From fdcca646fa9eabc810b752388ecaa075d70464a4 Mon Sep 17 00:00:00 2001
From: Eric Covener
Date: Wed, 2 Jun 2010 11:56:42 +0000
Subject: [PATCH] catch up with xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950512 13f79535-47bb-0310-9956-ffa450edef68
---
docs/manual/mod/mod_authnz_ldap.html.en | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/docs/manual/mod/mod_authnz_ldap.html.en b/docs/manual/mod/mod_authnz_ldap.html.en
index f1f53dd1ac..fbc36272d6 100644
--- a/docs/manual/mod/mod_authnz_ldap.html.en
+++ b/docs/manual/mod/mod_authnz_ldap.html.en
@@ -886,8 +886,9 @@ authorization
Compatibility: | Available in version 2.3.7 and later |
When set, and mod_authnz_ldap
has authenticated the
- user, comparisons for authorization use the credentials provided via
- HTTP basic authentication instead of the servers own credentials.
+ user, LDAP comparisons for authorization use the queried distinguished name (DN)
+ and HTTP basic authentication password of the authenticated user instead of
+ the servers configured credentials.
The ldap-attribute, ldap-user, and ldap-group (single-level only)
authorization checks use comparisons.
@@ -1151,8 +1152,9 @@ environment variable
Compatibility: | Available in version 2.3.7 and later |
When set, and mod_authnz_ldap
has authenticated the
- user, searches for authorization use the credentials provided via
- HTTP basic authentication instead of the servers own credentials.
+ user, LDAP searches for authorization use the queried distinguished name (DN)
+ and HTTP basic authentication password of the authenticated user instead of
+ the servers configured credentials.
The ldap-filter and ldap-dn authorization
checks use searches.
@@ -1179,6 +1181,7 @@ environment variable
directive line, used to distinguish the members of the current group that
are groups.
Syntax: | AuthLDAPSubGroupAttribute attribute |
+Default: | AuthLDAPSubgroupAttribute member uniquemember |
Context: | directory, .htaccess |
Override: | AuthConfig |
Status: | Extension |
@@ -1200,6 +1203,7 @@ are groups.
Description: | Specifies which LDAP objectClass values identify directory
objects that are groups during sub-group processing. |
Syntax: | AuthLDAPSubGroupClass LdapObjectClass |
+Default: | AuthLDAPSubGroupClass groupOfNames groupOfUniqueNames |
Context: | directory, .htaccess |
Override: | AuthConfig |
Status: | Extension |
--
2.50.1