sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-03 13:47:25 +03:00
Code

docs: Clarify "ldap ssl" description in man smb.conf.

Browse Source 
Mention "ldap ssl ads".

Karolin
This commit is contained in:
Karolin Seeger 2009-02-06 09:41:21 +01:00
parent 02f13538f0
commit 61f1747441
1 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
docs-xml/smbdotconf/ldap/ldapssl.xml
View File

@ -13,9 +13,9 @@
script.</para>
<para>LDAP connections should be secured where possible. This may be
done setting either this parameter to
done setting <emphasis>either</emphasis> this parameter to
<parameter moreinfo="none">Start_tls</parameter>
or by specifying <parameter moreinfo="none">ldaps://</parameter> in
<emphasis>or</emphasis> by specifying <parameter moreinfo="none">ldaps://</parameter> in
the URL argument of <smbconfoption name="passdb backend"/>.</para>
<para>The <smbconfoption name="ldap ssl"/> can be set to one of
@ -32,6 +32,17 @@
communicating with the directory server.</para>
</listitem>
</itemizedlist>
<para>
Please note that this parameter does only affect <emphasis>rpc</emphasis>
methods. To enable the LDAPv3 StartTLS extended operation (RFC2830) for
<emphasis>ads</emphasis>, set
<smbconfoption name="ldap ssl">yes</smbconfoption>
<emphasis>and</emphasis>
<smbconfoption name="ldap ssl ads">yes</smbconfoption>.
See <refentrytitle>smb.conf</refentrytitle><manvolnum>5</manvolnum>
for more information on <smbconfoption name="ldap ssl ads"/>.
</para>
</description>
<value type="default">start tls</value>
</samba:parameter>