X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=raddb%2Fmods-available%2Fldap;fp=raddb%2Fmods-available%2Fldap;h=1f0ee0383834684c7314a89be40003933023c401;hb=14a87b81409ef1b07f589b05f013b4e2356b75a3;hp=af3f155ff51f4ebe7bfaffcb55a23238f128e843;hpb=4ca09576d948b5b74d83a3d981a3b121b87bae20;p=freeradius.git

diff --git a/raddb/mods-available/ldap b/raddb/mods-available/ldap
index af3f155..1f0ee03 100644
--- a/raddb/mods-available/ldap
+++ b/raddb/mods-available/ldap
@@ -26,7 +26,7 @@ ldap {
 	#
 	#  Generic valuepair attribute
 	#
-	
+
 	#  If set, this will attribute will be retrieved in addition to any
 	#  mapped attributes.
 	#
@@ -45,7 +45,7 @@ ldap {
 	#
 	#  Mapping of LDAP directory attributes to RADIUS dictionary attributes.
 	#
-	
+
 	#  WARNING: Although this format is almost identical to the unlang
 	#  update section format, it does *NOT* mean that you can use other
 	#  unlang constructs in module configuration files.
@@ -104,7 +104,7 @@ ldap {
 	#            control:Auth-Type := ldap
 	#        }
 	#    }
-	
+
 	#
 	#  User object identification.
 	#
@@ -328,11 +328,19 @@ ldap {
 	#  These options set timeouts, keep-alives, etc. for the connections.
 	#
 	options {
+		#  Control under which situations aliases are followed.
+		#  May be one of 'never', 'searching', 'finding' or 'always'
+		#  default: libldap's default which is usually 'never'.
+		#
+		#  LDAP_OPT_DEREF is set to this value.
+#		dereference = 'always'
+
 		#
-		#  The following two configuration items are for Active Directory
-		#  compatibility.  If you set these to "no", then searches
-		#  will likely return "operations error", instead of a
-		#  useful result.
+		#  The following two configuration items control whether the
+		#  server follows references returned by LDAP directory.
+		#  They are  mostly for Active Directory compatibility.
+		#  If you set these to "no", then searches will likely return
+		#  "operations error", instead of a useful result.
 		#
 		chase_referrals = yes
 		rebind = yes