upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-04 06:01:23 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

document proxyauthz{dn|pw} and idassert-*

Browse source
This commit is contained in:
Pierangelo Masarati 2004-05-13 23:35:39 +00:00
parent 657e580bbe
commit f035e1f18f
1 changed files with 24 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
doc/man/man5/slapd-ldap.5
View file

@ -98,6 +98,30 @@ their usage.
.B proxyauthzpw <password>
Password used with the proxy authzDN above.
.TP
.B idassert-mode {none|anonymous|self|proxyid|<dn>}
defines what type of identity assertion is used.
The default is
.BR none ,
which implies that the proxy will bind as itself and assert the user's
identity only when a user is bound.
Other values are
.BR anonymous
and
.BR self ,
which respectively mean that the empty or the client's identity
will be asserted,
.BR proxyid ,
which means that no proxyAuthz control will be used, so the proxyauthzdn
identity will be asserted.
Moreover, if a valid DN is used as
.BR <mode> ,
that identity will be asserted.
.TP
.B idassert-authz <authz>
if defined, selects what
.I local
identities are authorized to exploit the identity assertion feature.
.TP
.B proxy-whoami
Turns on proxying of the WhoAmI extended operation. If this option is
given, back-ldap will replace slapd's original WhoAmI routine with its