Auth info for idmap_ldap

net idmap
(This used to be commit 24fa52a63451678bb6f574d99a96e33eedc52ab1)

diff --git a/docs/manpages-3/idmap_ldap.8.xml b/docs/manpages-3/idmap_ldap.8.xml
index 6794b49c79768e1ceaaebcf12eb75415f473a7a8..173964f1694b17ae49a2b60ebf8d53be4c9a5be1 100644 (file)
--- a/docs/manpages-3/idmap_ldap.8.xml
+++ b/docs/manpages-3/idmap_ldap.8.xml
@@ -36,6 +36,14 @@
                </para></listitem>
                </varlistentry>
 
+               <varlistentry>
+               <term>ldap_user_dn = DN</term>
+               <listitem><para>
+                       Defines the user DN to be used for authentication. If absent an
+                       anonymous bind will be performed.
+               </para></listitem>
+               </varlistentry>
+
                <varlistentry>
                <term>ldap_url = ldap://server/</term>
                <listitem><para>
@@ -72,6 +80,14 @@
                </para></listitem>
                </varlistentry>
 
+               <varlistentry>
+               <term>ldap_user_dn = DN</term>
+               <listitem><para>
+                       Defines the user DN to be used for authentication. If absent an
+                       anonymous bind will be performed.
+               </para></listitem>
+               </varlistentry>
+
                <varlistentry>
                <term>ldap_url = ldap://server/</term>
                <listitem><para>
@@ -121,6 +137,17 @@
        </programlisting>
 </refsect1>
 
+<refsynopsisdiv>
+       <title>NOTE</title>
+
+       <para>In order to use authentication against ldap servers you may
+       need to provide a DN and a password. To avoid exposing the password
+       in plain text in the configuration file we store it into a security
+       store. The &quot;net idmap &quot; command is used to store a secret
+       for the DN specified in a specific idmap domain.
+       </para>
+</refsynopsisdiv>
+
 <refsect1>
        <title>AUTHOR</title>
 

diff --git a/docs/manpages-3/net.8.xml b/docs/manpages-3/net.8.xml
index 0e08a8e9d3cc4c6b25fc4f6ab19ae18647923551..aaa5658d68b28c3f207fd9577bb0470f9e142c91 100644 (file)
--- a/docs/manpages-3/net.8.xml
+++ b/docs/manpages-3/net.8.xml
@@ -1146,6 +1146,35 @@ and groups (Domain Users, Domain Admins, Domain Guests) on the ldap tree.
 
 </refsect2>
 
+<refsect2>
+<title>IDMAP DUMP &lt;output file&gt;</title>
+
+<para>
+Dumps the mappings in the specified output file.
+</para>
+
+</refsect2>
+
+<refsect2>
+<title>IDMAP RESTORE [input file]</title>
+
+<para>
+Restore the mappings from the specified file or stdin.
+</para>
+
+</refsect2>
+
+<refsect2>
+<title>IDMAP SECRET &lt;DOMAIN&gt;|ALLOC &lt;secret&gt;</title>
+
+<para>
+Store a secret for the sepcified domain, used primarily for domains
+that use idmap_ldap as a backend. In this case the secret is used
+as the password for the user DN used to bind to the ldap server.
+</para>
+
+</refsect2>
+
 <refsect2>
 <title>USERSHARE</title>