mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2024-12-21 03:10:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

authzFrom removed.

Browse Source
This commit is contained in:
Gavin Henry 2007-09-06 22:08:24 +00:00
parent d4c22b0c1d
commit e908e97338
1 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
doc/guide/admin/overlays.sdf
View File

@ -111,16 +111,13 @@ definitions:
> credentials="<secret>"
> mode="self"
> chain-tls start
> chain-idassert-authzFrom "*"
> chain-return-error TRUE
> updateref "ldap://ldapmaster.example.com/"
The {{B:chain-tls}} statement enables TLS from the slave to the ldap master.
The {{B:chain-idassert-authzFrom}} statement will assert the identity of whatever
bound dn on the slave is making the update request. The DITs are exactly the
same between these machines, therefore whatever user bound to the slave will
also exist on the master. If that DN does not have update privileges on the master,
nothing will happen.
The DITs are exactly the same between these machines, therefore whatever user
bound to the slave will also exist on the master. If that DN does not have
update privileges on the master, nothing will happen.
You will need to restart the slave after these changes. Then, if you are using
{{loglevel 256}}, you can monitor an {{ldapmodify}} on the slave and the master.