X-Git-Url: https://git.sur5r.net/?p=openldap;a=blobdiff_plain;f=doc%2Fman%2Fman5%2Fslapd.conf.5;h=fd54e8929e5c3b0ae910be35e45535b1847d9e17;hp=87b2b065fbfcc7860b8acecfd310c5738156af6c;hb=9bef3574038a99a2c16ac54dab1ec352fc61c6fe;hpb=636b63b5fd18d16fec97eaf3deb34706647ab898

diff --git a/doc/man/man5/slapd.conf.5 b/doc/man/man5/slapd.conf.5
index 87b2b065fb..fd54e8929e 100644
--- a/doc/man/man5/slapd.conf.5
+++ b/doc/man/man5/slapd.conf.5
@@ -853,6 +853,17 @@ Specify which auxprop plugins to use for authentication lookups. The
 default is empty, which just uses slapd's internal support. Usually
 no other auxprop plugins are needed.
 .TP
+.B sasl\-auxprops\-dontusecopy <attr> [...]
+Specify which attribute(s) should be subject to the don't use copy control. This
+is necessary for some SASL mechanisms such as OTP to work in a replicated
+environment. The attribute "cmusaslsecretOTP" is the default value.
+.TP
+.B sasl\-auxprops\-dontusecopy\-ignore on | off
+Used to disable replication of the attribute(s) defined by
+sasl-auxprops-dontusecopy and instead use a local value for the attribute. This
+allows the SASL mechanism to continue to work if the master is offline. This can
+cause replication inconsistency. Defaults to off.
+.TP
 .B sasl\-host <fqdn>
 Used to specify the fully qualified domain name used for SASL processing.
 .TP