From 27ccb540919e3f6e59969046806f0a0a5d13f972 Mon Sep 17 00:00:00 2001 From: Pierangelo Masarati Date: Sun, 22 Nov 2009 20:56:36 +0000 Subject: [PATCH] minimal documentation of olcAuthIDRewrite --- doc/man/man5/slapd-config.5 | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/doc/man/man5/slapd-config.5 b/doc/man/man5/slapd-config.5 index 24d00bb490..555ae7c6f2 100644 --- a/doc/man/man5/slapd-config.5 +++ b/doc/man/man5/slapd-config.5 @@ -172,6 +172,22 @@ Other options should be registered with IANA, see RFC 4520 section 3.5. OpenLDAP also has the `binary' option built in, but this is a transfer option, not a tagging option. .TP +.B olcAuthIDRewrite: +Used by the authentication framework to convert simple user names +to an LDAP DN used for authorization purposes. +Its purpose is analogous to that of +.BR olcAuthzRegexp +(see below). +The +.B rewrite\-rule +is a set of rules analogous to those described in +.BR slapo\-rwm (5) +for data rewriting (after stripping the \fIrwm\-\fP prefix). +.B olcAuthIDRewrite +and +.B olcAuthzRegexp +should not be intermixed. +.TP .B olcAuthzPolicy: Used to specify which rules to use for Proxy Authorization. Proxy authorization allows a client to authenticate to the server using one -- 2.39.5