upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-21 14:25:24 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

minimal documentation of olcAuthIDRewrite

Browse source
This commit is contained in:
Pierangelo Masarati 2009-11-22 20:56:36 +00:00
parent e3c01a32f8
commit 27ccb54091
1 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
doc/man/man5/slapd-config.5
View file

@ -172,6 +172,22 @@ Other options should be registered with IANA, see RFC 4520 section 3.5.
OpenLDAP also has the `binary' option built in, but this is a transfer
option, not a tagging option.
.TP
.B olcAuthIDRewrite: <rewrite\-rule>
Used by the authentication framework to convert simple user names
to an LDAP DN used for authorization purposes.
Its purpose is analogous to that of
.BR olcAuthzRegexp
(see below).
The
.B rewrite\-rule
is a set of rules analogous to those described in
.BR slapo\-rwm (5)
for data rewriting (after stripping the \fIrwm\-\fP prefix).
.B olcAuthIDRewrite
and
.B olcAuthzRegexp
should not be intermixed.
.TP
.B olcAuthzPolicy: <policy>
Used to specify which rules to use for Proxy Authorization. Proxy
authorization allows a client to authenticate to the server using one