From 3955df151db2c1b093d02a3e06af01a3d985ce58 Mon Sep 17 00:00:00 2001 From: Graham Leggett Date: Sun, 23 Jan 2005 14:10:33 +0000 Subject: [PATCH] Clarify some of the SSL/TLS details as used by the mod_ldap module. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@126210 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/mod_ldap.xml | 23 ++++++++++++++--------- 1 file changed, 14 insertions(+), 9 deletions(-) diff --git a/docs/manual/mod/mod_ldap.xml b/docs/manual/mod/mod_ldap.xml index 21db7b0e05..fa74cfc8e8 100644 --- a/docs/manual/mod/mod_ldap.xml +++ b/docs/manual/mod/mod_ldap.xml @@ -25,7 +25,7 @@ mod_ldap LDAP connection pooling and result caching services for use by other LDAP modules -Experimental +Extension util_ldap.c ldap_module Available in version 2.0.41 and later @@ -42,11 +42,16 @@ by other LDAP modules flag to the configure script when building Apache.

-

SSL support requires that mod_ldap be linked - with one of the following LDAP SDKs: - OpenLDAP SDK (both 1.x and 2.x), - Novell LDAP SDK, native Solaris LDAP SDK, native Microsoft LDAP SDK, or the - iPlanet(Netscape) SDK.

+

SSL/TLS support is dependant on which LDAP toolkit has been + linked to APR. As of this writing, APR-util supports: + OpenLDAP SDK (2.x or later), + Novell LDAP + SDK, + Mozilla LDAP SDK, native Solaris LDAP SDK (Mozilla based), + native Microsoft LDAP SDK, or the + iPlanet + (Netscape) SDK. See the APR + website for details.

@@ -299,12 +304,12 @@ by other LDAP modules

Note: Client certificates are specified globally rather than per connection, and so must be specified with the LDAPTrustedGlobalCert directive as below. Trying to set client certificates via the - LDAPTrustedClientCert directive will cause an error to be thrown - when httpd starts up.

+ LDAPTrustedClientCert directive will cause an error to be logged + when an attempt is made to connect to the LDAP server..

The SDK supports both SSL and STARTTLS, set using the LDAPTrustedMode parameter. If an ldaps:// URL is specified, - SSL mode is forced.

+ SSL mode is forced, override this directive.

# Specify two CA certificate files
-- 2.50.1