SPAM: [PATCH docs] pveum: Add information about realm certificates

As explained by Dominik and Fabian [0].

[0] https://bugzilla.proxmox.com/show_bug.cgi?id=2827

Signed-off-by: Dominic Jäger <d.jaeger@proxmox.com>

diff --git a/pveum.adoc b/pveum.adoc
index 4fbaa863794bd18e673fc8d5bcce1be892b39a88..57e1b371df87b1658c49c79f4d5ad5f2bde46c8d 100644 (file)
--- a/pveum.adoc
+++ b/pveum.adoc
@@ -163,6 +163,11 @@ configured via the `bind_dn` property in `/etc/pve/domains.cfg`. Its
 password then has to be stored in `/etc/pve/priv/ldap/<realmname>.pw`
 (e.g. `/etc/pve/priv/ldap/my-ldap.pw`). This file should contain a
 single line containing the raw password.
++
+To verify certificates, it is necessary to set `capath`, either directly to the 
+CA certificate of your LDAP server, or to the system path containing all 
+trusted CA certificates (`/etc/ssl/certs`).
+Additionally, the `verify` option has to be set.
 
 Microsoft Active Directory::