document new options

diff --git a/doc/man/man8/slapacl.8 b/doc/man/man8/slapacl.8
index a1be578dcf0433ec1b045ac24f07d83f807baf1b..7e1900e7729d19358b9a8911a9f7963f3bebaf0e 100644 (file)
--- a/doc/man/man8/slapacl.8
+++ b/doc/man/man8/slapacl.8
@@ -10,6 +10,7 @@ slapacl \- Check access to a list of attributes.
 .B [\-f slapd.conf]
 .B [\-D authcDN | \-U authcID]
 .B \-b DN
+.B [\-u]
 .B [attr[/access][:value]] [...]
 .LP
 .SH DESCRIPTION
@@ -65,10 +66,26 @@ for details); mutually exclusive with
 .BI \-b " DN"
 specify the 
 .B DN 
-access to is requested; the corresponding entry is not fetched 
-from the database, and thus it must not exist.
-However, a database must be selected to determine what rules 
-apply; thus, it must be in the naming context of a configured database.
+which access is requested to; the corresponding entry is fetched 
+from the database, and thus it must exist.
+The DN is also used to determine what rules apply; thus, it must be
+in the naming context of a configured database.  See also
+.BR \-u .
+.TP
+.BI \-u
+do not fetch the entry from the database.
+In this case, if the entry does not exist, a fake entry with the DN
+given with the
+.B \-b
+option is used, with no attributes.
+As a consequence, those rules that depend on the contents 
+of the target object will not behave as with the real object.
+The DN given with the
+.B \-b
+option is still used to select what rules apply; thus, it must be
+in the naming context of a configured database.
+See also
+.BR \-b .
 .SH EXAMPLES
 The command
 .LP