X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=doc%2Fman%2Fman5%2Fslapd-dnssrv.5;h=b3989e3af6db8264f70d0365d629ad1422d84060;hb=b28eb650e8e56501f06ebdf745dffea495eea550;hp=d7aaf031ae43d4f14d3d2ddea1a5490a56287a46;hpb=46e33e463404cf45ba02965fd7c88bd276473da8;p=openldap

diff --git a/doc/man/man5/slapd-dnssrv.5 b/doc/man/man5/slapd-dnssrv.5
index d7aaf031ae..b3989e3af6 100644
--- a/doc/man/man5/slapd-dnssrv.5
+++ b/doc/man/man5/slapd-dnssrv.5
@@ -1,5 +1,5 @@
-.TH SLAPD-DNSSRV 5 "3 May 2002" "OpenLDAP LDVERSION"
-.\" Copyright 1998-2002 The OpenLDAP Foundation All Rights Reserved.
+.TH SLAPD-DNSSRV 5 "RELEASEDATE" "OpenLDAP LDVERSION"
+.\" Copyright 1998-2006 The OpenLDAP Foundation All Rights Reserved.
 .\" Copying restrictions apply.  See COPYRIGHT/LICENSE.
 .\" $OpenLDAP$
 .SH NAME
@@ -11,12 +11,33 @@ The DNSSRV backend to
 .BR slapd (8)
 serves up referrals based upon SRV resource records held in
 the Domain Name System.
+.LP
+This backend is experimental.
 .SH CONFIGURATION
 The DNSSRV backend has no backend nor database specific options.
 It is configured simply by "database dnssrv" followed a suffix
 directive, e.g. suffix "".
+.SH ACCESS CONTROL
+The
+.B dnssrv
+backend does not honor all ACL semantics as described in
+.BR slapd.access (5).
+In fact, this backend only implements the
+.B search
+operation when the
+.B manageDSAit
+control (RFC 3296) is used, otherwise for every operation a referral,
+whenever appropriate, or an error is returned.
+Currently, there is no means to condition the returning of the referral
+by means of ACLs; no access control is implemented, except for 
+.B read (=r)
+access to the returned entries, which is actually provided by the frontend.
+Note, however, that the information returned by this backend is collected
+through the DNS, so it is public by definition.
 .SH FILES
+.TP
 ETCDIR/slapd.conf
+default slapd configuration file
 .br
 .SH SEE ALSO
 \fB"OpenLDAP Root Service - An experimental LDAP referral