Clarify that "security ssf=n" applies to "disallow bind_simple_unprotected".

diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5
index 3a9bb9836a523e92deab303a48baef1ef5eed661..0933adc32f9fe496a2751390104ad62d2ce056a4 100644 (file)
--- a/doc/man/man5/slapd.conf.5
+++ b/doc/man/man5/slapd.conf.5
@@ -179,8 +179,13 @@ disables acceptance of anonymous bind requests.
 .B bind_simple
 disables simple (bind) authentication.
 .B bind_simple_unprotected
-disables simple (bind) authentication when confidentiality
-protections (e.g. TLS) are not in place.
+disables simple (bind) authentication when integrity and/or confidentiality
+protections (e.g. TLS) are not in place.  The level of protection required
+is determined by the
+.I overall security strength factor
+(as set by the
+.B security
+directive).
 .B bind_krbv4
 disables Kerberos V4 (bind) authentication.
 .B tls_2_anon