diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml index 8ea76a0bd0..8b3954df74 100644 --- a/doc/src/sgml/client-auth.sgml +++ b/doc/src/sgml/client-auth.sgml @@ -1,4 +1,4 @@ - + Client Authentication @@ -929,9 +929,13 @@ omicron bryanh guest1 ldap[s]://servername[:port]/base dn[;prefix[;suffix]] - for example: + Commas are used to specify multiple items in an ldap + component. However, because unquoted commas are treated as item + separators in pg_hba.conf, it is wise to + double-quote the ldap URL to preserve any commas present, + e.g.: -ldap://ldap.example.net/dc=example,dc=net;EXAMPLE\ +"ldap://ldap.example.net/dc=example,dc=net;EXAMPLE\"