Place PAM before REJECT in sample file.

diff --git a/src/backend/libpq/pg_hba.conf.sample b/src/backend/libpq/pg_hba.conf.sample
index 7e744608fccd5a38cf9d5872b5f52ac2eb874ed8..2787e9a53c5ad180499dff37ab06ce272ae243ca 100644 (file)
--- a/src/backend/libpq/pg_hba.conf.sample
+++ b/src/backend/libpq/pg_hba.conf.sample
@@ -151,16 +151,16 @@
 #   krb5:      Kerberos V5 authentication is used.  Allowed only for
 #              TCP/IP connections, not for local UNIX-domain sockets.
 # 
-#   reject:    Reject the connection. This is used to reject certain hosts
-#              that are part of a network specified later in the file.
-#              To be effective, "reject" must appear before the later
-#              entries.
-#
 #   pam:        Authentication is passed off to PAM (PostgreSQL must be
 #               configured --with-pam), using the default service name
 #               "postgresql" - you can specify your own service name, by
 #               setting AUTH_ARGUMENT to the desired service name.
 #
+#   reject:    Reject the connection. This is used to reject certain hosts
+#              that are part of a network specified later in the file.
+#              To be effective, "reject" must appear before the later
+#              entries.
+#
 # 
 # 
 # Examples