summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Adam <obnox@samba.org>2011-06-01 01:19:50 +0200
committerKarolin Seeger <kseeger@samba.org>2011-06-07 20:04:10 +0200
commit26f315791d0d8d55617652e1e7a158999a59f0c2 (patch)
treeb0bf2645efaa8efb0e5171079652a31331c4f57e
parent2653ab7488adecfa33909fd3ba0353b89c22f667 (diff)
downloadsamba-26f315791d0d8d55617652e1e7a158999a59f0c2.tar.gz
s3:doc: update the ldap_user_dn documentation in the idmap_ldap manpage
also extend the example with ldap_user_dn. Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed Jun 1 02:53:32 CEST 2011 on sn-devel-104 (cherry picked from commit 36c9a94bc132e738d68e40288b213a895b835e6b)
-rw-r--r--docs-xml/manpages-3/idmap_ldap.8.xml14
1 files changed, 11 insertions, 3 deletions
diff --git a/docs-xml/manpages-3/idmap_ldap.8.xml b/docs-xml/manpages-3/idmap_ldap.8.xml
index 3fe7d99772a..e68f2782bf2 100644
--- a/docs-xml/manpages-3/idmap_ldap.8.xml
+++ b/docs-xml/manpages-3/idmap_ldap.8.xml
@@ -48,8 +48,14 @@
<varlistentry>
<term>ldap_user_dn = DN</term>
<listitem><para>
- Defines the user DN to be used for authentication. If absent an
- anonymous bind will be performed.
+ Defines the user DN to be used for authentication.
+ The secret for authenticating this user should be
+ stored with net idmap secret
+ (see <citerefentry><refentrytitle>net</refentrytitle>
+ <manvolnum>8</manvolnum></citerefentry>).
+ If absent, the ldap credentials from the ldap passdb configuration
+ are used, and if these are also absent, an anonymous
+ bind will be performed as last fallback.
</para></listitem>
</varlistentry>
@@ -78,7 +84,8 @@
<para>
The following example shows how an ldap directory is used as the
default idmap backend. It also configures the idmap range and base
- directory suffix.
+ directory suffix. The secret for the ldap_user_dn has to be set with
+ &quot;net idmap secret '*' password&quot;.
</para>
<programlisting>
@@ -87,6 +94,7 @@
idmap config * : range = 1000000-1999999
idmap config * : ldap_url = ldap://localhost/
idmap config * : ldap_base_dn = ou=idmap,dc=example,dc=com
+ idmap config * : ldap_user_dn = cn=idmap_admin,dc=example,dc=com
</programlisting>
<para>