From: Graham Leggett
Date: Sun, 23 Jan 2005 14:10:33 +0000 (+0000)
Subject: Clarify some of the SSL/TLS details as used by the mod_ldap module.
X-Git-Tag: 2.1.3~118
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3955df151db2c1b093d02a3e06af01a3d985ce58;p=thirdparty%2Fapache%2Fhttpd.git
Clarify some of the SSL/TLS details as used by the mod_ldap module.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@126210 13f79535-47bb-0310-9956-ffa450edef68
---
diff --git a/docs/manual/mod/mod_ldap.xml b/docs/manual/mod/mod_ldap.xml
index 21db7b0e058..fa74cfc8e89 100644
--- a/docs/manual/mod/mod_ldap.xml
+++ b/docs/manual/mod/mod_ldap.xml
@@ -25,7 +25,7 @@
mod_ldap
LDAP connection pooling and result caching services for use
by other LDAP modules
-Experimental
+Extension
util_ldap.c
ldap_module
Available in version 2.0.41 and later
@@ -42,11 +42,16 @@ by other LDAP modules
flag to the configure script when building
Apache.
- SSL support requires that mod_ldap be linked
- with one of the following LDAP SDKs:
- OpenLDAP SDK (both 1.x and 2.x),
- Novell LDAP SDK, native Solaris LDAP SDK, native Microsoft LDAP SDK, or the
- iPlanet(Netscape) SDK.
+ SSL/TLS support is dependant on which LDAP toolkit has been
+ linked to APR. As of this writing, APR-util supports:
+ OpenLDAP SDK (2.x or later),
+ Novell LDAP
+ SDK,
+ Mozilla LDAP SDK, native Solaris LDAP SDK (Mozilla based),
+ native Microsoft LDAP SDK, or the
+ iPlanet
+ (Netscape) SDK. See the APR
+ website for details.
@@ -299,12 +304,12 @@ by other LDAP modules
Note: Client certificates are specified globally rather than per
connection, and so must be specified with the LDAPTrustedGlobalCert
directive as below. Trying to set client certificates via the
- LDAPTrustedClientCert directive will cause an error to be thrown
- when httpd starts up.
+ LDAPTrustedClientCert directive will cause an error to be logged
+ when an attempt is made to connect to the LDAP server..
The SDK supports both SSL and STARTTLS, set using the
LDAPTrustedMode parameter. If an ldaps:// URL is specified,
- SSL mode is forced.
+ SSL mode is forced, override this directive.
# Specify two CA certificate files