Add examples of authz IDs including both dn: and u:.
(The examples in the man page do not actually explain identity mapping -- how u:bjensen might be mapped to the same entry as dn:uid=bjensen,ou=people,dc=example,dc=com. See dsconfig create-identity-mapper --help for now)
| | |
|---|
| | | <term><option>-a, --authzID {authzID}</option></term> |
|---|
| | | <listitem> |
|---|
| | | <para>Authorization ID for the user entry whose password should be changed</para> |
|---|
| | | <para>The authorization ID is a string having either the prefix |
|---|
| | | <literal>dn:</literal> followed by the user's distinguished name, or |
|---|
| | | the prefix <literal>u:</literal> followed by a user identifier that |
|---|
| | | depends on the identity mapping used to match the user identifier to |
|---|
| | | an entry in the directory. Examples include |
|---|
| | | <literal>dn:uid=bjensen,ou=People,dc=example,dc=com</literal>, and, if |
|---|
| | | we assume that <literal>bjensen</literal> is mapped to Barbara Jensen's |
|---|
| | | entry, <literal>u:bjensen</literal>.</para> |
|---|
| | | </listitem> |
|---|
| | | </varlistentry> |
|---|
| | | <varlistentry> |
|---|
