mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-03-07 14:18:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

document socket permission extension to ldapi://

Browse Source
This commit is contained in:
Pierangelo Masarati 2002-10-23 14:22:21 +00:00
parent fdd586a6b7
commit 86dbdc1ddb
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
doc/man/man8/slapd.8
View File

@ -115,7 +115,7 @@ will by default serve
it will bind using INADDR_ANY and port 389.
The
.B \-h
option may be used to specify LDAP (and LDAPS) URLs to serve.
option may be used to specify LDAP (and other scheme) URLs to serve.
For example, if slapd is given
.B \-h " ldap://127.0.0.1:9009/ ldaps:/// ldapi:///",
It will bind 127.0.0.1:9009 for LDAP, 0.0.0.0:636 for LDAP over TLS,
@ -123,11 +123,18 @@ and LDAP over IPC (Unix domain sockets). Host 0.0.0.0 represents
INADDR_ANY.
A space separated list of URLs is expected. The URLs should be of
LDAP (ldap://) or LDAP over TLS (ldaps://) or LDAP over IPC (ldapi://)
scheme without a DN or other optional parameters. Support for the
scheme without a DN or other optional parameters, except an experimental
extension to indicate the permissions of the underlying socket, on those
OSes that honor them. Support for the
latter two schemes depends on selected configuration options. Hosts
may be specified by name or IPv4 and IPv6 address formats.
Ports, if specfied, must be numeric. The default ldap:// port is 389
and the default ldaps:// port is 636.
The socket permissions for LDAP over IPC are indicated by
"x-mod=-rwxrwxrwx", "x-mod=0777" or "x-mod=777", where any
of the "rwx" can be "-" to suppress the related permission (note,
however, that sockets only honor the "w" permission), while any
of the "7" can be any legal octal digit, according to chmod(1).
.TP
.BI \-r " directory"
Specifies a chroot "jail" directory. slapd will