From fc3e8658942c4d9032a67ac7333f8037eed40f08 Mon Sep 17 00:00:00 2001
From: Mark Craig <mark.craig@forgerock.com>
Date: Fri, 15 Jul 2011 07:40:30 +0000
Subject: [PATCH] Add examples of authz IDs including both dn: and u:. (The examples in the man page do not actually explain identity mapping -- how u:bjensen might be mapped to the same entry as dn:uid=bjensen,ou=people,dc=example,dc=com. See dsconfig create-identity-mapper --help for now)
---
opendj3/src/main/docbkx/shared/man-ldappasswordmodify.xml | 8 ++++++++
1 files changed, 8 insertions(+), 0 deletions(-)
diff --git a/opendj3/src/main/docbkx/shared/man-ldappasswordmodify.xml b/opendj3/src/main/docbkx/shared/man-ldappasswordmodify.xml
index cae4486..75f4413 100644
--- a/opendj3/src/main/docbkx/shared/man-ldappasswordmodify.xml
+++ b/opendj3/src/main/docbkx/shared/man-ldappasswordmodify.xml
@@ -58,6 +58,14 @@
<term><option>-a, --authzID {authzID}</option></term>
<listitem>
<para>Authorization ID for the user entry whose password should be changed</para>
+ <para>The authorization ID is a string having either the prefix
+ <literal>dn:</literal> followed by the user's distinguished name, or
+ the prefix <literal>u:</literal> followed by a user identifier that
+ depends on the identity mapping used to match the user identifier to
+ an entry in the directory. Examples include
+ <literal>dn:uid=bjensen,ou=People,dc=example,dc=com</literal>, and, if
+ we assume that <literal>bjensen</literal> is mapped to Barbara Jensen's
+ entry, <literal>u:bjensen</literal>.</para>
</listitem>
</varlistentry>
<varlistentry>
--
Gitblit v1.10.0