Mention that PAM requires the user already exist in the database, per

Dick Davies.

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 18269067f845660a93a3d3d43c7eed636b78c816..3f2bdce20fa135b76594c8a9c0c9b555a2f843fd 100644 (file)
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1,5 +1,5 @@
 
 
 
@@ -883,8 +883,10 @@ omicron       bryanh            guest1
     default PAM service name is postgresql. You can
     optionally supply your own service name after the pam
     key word in the file pg_hba.conf.
-    For more information about PAM, please read the
-    
+    PAM is used only to validate username/password pairs.
+    The user must already exist in the database before PAM
+    can be used for authentication.  For more information about 
+    PAM, please read the 
     Linux-PAM Page
     and the 
     Solaris PAM Page.