From 592c4ad2b0cf0a1f4909c06aebb31624a6d7d989 Mon Sep 17 00:00:00 2001 From: Pierangelo Masarati Date: Fri, 1 Apr 2005 19:07:09 +0000 Subject: [PATCH] document new options --- doc/man/man8/slapacl.8 | 25 +++++++++++++++++++++---- 1 file changed, 21 insertions(+), 4 deletions(-) diff --git a/doc/man/man8/slapacl.8 b/doc/man/man8/slapacl.8 index a1be578dcf..7e1900e772 100644 --- a/doc/man/man8/slapacl.8 +++ b/doc/man/man8/slapacl.8 @@ -10,6 +10,7 @@ slapacl \- Check access to a list of attributes. .B [\-f slapd.conf] .B [\-D authcDN | \-U authcID] .B \-b DN +.B [\-u] .B [attr[/access][:value]] [...] .LP .SH DESCRIPTION @@ -65,10 +66,26 @@ for details); mutually exclusive with .BI \-b " DN" specify the .B DN -access to is requested; the corresponding entry is not fetched -from the database, and thus it must not exist. -However, a database must be selected to determine what rules -apply; thus, it must be in the naming context of a configured database. +which access is requested to; the corresponding entry is fetched +from the database, and thus it must exist. +The DN is also used to determine what rules apply; thus, it must be +in the naming context of a configured database. See also +.BR \-u . +.TP +.BI \-u +do not fetch the entry from the database. +In this case, if the entry does not exist, a fake entry with the DN +given with the +.B \-b +option is used, with no attributes. +As a consequence, those rules that depend on the contents +of the target object will not behave as with the real object. +The DN given with the +.B \-b +option is still used to select what rules apply; thus, it must be +in the naming context of a configured database. +See also +.BR \-b . .SH EXAMPLES The command .LP -- 2.39.5