document overlay behavior when manageDSAit is used (ITS#4831)

diff --git a/doc/man/man5/slapo-dynlist.5 b/doc/man/man5/slapo-dynlist.5
index 50d1910eb6afe1951832fc3b32a87d22ca2d98db..4a1be5723208847cd0010b60a12b848a2c4e7f76 100644 (file)
--- a/doc/man/man5/slapo-dynlist.5
+++ b/doc/man/man5/slapo-dynlist.5
@@ -22,6 +22,10 @@ The resulting entry must comply with the LDAP data model, so constraints
 are enforced.
 For example, if a \fISINGLE-VALUE\fP attribute is listed,
 only the first value results in the final entry.
+The above described behavior is disabled when the \fImanageDSAit\fP
+control (RFC 3296) is used.
+In that case, the contents of the dynamic group entry is returned;
+namely, the URLs are returned instead of being expanded.
 
 .SH CONFIGURATION
 The config directives that are specific to the