From 1ca4f7e9e319b10be2d54cf2df2e676e32bb9bcc Mon Sep 17 00:00:00 2001
From: Pierangelo Masarati <ando@openldap.org>
Date: Sat, 10 Apr 2010 01:25:21 +0000
Subject: [PATCH] document idassert-passthru (ITS#456)

---
 doc/man/man5/slapd-ldap.5 | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/doc/man/man5/slapd-ldap.5 b/doc/man/man5/slapd-ldap.5
index f81e4c1ff0..966dca1fba 100644
--- a/doc/man/man5/slapd-ldap.5
+++ b/doc/man/man5/slapd-ldap.5
@@ -382,6 +382,24 @@ and
 .BR idassert\-method .
 .RE
 
+.TP
+.B idassert-passthru <authz-regexp>
+if defined, selects what
+.I local
+identities bypass the identity assertion feature.
+Those identities need to be known by the remote host.
+The string
+.B <authz-regexp>
+follows the rules defined for the
+.I authzFrom
+attribute.
+See 
+.BR slapd.conf (5),
+section related to
+.BR authz\-policy ,
+for details on the syntax of this field.
+
+
 .TP
 .B idle\-timeout <time>
 This directive causes a cached connection to be dropped an recreated
-- 
2.39.5