doc: clarify that SSPI and GSSAPI are interchangeable

Reported-by: [email protected]
Discussion: https://postgr.es/m/167846222574.1803490.15815104179136215862@wrigleys.postgresql.org

Backpatch-through: 11

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 2c3834d962b9c3292164a777b44b3fb969ec1b16..e9c2d82472c8a7492b555a29b50871f1d6aa941e 100644 (file)
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1510,10 +1510,12 @@ omicron         bryanh                  guest1
     negotiate mode, which will use
     Kerberos when possible and automatically
     fall back to NTLM in other cases.
-    SSPI authentication only works when both
-    server and client are running Windows,
-    or, on non-Windows platforms, when GSSAPI
-    is available.
+    SSPI and GSSAPI
+    interoperate as clients and servers, e.g., an
+    SSPI client can authenticate to an
+    GSSAPI server.  It is recommended to use
+    SSPI on Windows clients and servers and
+    GSSAPI on non-Windows platforms.