1 files changed, 42 insertions, 2 deletions
diff --git a/doc/httpauthd.conf.5 b/doc/httpauthd.conf.5
index e1a78db..959896a 100644
--- a/doc/httpauthd.conf.5
+++ b/doc/httpauthd.conf.5
@@ -69,6 +69,8 @@ implemented are:
 .Bl -hang
 .It LDAP 
 Authenticate against an LDAP server.
+.It NTLM
+Authenticate via NTLM against a Windows Server.
 .It MYSQL 
 Authenticate against a MYSQL database
 .It PGSQL 
@@ -135,10 +137,10 @@ you're using a certain method twice (eg: LDAP) with different settings. This
 option can only be used in a method section.
 .It Cd AuthTypes
 The allowed HTTP authentication types, separated by spaces. Any combination of: 
-.Ar Basic Digest 
+.Ar Basic Digest NTLM
 .Pp
 [ Default:
-.Ar Basic Digest 
+.Ar Basic Digest NTLM
 ]
 .It Cd CacheMax
 The maximum amount of successful authentication requests a method can cache.
@@ -314,6 +316,44 @@ in the case where anonymous users can't perform LDAP searches, for example.
 .Pp
 [ Optional ]
 .El
+.Sh NTLM METHOD OPTIONS
+Settings for the 
+.Em NTLM
+authentication method. This method authenticates users against NT domain 
+server.
+.Bl -hang
+.It Cd NTLMBackup
+The backup domain server to authenticate against. Used when 
+.Em NTLMServer 
+is not available.
+.Pp
+[ Optional ]
+.It Cd NTLMDomain
+The domain which contains the users that will be authenticated. This is 
+the NT domain, not the DNS domain.
+.Pp
+[ Required ]
+.It Cd NTLMServer
+The domain server to authenticate against. You should specify a name here
+not an IP address. 
+.Pp
+[ Required ]
+.It Cd PendingMax
+The maximum amount of halfway authenticated NTLM connections allowed. 
+This corresponds directly to the amount of concurrent connections made to 
+.Em NTLMServer
+.Pp
+[ Default: 
+.Em 16
+]
+.It Cd PendingTimeout
+The maximum time a halfway authenticated NTLM connection is allowed to 
+remain that way (in seconds). 
+.Pp
+[ Default: 
+.Em 20 
+]
+.El
 .Sh MYSQL AND PGSQL METHOD OPTIONS
 Here are the options for the MYSQL and PGSQL handlers. 
 .Bl -hang