From 11148522ec1e79c88190bc2db9585045e423fdc4 Mon Sep 17 00:00:00 2001
From: Howard Chu <hyc@openldap.org>
Date: Sun, 21 Sep 2003 10:45:57 +0000
Subject: [PATCH] ITS#2573 dynamic group support

---
 doc/man/man5/slapd.access.5 | 23 ++++++++++++++++-------
 1 file changed, 16 insertions(+), 7 deletions(-)

diff --git a/doc/man/man5/slapd.access.5 b/doc/man/man5/slapd.access.5
index 4134cecab3..b04758f511 100644
--- a/doc/man/man5/slapd.access.5
+++ b/doc/man/man5/slapd.access.5
@@ -221,26 +221,26 @@ The statement
 .B dnattr=<attrname>
 means that access is granted to requests whose DN is listed in the
 entry being accessed under the 
-.B attrname
+.B <attrname>
 attribute.
 .LP
 The statement
 .B group=<group>
 means that access is granted to requests whose DN is listed
 in the group entry whose DN is given by
-.BR group .
+.BR <group> .
 The optional parameters
-.B objectclass
+.B <objectclass>
 and
-.B attrname
+.B <attrname>
 define the objectClass and the member attributeType of the group entry.
 The optional style qualifier
-.B style
+.B <style>
 can be
 .BR regex ,
 which means that
-.B pattern
-will be expanded accorging to regex (7), and
+.B <group>
+will be expanded according to regex (7), and
 .B base
 or
 .B exact
@@ -248,6 +248,15 @@ or
 .BR base ),
 which means that exact match will be used.
 .LP
+For static groups, the specified attributeType must have
+.B DistinguishedName
+or
+.B NameAndOptionalUID
+syntax. For dynamic groups the attributeType must
+be a subtype of the
+.B labeledURI
+attributeType.
+.LP
 The statements
 .BR peername=<peername> ,
 .BR sockname=<sockname> ,
-- 
2.39.5