Merge remote-tracking branch 'origin/mdb.master'

[openldap] / doc / man / man5 / slapd-passwd.5

diff --git a/doc/man/man5/slapd-passwd.5 b/doc/man/man5/slapd-passwd.5
index 644d3b5e2b3f7d9eb23d7adf88ef86ee55ee1a1c..42262a495f5ace1793e11270aad2c83f6af806f0 100644 (file)
--- a/doc/man/man5/slapd-passwd.5
+++ b/doc/man/man5/slapd-passwd.5
@@ -1,9 +1,9 @@
 .TH SLAPD-PASSWD 5 "RELEASEDATE" "OpenLDAP LDVERSION"
-.\" Copyright 1998-2002 The OpenLDAP Foundation All Rights Reserved.
+.\" Copyright 1998-2012 The OpenLDAP Foundation All Rights Reserved.
 .\" Copying restrictions apply.  See COPYRIGHT/LICENSE.
 .\" $OpenLDAP$
 .SH NAME
-slapd-passwd \- /etc/passwd backend to slapd
+slapd\-passwd \- /etc/passwd backend to slapd
 .SH SYNOPSIS
 ETCDIR/slapd.conf
 .SH DESCRIPTION
@@ -11,7 +11,7 @@ The PASSWD backend to
 .BR slapd (8)
 serves up the user account information listed in the system
 .BR passwd (5)
-file.
+file.  This backend is provided for demonstration purposes only.
 The DN of each entry is "uid=<username>,<suffix>".
 Note that non-base searches scan the the entire passwd file, and
 are best suited for hosts with small passwd files.
@@ -29,6 +29,20 @@ manual page.
 Specifies an alternate passwd file to use.
 The default is
 .BR /etc/passwd .
+.SH ACCESS CONTROL
+The
+.B passwd
+backend does not honor any of the access control semantics described in
+.BR slapd.access (5).
+Only
+.B read (=r)
+access to the
+.B entry
+pseudo-attribute and to the other attribute values of the entries
+returned by the
+.B search
+operation is honored, which is performed by the frontend.
+
 .SH FILES
 .TP
 ETCDIR/slapd.conf