Clarify the use of the auth service's -d option for specifying

a fallback username.

Reviewed by:	green

1 files changed, 15 insertions, 6 deletions

diff --git a/usr.sbin/inetd/inetd.8 b/usr.sbin/inetd/inetd.8
index 62b2726..ff37d27 100644
--- a/usr.sbin/inetd/inetd.8
+++ b/usr.sbin/inetd/inetd.8
@@ -436,13 +436,22 @@ Without options, the service will always return
 The available arguments to this service that alter its behavior are:
 .Bl -tag -width indent
 .It Fl d Ar fallback
-If the real ident service is enabled, return this user for every
-request.
-If the real ident service is disabled, then this flag, instead of
-returning an error if getting the socket credentials or
-looking up the user name fails, return a default
+Provide a
 .Ar fallback
-user name to the requesting ident client.
+username.
+If the real
+.Dq auth
+service is enabled
+(with the
+.Fl r
+option discussed below),
+return this username instead of an error
+when look ups fail
+for either socket credentials or the username.
+If the real
+.Dq auth
+service is disabled,
+return this username for every request.
 This is primarily useful when running this service on a NAT machine.
 .It Fl t Ar sec[.usec]
 Specify a timeout for the service.