Document that LDAP URLs should be double-quoted in pg_hba.conf because

commas are often present in the URL.

Backpatch to 8.2.X.

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 8ea76a0bd08da4c2a6394130474c53908abe642e..8b3954df74c7567ee6a46cc0777afcb577b9d781 100644 (file)
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1,4 +1,4 @@
-
+
 
 
  Client Authentication
@@ -929,9 +929,13 @@ omicron       bryanh            guest1
     
 ldap[s]://servername[:port]/base dn[;prefix[;suffix]]
     
-    for example:
+    Commas are used to specify multiple items in an ldap
+    component.  However, because unquoted commas are treated as item
+    separators in pg_hba.conf, it is wise to
+    double-quote the ldap URL to preserve any commas present,
+    e.g.:
     
-ldap://ldap.example.net/dc=example,dc=net;EXAMPLE\
+"ldap://ldap.example.net/dc=example,dc=net;EXAMPLE\"