docs: Clarify "ldap ssl" description in man smb.conf.

Mention "ldap ssl ads".

Karolin

diff --git a/docs-xml/smbdotconf/ldap/ldapssl.xml b/docs-xml/smbdotconf/ldap/ldapssl.xml
index b2e953736b21bbf6006378837fb0937a5ab361d7..fa7fea94d0663637715d3095a9bfd29aaed3e693 100644 (file)
--- a/docs-xml/smbdotconf/ldap/ldapssl.xml
+++ b/docs-xml/smbdotconf/ldap/ldapssl.xml
@@ -13,9 +13,9 @@
        script.</para>
 
        <para>LDAP connections should be secured where possible. This may be
-       done setting either this parameter to
+       done setting <emphasis>either</emphasis> this parameter to
        <parameter moreinfo="none">Start_tls</parameter>
-       or by specifying <parameter moreinfo="none">ldaps://</parameter> in
+       <emphasis>or</emphasis> by specifying <parameter moreinfo="none">ldaps://</parameter> in
         the URL argument of <smbconfoption name="passdb backend"/>.</para>
 
        <para>The <smbconfoption name="ldap ssl"/> can be set to one of
@@ -32,6 +32,17 @@
                        communicating with the directory server.</para>
                </listitem>
        </itemizedlist>
+       <para>
+       Please note that this parameter does only affect <emphasis>rpc</emphasis>
+       methods. To enable the LDAPv3 StartTLS extended operation (RFC2830) for
+       <emphasis>ads</emphasis>, set
+       <smbconfoption name="ldap ssl">yes</smbconfoption>
+       <emphasis>and</emphasis>
+       <smbconfoption name="ldap ssl ads">yes</smbconfoption>.
+       See <refentrytitle>smb.conf</refentrytitle><manvolnum>5</manvolnum>
+       for more information on <smbconfoption name="ldap ssl ads"/>.
+        </para>
+
 </description>
 <value type="default">start tls</value>
 </samba:parameter>