From fdcca646fa9eabc810b752388ecaa075d70464a4 Mon Sep 17 00:00:00 2001 From: Eric Covener Date: Wed, 2 Jun 2010 11:56:42 +0000 Subject: [PATCH] catch up with xforms git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950512 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/mod_authnz_ldap.html.en | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/docs/manual/mod/mod_authnz_ldap.html.en b/docs/manual/mod/mod_authnz_ldap.html.en index f1f53dd1ac..fbc36272d6 100644 --- a/docs/manual/mod/mod_authnz_ldap.html.en +++ b/docs/manual/mod/mod_authnz_ldap.html.en @@ -886,8 +886,9 @@ authorization Compatibility:Available in version 2.3.7 and later

When set, and mod_authnz_ldap has authenticated the - user, comparisons for authorization use the credentials provided via - HTTP basic authentication instead of the servers own credentials.

+ user, LDAP comparisons for authorization use the queried distinguished name (DN) + and HTTP basic authentication password of the authenticated user instead of + the servers configured credentials.

The ldap-attribute, ldap-user, and ldap-group (single-level only) authorization checks use comparisons.

@@ -1151,8 +1152,9 @@ environment variable Compatibility:Available in version 2.3.7 and later

When set, and mod_authnz_ldap has authenticated the - user, searches for authorization use the credentials provided via - HTTP basic authentication instead of the servers own credentials.

+ user, LDAP searches for authorization use the queried distinguished name (DN) + and HTTP basic authentication password of the authenticated user instead of + the servers configured credentials.

The ldap-filter and ldap-dn authorization checks use searches.

@@ -1179,6 +1181,7 @@ environment variable directive line, used to distinguish the members of the current group that are groups. Syntax:AuthLDAPSubGroupAttribute attribute +Default:AuthLDAPSubgroupAttribute member uniquemember Context:directory, .htaccess Override:AuthConfig Status:Extension @@ -1200,6 +1203,7 @@ are groups. Description:Specifies which LDAP objectClass values identify directory objects that are groups during sub-group processing. Syntax:AuthLDAPSubGroupClass LdapObjectClass +Default:AuthLDAPSubGroupClass groupOfNames groupOfUniqueNames Context:directory, .htaccess Override:AuthConfig Status:Extension -- 2.50.1