Add the LDAPVerifyServerCert directive to the util_ldap doc

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@169711 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/CHANGES b/CHANGES
index ca7ef8c3d78b49fdba5bc683212f86d3971857ae..3b7b1b84e5ebbaab7457b36ac680fc013b19a6ef 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,13 +2,14 @@ Changes with Apache 2.1.5
 
   [Remove entries to the current 2.0 section below, when backported]
 
+  *) mod_ldap: Add the directive LDAPVerifyServerCert to specify 
+     whether to force verification of the server certificate when
+     establishing an SSL connection to the LDAP server. 
+     [Brad Nicholes]
+     
   *) mod_proxy: Run mod_rewrite before mod_proxy in the translate_name
      hook. [Paul Querna]
 
-  *) mod_authnz_ldap: Add the directive AuthLDAPAllowDNAuth to allow 
-     a user to authenticate against an LDAP directory using a full 
-     user DN. [Brad Nicholes]
-     
   *) Add AP_INIT_TAKE_ARGV for configuration commands. (minor MMN bump) 
      [Paul Querna]
 

diff --git a/docs/manual/mod/mod_ldap.xml b/docs/manual/mod/mod_ldap.xml
index d60815be4ff20fa0e68d6e903a0b1f8327127da3..f0d3fde79721f143bbb45cc3bdebc2ba712a1ffa 100644 (file)
--- a/docs/manual/mod/mod_ldap.xml
+++ b/docs/manual/mod/mod_ldap.xml
@@ -581,4 +581,18 @@ connection client certificates.</description>
 </usage>
 </directivesynopsis>
 
+<directivesynopsis>
+<name>LDAPVerifyServerCert</name>
+<description>Force server certificate verification</description>
+<syntax>LDAPVerifyServerCert <var>On|Off</var></syntax>
+<default>LDAPVerifyServerCert On</default>
+<contextlist><context>server config</context></contextlist>
+
+<usage>
+    <p>Specifies whether to force the verification of a 
+     server certificate when establishing an SSL connection to the 
+     LDAP server.</p>
+</usage>
+</directivesynopsis>
+
 </modulesynopsis>