From 26e8ba267d340729f1bdf7559d81201df9d1d827 Mon Sep 17 00:00:00 2001 From: Kurt Zeilenga Date: Mon, 28 Aug 2000 19:17:37 +0000 Subject: [PATCH] Add security factors to man page --- doc/man/man5/slapd.conf.5 | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5 index cef9f2c2d2..eb73e13825 100644 --- a/doc/man/man5/slapd.conf.5 +++ b/doc/man/man5/slapd.conf.5 @@ -313,6 +313,37 @@ size allowed. 0 disables security layers. The default is 65536. .B schemacheck { on | off } Turn schema checking on or off. The default is on. .TP +.B security +Specify a set of factors (separated by white space) to require. +An integer value is associated with each factor and is roughly +equivalent of the encryption key length to require. A value +of 112 is equivalent to 3DES, 128 to Blowfish, etc.. +The directive may be specified globally and/or per-database. +.B ssf= +specifies the overall security strength factor. +.B transport= +specifies the transport security strength factor. +.B tls= +specifies the TLS security strength factor. +.B sasl= +specifies the SASL security strength factor. +.B update_ssf= +specifies the overall security strength factor to require for +directory updates. +.B update_transport= +specifies the transport security strength factor to require for +directory updates. +.B update_tls= +specifies the TLS security strength factor to require for +directory updates. +.B update_sasl= +specifies the SASL security strength factor to require for +directory updates. +Note that the +.B transport +factor is measure of security provided by the underlying transport, +e.g. ldapi:// (and eventually IPSEC). It is not normally used. +.TP .B sizelimit Specify the maximum number of entries to return from a search operation. The default size limit is 500. -- 2.39.5