From: Alan Buxey <alan.buxey@gmail.com>
Date: Mon, 20 Jul 2015 11:13:39 +0000 (+0100)
Subject: Update ldap
X-Git-Tag: release_3_0_10~299
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=333edebe8f34949a542494e6dc6a6fcff2ef5f61;p=thirdparty%2Ffreeradius-server.git

Update ldap
---

diff --git a/raddb/mods-available/ldap b/raddb/mods-available/ldap
index a4532c83127..6c78d8c55e0 100644
--- a/raddb/mods-available/ldap
+++ b/raddb/mods-available/ldap
@@ -488,13 +488,16 @@ ldap {
 #		private_key_file = /path/to/radius.key
 #		random_file = /dev/urandom
 
-		#  Certificate Verification requirements.  Can be:
-		#    'never' (don't even bother trying)
-		#    'allow' (try, but don't fail if the certificate
-		#		can't be verified)
-		#    'demand' (fail if the certificate doesn't verify.)
-		#
-		#  The default is 'allow'
+ 		#  Certificate Verification requirements.  Can be:
+		#    'never' (do not even bother trying)
+ 		#    'allow' (try, but don't fail if the certificate
+		#		cannot be verified)
+		#    'demand' (fail if the certificate does not verify)
+		#    'hard'  (similar to 'demand' but fails if TLS 
+		#             cannot negotiate)
+ 		#
+		#  The default is 'demand'
+
 #		require_cert	= 'demand'
 	}