ITS#8565 - Clearly document rootdn requirement for the ppolicy overlay

diff --git a/doc/man/man5/slapo-ppolicy.5 b/doc/man/man5/slapo-ppolicy.5
index 8ce1a8287c40c1ace0361415a5efa5a7f932e740..3fe5184bd43f7cab8f324e119eaa1d7b269519b8 100644 (file)
--- a/doc/man/man5/slapo-ppolicy.5
+++ b/doc/man/man5/slapo-ppolicy.5
@@ -28,7 +28,8 @@ Note that some of the policies do not take effect when the operation
 is performed with the
 .B rootdn
 identity; all the operations, when performed with any other identity,
-may be subjected to constraints, like access control.
+may be subjected to constraints, like access control.  This overlay
+requires a rootdn to be configured on the database.
 .P
 Note that the IETF Password Policy proposal for LDAP makes sense
 when considering a single-valued password attribute, while