Using realm for bsdauth is misleading. It is currently unusable.

diff --git a/usr.sbin/radiusd/radiusd.conf.5 b/usr.sbin/radiusd/radiusd.conf.5
index 5275c79..a2bef64 100644 (file)
--- a/usr.sbin/radiusd/radiusd.conf.5
+++ b/usr.sbin/radiusd/radiusd.conf.5
@@ -1,4 +1,4 @@
-.\"    $OpenBSD: radiusd.conf.5,v 1.6 2015/09/22 10:59:59 sobrado Exp $
+.\"    $OpenBSD: radiusd.conf.5,v 1.7 2015/10/26 06:44:40 yasuoka Exp $
 .\"
 .\" Copyright (c) 2014 Esdenera Networks GmbH
 .\" Copyright (c) 2014 Internet Initiative Japan Inc.
@@ -15,7 +15,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: September 22 2015 $
+.Dd $Mdocdate: October 26 2015 $
 .Dt RADIUSD.CONF 5
 .Os
 .Sh NAME
@@ -186,12 +186,12 @@ module load radius  "/usr/libexec/radiusd/radiusd_radius"
 module set radius "secret" "testing123"
 module set radius "server" "127.0.0.1"
 
-authenticate *@local {
-       authenticate-by bsdauth
-}
 authenticate *@example.com {
        authenticate-by radius
 }
+authenticate * {
+       authenticate-by bsdauth
+}
 .Ed
 .Sh SEE ALSO
 .Xr authenticate 3 ,