From 5d0bed9421744105d9f99b12257921ac076cc264 Mon Sep 17 00:00:00 2001
From: Arthur de Jong <arthur@arthurdejong.org>
Date: Sun, 5 Sep 2010 09:30:44 +0000
Subject: implement a rootpwmodpw option that allows root users to change user
 passwords without a password prompt

git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1206 ef36b2f9-881f-0410-afb5-c4e39611909c
---
 man/nslcd.conf.5.xml | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

(limited to 'man')

diff --git a/man/nslcd.conf.5.xml b/man/nslcd.conf.5.xml
index 4520ada..72f0c21 100644
--- a/man/nslcd.conf.5.xml
+++ b/man/nslcd.conf.5.xml
@@ -192,8 +192,24 @@
      <listitem>
       <para>
        Specifies the distinguished name to use when the root user tries to
-       modify a user's password using the PAM module. The PAM module prompts
-       the user for the admin password instead of the user's password.
+       modify a user's password using the PAM module.
+      </para>
+     </listitem>
+    </varlistentry>
+
+    <varlistentry>
+     <term><option>rootpwmodpw</option> <replaceable>PASSWORD</replaceable></term>
+     <listitem>
+      <para>
+       Specifies the clear text credentials with which to bind if the root
+       user tries to change a user's password.
+       This option is only applicable when used with
+       <option>rootpwmoddn</option> above.
+       If this option is not specified the PAM module prompts the user for
+       this password.
+       If you set this option you should consider changing the permissions
+       of the <filename>nslcd.conf</filename> file to only grant access to
+       the root user.
       </para>
      </listitem>
     </varlistentry>
-- 
cgit v1.2.3