svn: /pear/peardoc/trunk/en/package/networking/net-ldap2/ connect.xml

beni                                     Tue, 26 Jul 2011 05:50:56 +0000

Revision: http://svn.php.net/viewvc?view=revision&revision=313689

Log:
* Added some security notes

Changed paths:
    U   pear/peardoc/trunk/en/package/networking/net-ldap2/connect.xml

Modified: pear/peardoc/trunk/en/package/networking/net-ldap2/connect.xml
===================================================================
--- pear/peardoc/trunk/en/package/networking/net-ldap2/connect.xml	2011-07-25 23:40:57 UTC (rev 313688)
+++ pear/peardoc/trunk/en/package/networking/net-ldap2/connect.xml	2011-07-26 05:50:56 UTC (rev 313689)
@@ -65,7 +65,10 @@

             <row>
             <entry><literal>bindpw</literal></entry>
-            <entry>Password for the <literal>binddn</literal>. If the credentials are wrong, the bind will fail server-side and an anonymous bind will be established instead.</entry>
+            <entry>Password for the <literal>binddn</literal>. If the credentials are wrong, the bind will fail server-side and an
+		anonymous bind will be established instead. An empty password requests an unathenticated bind. This can cause
+		security problems in your application, if you rely on a bind to make security decisions (see
+		<ulink url="http://tools.ietf.org/html/rfc4513#section-6.3.1">RFC-4513, section 6.3.1</ulink>).</entry>
             <entry>(none)</entry>
             </row>