clarify why there's no access checking in back-dnssrv

diff --git a/doc/man/man5/slapd-dnssrv.5 b/doc/man/man5/slapd-dnssrv.5
index ad00bac2d6a760da640b651e88a5e11b55a67efe..f5b29d37ad8eaa2b66c32c484645b88424873822 100644 (file)
--- a/doc/man/man5/slapd-dnssrv.5
+++ b/doc/man/man5/slapd-dnssrv.5
@@ -32,6 +32,8 @@ Currently, there is no means to condition the returning of the referral
 by means of ACLs; no access control is implemented, except for 
 .B read (=r)
 access to the returned entries, which is actually provided by the frontend.
+Note, however, that the information returned by this backend is collected
+through the DNS, so it is public by definition.
 .SH FILES
 .TP
 ETCDIR/slapd.conf