From fb171a06d493c71ba8a03ca07b767dfaa67aca0e Mon Sep 17 00:00:00 2001 From: Pierangelo Masarati Date: Mon, 21 May 2007 00:01:49 +0000 Subject: [PATCH] clarify that slapo-rwm could hide rootDSE and subschema --- doc/man/man5/slapo-rwm.5 | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/doc/man/man5/slapo-rwm.5 b/doc/man/man5/slapo-rwm.5 index 9ab1c1b3b7..ab69139dc6 100644 --- a/doc/man/man5/slapo-rwm.5 +++ b/doc/man/man5/slapo-rwm.5 @@ -78,6 +78,20 @@ overlay is the capability to perform suffix massaging between a virtual and a real naming context by means of the .B rwm-suffixmassage directive. +This, in conjunction with proxy backends, +.BR slapd-ldap (5) +and +.BR slapd-meta (5), +or with the relay backend, +.BR slapd-relay (5), +allows to create virtual views of databases. +A distinguishing feature of this overlay is that, when instantiated +before any database, it can modify the DN of requests +.I before +database selection. +For this reason, rules that rewrite the empty DN ("") +or the subschemaSubentry DN (usually "cn=subschema"), +would prevent clients from reading the root DSE or the DSA's schema. .TP .B rwm-suffixmassage "[]" "" Shortcut to implement naming context rewriting; the trailing part -- 2.39.5