Sync with HEAD

[openldap] / doc / man / man5 / slapd-dnssrv.5

diff --git a/doc/man/man5/slapd-dnssrv.5 b/doc/man/man5/slapd-dnssrv.5
index d7aaf031ae43d4f14d3d2ddea1a5490a56287a46..b3989e3af6db8264f70d0365d629ad1422d84060 100644 (file)
--- a/doc/man/man5/slapd-dnssrv.5
+++ b/doc/man/man5/slapd-dnssrv.5
@@ -1,5 +1,5 @@
-.TH SLAPD-DNSSRV 5 "3 May 2002" "OpenLDAP LDVERSION"
-.\" Copyright 1998-2002 The OpenLDAP Foundation All Rights Reserved.
+.TH SLAPD-DNSSRV 5 "RELEASEDATE" "OpenLDAP LDVERSION"
+.\" Copyright 1998-2006 The OpenLDAP Foundation All Rights Reserved.

 .\" Copying restrictions apply.  See COPYRIGHT/LICENSE.
 .\" $OpenLDAP$
 .SH NAME
 .\" Copying restrictions apply.  See COPYRIGHT/LICENSE.
 .\" $OpenLDAP$
 .SH NAME


@@ -11,12 +11,33 @@ The DNSSRV backend to
 .BR slapd (8)
 serves up referrals based upon SRV resource records held in
 the Domain Name System.
 .BR slapd (8)
 serves up referrals based upon SRV resource records held in
 the Domain Name System.

+.LP
+This backend is experimental.

 .SH CONFIGURATION
 The DNSSRV backend has no backend nor database specific options.
 It is configured simply by "database dnssrv" followed a suffix
 directive, e.g. suffix "".
 .SH CONFIGURATION
 The DNSSRV backend has no backend nor database specific options.
 It is configured simply by "database dnssrv" followed a suffix
 directive, e.g. suffix "".

+.SH ACCESS CONTROL
+The
+.B dnssrv
+backend does not honor all ACL semantics as described in
+.BR slapd.access (5).
+In fact, this backend only implements the
+.B search
+operation when the
+.B manageDSAit
+control (RFC 3296) is used, otherwise for every operation a referral,
+whenever appropriate, or an error is returned.
+Currently, there is no means to condition the returning of the referral
+by means of ACLs; no access control is implemented, except for 
+.B read (=r)
+access to the returned entries, which is actually provided by the frontend.
+Note, however, that the information returned by this backend is collected
+through the DNS, so it is public by definition.

 .SH FILES
 .SH FILES

+.TP

 ETCDIR/slapd.conf
 ETCDIR/slapd.conf

+default slapd configuration file

 .br
 .SH SEE ALSO
 \fB"OpenLDAP Root Service - An experimental LDAP referral
 .br
 .SH SEE ALSO
 \fB"OpenLDAP Root Service - An experimental LDAP referral