From f4dd34d24c22926b76da6f6e1d9f4c471ec2b2da Mon Sep 17 00:00:00 2001
From: rhaggard <rhaggard@localhost>
Date: Fri, 01 Feb 2008 17:30:23 +0000
Subject: [PATCH] commiting configuration XML files after adding info from the old config guide to be incorporated in the new generated config reference
---
opends/src/admin/defn/org/opends/server/admin/std/RootDNConfiguration.xml | 16 ++++++++++++++--
1 files changed, 14 insertions(+), 2 deletions(-)
diff --git a/opends/src/admin/defn/org/opends/server/admin/std/RootDNConfiguration.xml b/opends/src/admin/defn/org/opends/server/admin/std/RootDNConfiguration.xml
index b89d4cf..adc3f31 100644
--- a/opends/src/admin/defn/org/opends/server/admin/std/RootDNConfiguration.xml
+++ b/opends/src/admin/defn/org/opends/server/admin/std/RootDNConfiguration.xml
@@ -32,10 +32,22 @@
<adm:synopsis>
The
<adm:user-friendly-name />
- configuration contains all the Root DN Users defined in the
- Directory Server. In addition, it also defines the default set of
+ configuration is the parent of all the Root DN Users defined in the
+ directory server. In addition, it also defines the default set of
privileges that Root DN Users will automatically inherit.
</adm:synopsis>
+ <adm:description>
+ Because the ds-cfg-root-dn-user objectclass is an auxiliary class, each
+ root DN entry must have its own structural class (for example, inetOrgPerson) that
+ allows the additional attributes to include in that entry. Because root users in the
+ OpenDS Directory Server have actual entries, it is possible to provide other attributes
+ that might be necessary to allow for stronger authentication mechanisms
+ (for example, a certificate for use with SASL EXTERNAL, or information used for identity
+ mapping). It is also possible to have multiple root DNs in the OpenDS Directory
+ Server, which means that each of them can have their own password
+ (and associated password policy) and other settings on an individual basis rather
+ than requiring all administrators to share a single root DN and password.
+ </adm:description>
<adm:tag name="core" />
<adm:profile name="ldap">
<ldap:object-class>
--
Gitblit v1.10.0