From 05ca71069ffc5d5b50971c77a6a8a64f6f491cc9 Mon Sep 17 00:00:00 2001
From: Graham Christensen <graham@grahamc.com>
Date: Fri, 11 Feb 2022 11:24:28 -0500
Subject: [PATCH] ldap config: document putting the password in a separate file

---
 doc/manual/src/configuration.md | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/doc/manual/src/configuration.md b/doc/manual/src/configuration.md
index b4ccff89..ec071f24 100644
--- a/doc/manual/src/configuration.md
+++ b/doc/manual/src/configuration.md
@@ -137,7 +137,7 @@ Example configuration:
         timeout = 30
       </ldap_server_options>
       binddn = "cn=root,dc=example"
-      bindpw = notapassword
+      include ldap-password.conf
       start_tls = 0
       <start_tls_options>
         verify = none
@@ -170,6 +170,12 @@ Example configuration:
 </ldap>
 ```
 
+Then, place the password to your LDAP server in `/var/lib/hydra/ldap-password.conf`:
+
+```
+bindpw = the-ldap-password
+```
+
 ### Debugging LDAP
 
 Set the `debug` parameter under `ldap.config.ldap_server_options.debug`: