Note that TLS_CERT and TLS_KEY are user-only options.

diff --git a/doc/man/man5/ldap.conf.5 b/doc/man/man5/ldap.conf.5
index fdedd8426346f2ed799a36e867b66c9d2d262570..ec3f5e9ae3ffee2d801de7d054a844050cebe477 100644 (file)
--- a/doc/man/man5/ldap.conf.5
+++ b/doc/man/man5/ldap.conf.5
@@ -180,14 +180,16 @@ is always used before
 .B TLS_CACERTDIR.
 .TP
 .B TLS_CERT <filename>
-Specifies the file that contains the client certificate.
+Specifies the file that contains the client certificate. This is
+a user\-only option.
 .TP
 .B TLS_KEY <filename>
 Specifies the file that contains the private key that matches the certificate
 stored in the
 .B TLS_CERT
 file. Currently, the private key must not be protected with a password, so
-it is of critical importance that the key file is protected carefully.
+it is of critical importance that the key file is protected carefully. This
+is a user\-only option.
 .TP
 .B TLS_RANDFILE <filename>
 Specifies the file to obtain random bits from when /dev/[u]random is