mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-12-27 10:09:43 -05:00
ITS#6424
This commit is contained in:
parent
88f5f39472
commit
51382aab72
1 changed files with 9 additions and 11 deletions
|
|
@ -174,7 +174,9 @@ overridden by any per-target directive.
|
|||
This directive, when set to
|
||||
.BR yes ,
|
||||
causes the authentication to the remote servers with the pseudo-root
|
||||
identity to be deferred until actually needed by subsequent operations.
|
||||
identity (the identity defined in each
|
||||
.B idassert-bind
|
||||
directive) to be deferred until actually needed by subsequent operations.
|
||||
Otherwise, all binds as the rootdn are propagated to the targets.
|
||||
|
||||
.TP
|
||||
|
|
@ -539,19 +541,15 @@ specification.
|
|||
|
||||
.TP
|
||||
.B pseudorootdn "<substitute DN in case of rootdn bind>"
|
||||
This directive, if present, sets the DN that will be substituted to
|
||||
the bind DN if a bind with the backend's "rootdn" succeeds.
|
||||
The true "rootdn" of the target server ought not be used; an arbitrary
|
||||
administrative DN should used instead.
|
||||
Deprecated; use
|
||||
.B idassert\-bind
|
||||
instead.
|
||||
|
||||
.TP
|
||||
.B pseudorootpw "<substitute password in case of rootdn bind>"
|
||||
This directive sets the credential that will be used in case a bind
|
||||
with the backend's "rootdn" succeeds, and the bind is propagated to
|
||||
the target using the "pseudorootdn" DN.
|
||||
|
||||
Note: cleartext credentials must be supplied here; as a consequence,
|
||||
using the pseudorootdn/pseudorootpw directives is inherently unsafe.
|
||||
Deprecated; use
|
||||
.B idassert\-bind
|
||||
instead.
|
||||
|
||||
.TP
|
||||
.B rewrite* ...
|
||||
|
|
|
|||
Loading…
Reference in a new issue