upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-21 15:19:34 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

syncrepl inherits default TLS settings from main slapd config

Browse source
This commit is contained in:
Howard Chu 2007-01-08 20:38:42 +00:00
parent 1cc1f9b18a
commit 27dd7a5383
2 changed files with 6 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
doc/man/man5/slapd-config.5
View file

@ -1781,11 +1781,9 @@ parameter specifies use of the StartTLS extended operation
to establish a TLS session before Binding to the provider. If the
.B critical
argument is supplied, the session will be aborted if the StartTLS request
fails. Otherwise the syncrepl session continues without TLS. Note that the
main slapd TLS settings are not used by the syncrepl engine;
by default the TLS parameters from ETCDIR/ldap.conf will be used.
TLS settings may be specified here, in which case the ldap.conf settings
will be completely ignored.
fails. Otherwise the syncrepl session continues without TLS. The
tls_reqcert setting defaults to "demand" and the other TLS settings
default to the same as the main slapd TLS settings.
Rather than replicating whole entries, the consumer can query logs of
data modifications. This mode of operation is referred to as \fIdelta

8
doc/man/man5/slapd.conf.5
View file

@ -1689,11 +1689,9 @@ parameter specifies use of the StartTLS extended operation
to establish a TLS session before Binding to the provider. If the
.B critical
argument is supplied, the session will be aborted if the StartTLS request
fails. Otherwise the syncrepl session continues without TLS. Note that the
main slapd TLS settings are not used by the syncrepl engine;
by default the TLS parameters from ETCDIR/ldap.conf will be used.
TLS settings may be specified here, in which case the ldap.conf settings
will be completely ignored.
fails. Otherwise the syncrepl session continues without TLS. The
tls_reqcert setting defaults to "demand" and the other TLS settings
default to the same as the main slapd TLS settings.
Rather than replicating whole entries, the consumer can query logs of
data modifications. This mode of operation is referred to as \fIdelta