@@ -1490,10 +1490,10 @@ omicron bryanh guest1
14901490 <term><literal>ldapurl</literal></term>
14911491 <listitem>
14921492 <para>
1493- An RFC 4516 LDAP URL. This is an alternative way to writemost of the
1493+ An RFC 4516 LDAP URL. This is an alternative way to writesome of the
14941494 other LDAP options in a more compact and standard form. The format is
14951495<synopsis>
1496- ldap://[<replaceable>user</replaceable>[:<replaceable>password</replaceable>]@] <replaceable>host</replaceable>[:<replaceable>port</replaceable>]/<replaceable>basedn</replaceable>[?[<replaceable>attribute</replaceable>][?[<replaceable>scope</replaceable>]]]
1496+ ldap://<replaceable>host</replaceable>[:<replaceable>port</replaceable>]/<replaceable>basedn</replaceable>[?[<replaceable>attribute</replaceable>][?[<replaceable>scope</replaceable>]]]
14971497</synopsis>
14981498 <replaceable>scope</replaceable> must be one
14991499 of <literal>base</literal>, <literal>one</literal>, <literal>sub</literal>,
@@ -1502,6 +1502,12 @@ ldap://[<replaceable>user</replaceable>[:<replaceable>password</replaceable>]@]<
15021502 not supported.
15031503 </para>
15041504
1505+ <para>
1506+ For non-anonymous binds, <literal>ldapbinddn</literal>
1507+ and <literal>ldapbindpasswd</literal> must be specified as separate
1508+ options.
1509+ </para>
1510+
15051511 <para>
15061512 To use encrypted LDAP connections, the <literal>ldaptls</literal>
15071513 option has to be used in addition to <literal>ldapurl</literal>.