Warn folks that setting TLS option may break some applications.

URI should be used instead.

diff --git a/doc/man/man5/ldap.conf.5 b/doc/man/man5/ldap.conf.5
index af9d01923cccb13310178fbb56ea521e92f6de80..5067cb193e54ded51c9e09f793ed9af7a77323bf 100644 (file)
--- a/doc/man/man5/ldap.conf.5
+++ b/doc/man/man5/ldap.conf.5
@@ -81,7 +81,7 @@ the port number the ldap server is listening on.  A space separated
 list of hosts may be provided.
 .B HOST
 is deprecated in favor of
-.BR URI.
+.BR URI .
 .TP
 .B PORT <port>
 Specifies the default port used when connecting to LDAP servers(s).
@@ -195,7 +195,14 @@ If OpenLDAP is built with Transport Layer Security support, there
 are more options you can specify.
 .TP
 .B TLS <level>
-Specifies whether client connections should use TLS by default. The
+Specifies whether client connections should use ldaps:// by default.
+This option is deprecated in favor of the
+.B URI
+option.  Using the
+.B TLS
+option may break some applications.
+.LP
+The
 .B <level>
 can be specified as one of the following keywords:
 .RS