From 798820ed34a8effa259d6e8290e6979cdfe8b2c9 Mon Sep 17 00:00:00 2001 From: Arthur de Jong Date: Wed, 27 Feb 2013 22:54:14 +0100 Subject: include information about when some of the options were added --- man/nslcd.conf.5.xml | 99 ++++++++++++++++++++++++++-------------------------- 1 file changed, 50 insertions(+), 49 deletions(-) (limited to 'man') diff --git a/man/nslcd.conf.5.xml b/man/nslcd.conf.5.xml index 67b9b7a..4eb77bb 100644 --- a/man/nslcd.conf.5.xml +++ b/man/nslcd.conf.5.xml @@ -72,7 +72,7 @@ Runtime options - + NUM @@ -85,7 +85,7 @@ - + UID @@ -98,7 +98,7 @@ - + GID @@ -111,7 +111,7 @@ - + SCHEME LEVEL @@ -139,7 +139,7 @@ General connection options - + URI @@ -154,10 +154,11 @@ Alternatively, the value DNS may be used to try to lookup the server using DNS - SRV records. + SRV records. By default the current domain is used but another domain can be queried by using the DNS:DOMAIN syntax. + When using the ldapi scheme, %2f should be used to escape slashes @@ -177,7 +178,7 @@ - + VERSION @@ -187,7 +188,7 @@ - + DN @@ -198,7 +199,7 @@ - + PASSWORD @@ -215,7 +216,7 @@ - + DN @@ -225,7 +226,7 @@ - + PASSWORD @@ -249,7 +250,7 @@ <acronym>SASL</acronym> authentication options - + MECHANISM @@ -259,7 +260,7 @@ - + REALM @@ -269,7 +270,7 @@ - + AUTHCID @@ -279,7 +280,7 @@ - + AUTHZID @@ -291,7 +292,7 @@ - + PROPERTIES @@ -303,7 +304,7 @@ - + yes|no @@ -323,7 +324,7 @@ Kerberos authentication options - + NAME @@ -339,7 +340,7 @@ Search/mapping options - + MAP DN @@ -368,7 +369,7 @@ - + MAP subtree|onelevel|base @@ -381,7 +382,7 @@ - + never|searching|finding|always @@ -391,7 +392,7 @@ - + yes|no @@ -401,7 +402,7 @@ - + MAP FILTER @@ -416,7 +417,7 @@ - + MAP ATTRIBUTE @@ -455,14 +456,14 @@ shadowWarning, shadowInactive, shadowExpire and shadowFlag. - + The uidNumber and gidNumber attributes in the passwd and group maps may be mapped to the objectSid followed by the domain SID to derive numeric user and group ids from the SID (e.g. objectSid:S-1-5-21-3623811015-3361044348-30300820). - + By default all userPassword attributes are mapped to the unmatchable password ("*") to avoid accidentally leaking password information. @@ -477,7 +478,7 @@ Timing/reconnect options - + SECONDS @@ -492,7 +493,7 @@ - + SECONDS @@ -504,7 +505,7 @@ - + SECONDS @@ -515,7 +516,7 @@ - + SECONDS @@ -527,7 +528,7 @@ - + SECONDS @@ -559,7 +560,7 @@ <acronym>SSL</acronym>/<acronym>TLS</acronym> options - + on|off|start_tls @@ -572,7 +573,7 @@ - + never|allow|try|demand|hard @@ -587,7 +588,7 @@ - + PATH @@ -599,7 +600,7 @@ - + PATH @@ -608,7 +609,7 @@ - + PATH @@ -619,7 +620,7 @@ - + CIPHERS @@ -630,7 +631,7 @@ - + PATH @@ -640,7 +641,7 @@ - + PATH @@ -672,7 +673,7 @@ --> - + NUMBER @@ -691,7 +692,7 @@ - + user1,user2,... @@ -708,7 +709,7 @@ - + UID @@ -719,7 +720,7 @@ - + REGEX @@ -738,7 +739,7 @@ - + yes|no @@ -754,7 +755,7 @@ - + FILTER @@ -768,7 +769,7 @@ $username, $service, $ruser, $rhost, $tty, $hostname, - $fqdn, + $fqdn, $dn, and $uid. These references are substituted in the search filter using the same syntax as described in the section on attribute mapping @@ -784,14 +785,14 @@ The option can be emulated with: (&(objectClass=posixAccount)(uid=$username)(|(host=$hostname)(host=$fqdn)(host=\\*))) - + This option may be specified multiple times and all specified searches should at least return one entry for access to be granted. - + "MESSAGE" @@ -868,7 +869,7 @@ - + Attribute mapping expressions For some attributes a mapping expression may be used to construct the -- cgit v1.2.3