdout.  The
 .B
-\-t 
+\-t
 flag will cause these messages to also be written to /dev/console.
 .IP
 The values represent bits, so they can be added together. Currently
@@ -111,6 +111,8 @@ the following values are recognised:
 .nf
 
 Value   Meaning
+2       config file parsing debugging
+4       process forking debugging
 8       authorisation debugging
 16      authentication debugging
 32      password file processing debugging
@@ -120,6 +122,11 @@ Value   Meaning
 512     encryption/decryption
 1024    MD5 hash algorithm debugging
 2048    very low level encryption/decryption
+4096    config file memory allocation freeing
+8192    pre/post authorization program arguments substitutions
+16384   config file expressions with entity tracing
+32768   maxsess (concurrent logins) debugging
+65536   file locking progress reporting
 
 .fi
 .TP