diff --git a/doc/pam_usb.conf b/doc/pam_usb.conf
index 56a3431..4c2e0e3 100644
--- a/doc/pam_usb.conf
+++ b/doc/pam_usb.conf
@@ -1,17 +1,70 @@
-<configuration>
-    <defaults>
-    
-    </defaults>
-
-    <devices>
-    
-    </devices>
-
-    <users>
-    
-    </users>
-
-    <services>
-    
-    </services>
+<?xml version="1.0" ?><!--
+pamusb.conf: Configuration file for pam_usb.
+
+See http://www.pamusb.org/doc/configuring
+--><configuration>
+		<!-- Default options -->
+		<defaults>
+				<!-- Example:
+						<option name="debug">true</option>
+				-->
+		</defaults>
+
+		<!-- Device settings -->
+		<devices>
+				<!-- Example:
+				Note: You should use pamusb-conf to add devices automatically.
+				<device id="MyDevice">
+						<vendor>SanDisk Corp.</vendor>
+						<model>Cruzer Titanium</model>
+						<serial>SNDKXXXXXXXXXXXXXXXX</serial>
+						<volume_uuid>6F6B-42FC</volume_uuid>
+						<option name="probe_timeout">10</option>
+				</device>
+				-->
+		</devices>
+
+
+		<!-- User settings -->
+		<users>
+				<!-- Note: Use pamusb-conf to add a user, then you can tweak
+						manually the configuration here if needed.
+				-->
+
+				<!-- Example:
+						Authenticate user scox using "MyDevice", and configure pamusb-agent
+						to automatically start/stop gnome-screensaver on key insertion and
+						removal:
+						<user id="scox">
+								<device>MyDevice</device>
+								<option name="quiet">true</option>
+								<agent event="lock">gnome-screensaver-command -\-lock</agent>
+								<agent event="unlock">gnome-screensaver-command -\-deactivate</agent>
+						</user>
+
+						Configure user root to authenticate using MyDevice, but update one
+						time pads at every login (default is 1 hour):
+						<user id="root">
+								<device>MyDevice</device>
+								<option name="pad_expiration">0</option>
+						</user>
+				-->
+	</users>
+
+		<!-- Services settings (e.g. gdm, su, sudo...) -->
+		<services>
+				<!-- Example: Speed up hotplugging by disabling one time pads -->
+				<!--
+				<service id="pamusb-agent">
+						<option name="one_time_pad">false</option>
+				</service>
+				-->
+
+				<!-- Disable output for 'su' (needed for gksu) -->
+				<!--
+				<service id="su">
+						<option name="quiet">true</option>
+				</service>
+				-->
+		</services>
 </configuration>