upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-03 13:40:37 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

document new flag values for identity assertion

Browse source
This commit is contained in:
Pierangelo Masarati 2005-07-03 23:18:08 +00:00
parent 2480ae2908
commit 9565ec4bbd
1 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
doc/man/man5/slapd-ldap.5
View file

@ -231,6 +231,10 @@ permissions, or the asserted identities must have appropriate
permissions. Note, however, that the ID assertion feature is mostly
useful when the asserted identities do not exist on the remote server.
Flags can be
\fBoverride,{prescriptive|non-prescriptive}\fP
When the
.B override
flag is used, identity assertion takes place even when the database
@ -239,6 +243,20 @@ with the provided identity, and thus authenticating it, the proxy
performs the identity assertion using the configured identity and
authentication method.
When the
.B prescriptive
flag is used (the default), operations fail with
\fIinappropriateAuthentication\fP
for those identities whose assertion is not allowed by the
.B idassert-authzFrom
patterns.
If the
.B non-prescriptive
flag is used, operations are performed anonymously for those identities
whose assertion is not allowed by the
.B idassert-authzFrom
patterns.
This directive obsoletes
.BR idassert-authcDN ,
.BR idassert-passwd ,