Update ngircd config from upstream, fix typos, add clarifications

debian/ngircd.conf

@@ -59,7 +59,7 @@
 	# This tells ngIRCd to write its current process ID to a file.
 	# Note that the pidfile is written AFTER chroot and switching the
 	# user ID, e.g. the directory the pidfile resides in must be
-	# writeable by the ngIRCd user and exist in the chroot directory.
+	# writable by the ngIRCd user and exist in the chroot directory.
 	# Keep this setting in sync with PIDFILE in /etc/init.d/ngircd
 	PidFile = /var/run/ngircd/ngircd.pid
 
@@ -67,7 +67,7 @@
 	# one port, separated with ",". (Default: 6667)
 	;Ports = 6667, 6668, 6669
 
-	# Group ID under which the ngircd should run; you can use the name
+	# Group ID under which the ngIRCd should run; you can use the name
 	# of the group or the numerical ID. ATTENTION: For this to work the
 	# server must have been started with root privileges!
 	# Keep this setting in sync with DAEMONUSER in /etc/init.d/ngircd
@@ -137,14 +137,17 @@
 	# Set every clients' user name to their nick name
 	;CloakUserToNick = yes
 
-	# Try to connect to other irc servers using ipv4 and ipv6, if possible
+	# Try to connect to other IRC servers using IPv4 and IPv6, if possible.
 	;ConnectIPv6 = yes
 	;ConnectIPv4 = yes
 
-	# Don do any DNS lookups when a client connects to the server.
+	# Do any DNS lookups when a client connects to the server.
 	;DNS = yes
 
-	# Do IDENT lookups, if ngIRCd has been compiled with support for it.
+	# Do IDENT lookups if ngIRCd has been compiled with support for it.
+	# Users identified using IDENT are registered without the "~" character
+	# prepended to their user name.
+	# Note: The Debian package was compiled without ident support.
 	;Ident = yes
 
 	# Enhance user privacy slightly (useful for IRC server on TOR or I2P)
@@ -165,7 +168,23 @@
 	;OperServerMode = no
 
 	# Use PAM if ngIRCd has been compiled with support for it.
-	PAM = no
+	# Users identified using PAM are registered without the "~" character
+	# prepended to their user name.
+	# Note: The Debian package was compiled without PAM support.
+	;PAM = yes
+
+	# When PAM is enabled, all clients are required to be authenticated
+	# using PAM; connecting to the server without successful PAM
+	# authentication isn't possible.
+	# If this option is set, clients not sending a password are still
+	# allowed to connect: they won't become "identified" and keep the "~"
+	# character prepended to their supplied user name.
+	# Please note: To make some use of this behavior, it most probably
+	# isn't useful to enable "Ident", "PAM" and "PAMIsOptional" at the
+	# same time, because you wouldn't be able to distinguish between
+	# Ident'ified and PAM-authenticated users: both don't have a "~"
+	# character prepended to their respective user names!
+	;PAMIsOptional = no
 
 	# Allow Pre-Defined Channels only (see Section [Channels])
 	;PredefChannelsOnly = no
@@ -190,10 +209,8 @@
 	# be used. (Default: not set)
 	;WebircPassword = xyz
 
-;[SSL]
-	# SSL-related configuration options. Please note that this section
-	# is only available when ngIRCd is compiled with support for SSL!
-	# So don't forget to remove the ";" above if this is the case ...
+[SSL]
+	# SSL-related configuration options.
 
 	# SSL Server Key Certificate
 	;CertFile = /etc/ssl/certs/server.crt