upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-27 18:19:52 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Clarify "users" terminology

Browse source
This commit is contained in:
Kurt Zeilenga 2003-04-15 02:20:01 +00:00
parent d28bdf9cc2
commit 06da0f5e6f
2 changed files with 10 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
doc/man/man5/slapd.access.5
View file

@ -177,14 +177,14 @@ refers to everybody.
.LP
The keyword
.B anonymous
means access is granted to unauthenticated users; it is moslty used
means access is granted to unauthenticated clients; it is mostly used
to limit access to authentication resources (e.g. the
.B userPassword
attribute) to unauthenticated users for authentication purposes.
attribute) to unauthenticated clients for authentication purposes.
.LP
The keyword
.B users
means access is granted to authenticated users.
means access is granted to authenticated clients.
.LP
The keyword
.B self
@ -346,7 +346,7 @@ access means that one is allowed access to an attribute to perform
authentication/authorization operations (e.g.
.BR bind )
with no other access.
This is useful to grant unauthenticated users the least possible
This is useful to grant unauthenticated clients the least possible
access level to critical resources, like passwords.
.LP
The
@ -424,7 +424,7 @@ or the (even more silly) example
.fi
.LP
which grants everybody search and compare privileges, and adds read
privileges to authenticated users.
privileges to authenticated clients.
.SH FILES
.TP
ETCDIR/slapd.conf

8
doc/man/man5/slapd.conf.5
View file

@ -279,10 +279,12 @@ with
<style> ::= exact | base | one | subtree | children | regex | anonymous
.RE
.B Anonymous
is hit when a search is performed without prior binding;
The term
.B anonymous
matches all unauthenticated clients.
the term
.B users
is hit when a search is performed by a successfully bound user;
matches all authenticated clients;
otherwise a
.B regex
dn pattern is assumed unless otherwise specified by qualifying