From f035e1f18f87a218dd30e3fdf75534930b2183ae Mon Sep 17 00:00:00 2001 From: Pierangelo Masarati Date: Thu, 13 May 2004 23:35:39 +0000 Subject: [PATCH] document proxyauthz{dn|pw} and idassert-* --- doc/man/man5/slapd-ldap.5 | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/doc/man/man5/slapd-ldap.5 b/doc/man/man5/slapd-ldap.5 index 1d015bf8d9..265b128270 100644 --- a/doc/man/man5/slapd-ldap.5 +++ b/doc/man/man5/slapd-ldap.5 @@ -98,6 +98,30 @@ their usage. .B proxyauthzpw Password used with the proxy authzDN above. .TP +.B idassert-mode {none|anonymous|self|proxyid|} +defines what type of identity assertion is used. +The default is +.BR none , +which implies that the proxy will bind as itself and assert the user's +identity only when a user is bound. +Other values are +.BR anonymous +and +.BR self , +which respectively mean that the empty or the client's identity +will be asserted, +.BR proxyid , +which means that no proxyAuthz control will be used, so the proxyauthzdn +identity will be asserted. +Moreover, if a valid DN is used as +.BR , +that identity will be asserted. +.TP +.B idassert-authz +if defined, selects what +.I local +identities are authorized to exploit the identity assertion feature. +.TP .B proxy-whoami Turns on proxying of the WhoAmI extended operation. If this option is given, back-ldap will replace slapd's original WhoAmI routine with its -- 2.39.5