docs:smbdotconf: make formatting of headers uniform.

[samba.git] / docs-xml / smbdotconf / ldap / ldapssl.xml

diff --git a/docs-xml/smbdotconf/ldap/ldapssl.xml b/docs-xml/smbdotconf/ldap/ldapssl.xml
index d785071ec4c692e84bf80f1225f9f831ee046871..ca9b5cbe95e2054e6318fe14582b95c9cf3e6a43 100644 (file)
--- a/docs-xml/smbdotconf/ldap/ldapssl.xml
+++ b/docs-xml/smbdotconf/ldap/ldapssl.xml
@@ -1,7 +1,6 @@
 <samba:parameter name="ldap ssl"
                  context="G"
-                                type="enum"
-                 advanced="1" developer="1"
+                 type="enum"
                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
 <description>
        <para>This option is used to define whether or not Samba should
@@ -13,9 +12,9 @@
        script.</para>
 
        <para>LDAP connections should be secured where possible. This may be
-       done setting either this parameter to
+       done setting <emphasis>either</emphasis> this parameter to
        <parameter moreinfo="none">Start_tls</parameter>
-       or by specifying <parameter moreinfo="none">ldaps://</parameter> in
+       <emphasis>or</emphasis> by specifying <parameter moreinfo="none">ldaps://</parameter> in
         the URL argument of <smbconfoption name="passdb backend"/>.</para>
 
        <para>The <smbconfoption name="ldap ssl"/> can be set to one of
@@ -27,11 +26,22 @@
                </listitem>
 
                <listitem>
-                       <para><parameter moreinfo="none">Start_tls</parameter> = Use
+                       <para><parameter moreinfo="none">start tls</parameter> = Use
                        the LDAPv3 StartTLS extended operation (RFC2830) for
                        communicating with the directory server.</para>
                </listitem>
        </itemizedlist>
+       <para>
+       Please note that this parameter does only affect <emphasis>rpc</emphasis>
+       methods. To enable the LDAPv3 StartTLS extended operation (RFC2830) for
+       <emphasis>ads</emphasis>, set
+       <smbconfoption name="ldap ssl">yes</smbconfoption>
+       <emphasis>and</emphasis>
+       <smbconfoption name="ldap ssl ads">yes</smbconfoption>.
+       See <refentrytitle>smb.conf</refentrytitle><manvolnum>5</manvolnum>
+       for more information on <smbconfoption name="ldap ssl ads"/>.
+        </para>
+
 </description>
-<value type="default">no</value>
+<value type="default">start tls</value>
 </samba:parameter>