document overlay behavior when manageDSAit is used (ITS#4831)

diff --git a/CHANGES b/CHANGES
index cf98c78e61c6fd08f464335628c5ddfa6c3efb77..7ef995946e4fe6b7607c57600fee7e55d278bf09 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -11,6 +11,8 @@ OpenLDAP 2.3.34 Engineering
        Fixed slapd-monitor NULL printf (ITS#4811)
        Fixed slapo-chain spurious additional info in response (ITS#4828)
        Fixed slapo-syncprov presence list (ITS#4813)
+       Documentation
+               Note slapo-dynlist interaction with manageDSAit (ITS#4831)
 
 OpenLDAP 2.3.33 Release (2007/01/17)
        Fixed slapd syncrepl error logging with delta-syncrepl

diff --git a/doc/man/man5/slapo-dynlist.5 b/doc/man/man5/slapo-dynlist.5
index 50d1910eb6afe1951832fc3b32a87d22ca2d98db..4a1be5723208847cd0010b60a12b848a2c4e7f76 100644 (file)
--- a/doc/man/man5/slapo-dynlist.5
+++ b/doc/man/man5/slapo-dynlist.5
@@ -22,6 +22,10 @@ The resulting entry must comply with the LDAP data model, so constraints
 are enforced.
 For example, if a \fISINGLE-VALUE\fP attribute is listed,
 only the first value results in the final entry.
+The above described behavior is disabled when the \fImanageDSAit\fP
+control (RFC 3296) is used.
+In that case, the contents of the dynamic group entry is returned;
+namely, the URLs are returned instead of being expanded.
 
 .SH CONFIGURATION
 The config directives that are specific to the