Import ITS#3292 syncrepl starttls doc from HEAD

diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5
index 9488cee4200d4ce7816d9296ac29884cb2c4a243..fc6429505c92ce2676e096b22088d310a0d456a9 100644 (file)
--- a/doc/man/man5/slapd.conf.5
+++ b/doc/man/man5/slapd.conf.5
@@ -1317,6 +1317,7 @@ one subordinate to another subordinate within the namingContext.
 .B [timelimit=<limit>]
 .B [schemachecking=on|off]
 .B [updatedn=<dn>]
+.B [starttls=yes|critical]
 .B [bindmethod=simple|sasl]
 .B [binddn=<dn>]
 .B [saslmech=<mech>]
@@ -1398,6 +1399,13 @@ of the replica database and
 be the same as the
 .B rootdn
 of the master database.
+The
+.B starttls
+parameter specifies use of the StartTLS extended operation to establish
+a TLS session before Binding to the provider. If the
+.B critical
+argument is supplied, the session will be aborted if the StartTLS request
+fails. Otherwise the syncrepl session continues without TLS.
 A
 .B bindmethod
 of