document --with-bsdauth

diff --git a/INSTALL b/INSTALL
index 384e8547b37e44eafce3bc3bf25e3873ea364ab8..9e6579d09b3495f330c89911e9e803aeca5cf3c7 100644 (file)
--- a/INSTALL
+++ b/INSTALL
@@ -186,12 +186,19 @@ Special features/options:
        access DCE via PAM before using this option.
 
   --with-logincap
-       Enable support for BSD login classes on FreeBSD and BSD/OS.  This
-       adds support for the login classes specified in /etc/login.conf.
+       Enable support for BSD login classes where available (OS-dependent).
+       This adds support for the login classes specified in /etc/login.conf.
        By default, a login class is not applied unless the 'use_loginclass'
        option is defined in sudoers or the user specifies a class on the
-       command line.  It does *not*, however cause sudo to use BSD
-       authentication.
+       command line.
+
+  --with-bsdauth
+       Enable support for BSD authentication on BSD/OS.  This option
+       assumes --with-logincap as well.  It is not possible to mix
+       BSD authentication with other authentication methods (and there
+       really should be no need to do so).  Note that only the newer
+       BSD authentication API is supported.  If you don't have
+       /usr/include/bsd_auth.h then you cannot use this.
 
   --disable-sia
        Disable SIA support.  This is the "Security Integration Architecture"