Commit ed3141fb authored by Graham Leggett's avatar Graham Leggett
Browse files

Clarify some of the SSL/TLS details as used by the mod_ldap module. 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@126210 13f79535-47bb-0310-9956-ffa450edef68
parent 9e12957d

docs/manual/mod/mod_ldap.xml

+14 −9
Changes for docs/manual/mod/mod_ldap.xml: 14 added lines, 9 removed lines.
Original line number Diff line number Diff line
@@ -25,7 +25,7 @@ 
<name>mod_ldap</name>

<description>LDAP connection pooling and result caching services for use

by other LDAP modules</description>

<status>Experimental</status>

<status>Extension</status>

<sourcefile>util_ldap.c</sourcefile>

<identifier>ldap_module</identifier>

<compatibility>Available in version 2.0.41 and later</compatibility>
@@ -42,11 +42,16 @@ by other LDAP modules</description> 
    flag to the <program>configure</program> script when building

    Apache.</p>



    <p>SSL support requires that <module>mod_ldap</module> be linked

    with one of the following LDAP SDKs: <a href="http://www.openldap.org/">

    OpenLDAP SDK</a> (both 1.x and 2.x), <a href="http://developer.novell.com/ndk/cldap.htm">

    Novell LDAP SDK</a>, native Solaris LDAP SDK, native Microsoft LDAP SDK, or the <a href="http://www.iplanet.com/downloads/developer/">

    iPlanet(Netscape)</a> SDK.</p>

    <p>SSL/TLS support is dependant on which LDAP toolkit has been

    linked to APR. As of this writing, APR-util supports:

    <a href="http://www.openldap.org/">OpenLDAP SDK</a> (2.x or later),

    <a href="http://developer.novell.com/ndk/cldap.htm">Novell LDAP

    SDK</a>, <a href="http://www.mozilla.org/directory/csdk.html">

    Mozilla LDAP SDK</a>, native Solaris LDAP SDK (Mozilla based),

    native Microsoft LDAP SDK, or the

    <a href="http://www.iplanet.com/downloads/developer/">iPlanet

    (Netscape)</a> SDK. See the <a href="http://apr.apache.org">APR</a>

    website for details.</p>



</summary>
@@ -299,12 +304,12 @@ by other LDAP modules</description> 
        <p>Note: Client certificates are specified globally rather than per

        connection, and so must be specified with the LDAPTrustedGlobalCert

        directive as below. Trying to set client certificates via the

        LDAPTrustedClientCert directive will cause an error to be thrown

        when httpd starts up.</p>

        LDAPTrustedClientCert directive will cause an error to be logged

        when an attempt is made to connect to the LDAP server..</p>



        <p>The SDK supports both SSL and STARTTLS, set using the

        LDAPTrustedMode parameter. If an ldaps:// URL is specified,

        SSL mode is forced.</p>

        SSL mode is forced, override this directive.</p>



        <example>

             # Specify two CA certificate files<br />