idmap_ldap.8: Add example with readonly backend

Signed-off-by: Luk Claes <luk@debian.org>
Signed-off-by: Michael Adam <obnox@samba.org>

diff --git a/docs-xml/manpages-3/idmap_ldap.8.xml b/docs-xml/manpages-3/idmap_ldap.8.xml
index 4cbfe84f1a3db752e7363b928f40e809e378505d..e77aec091588003e110f0dd1bbaf6077d2daacf3 100644 (file)
--- a/docs-xml/manpages-3/idmap_ldap.8.xml
+++ b/docs-xml/manpages-3/idmap_ldap.8.xml
@@ -88,6 +88,28 @@
        idmap config * : ldap_url     = ldap://localhost/
        idmap config * : ldap_base_dn = ou=idmap,dc=example,dc=com
        </programlisting>
+
+       <para>
+       This example shows how ldap can be used as a readonly backend while
+       tdb is the default backend used to store the mappings.
+       It adds an explicit configuration for some domain DOM1, that
+       uses the ldap idmap backend. Note that a range disjoint from the
+       default range is used.
+       </para>
+
+       <programlisting>
+       [global]
+       # "backend = tdb" is redundant here since it is the default
+       idmap config * : backend = tdb
+       idmap config * : range = 1000000-1999999
+
+       idmap config DOM1 : backend = ldap
+       idmap config DOM1 : range = 2000000-2999999
+       idmap config DOM1 : read only = yes
+       idmap config DOM1 : ldap_url = ldap://server/
+       idmap config DOM1 : ldap_base_dn = ou=idmap,dc=dom1,dc=example,dc=com
+       idmap config DOM1 : ldap_user_dn = cn=idmap_admin,dc=dom1,dc=example,dc=com
+       </programlisting>
 </refsect1>
 
 <refsynopsisdiv>