From 36d35a14df85e0e9a6a599d27232a43e543e4f5b Mon Sep 17 00:00:00 2001 From: Bruce Momjian Date: Sat, 24 Mar 2007 21:46:23 +0000 Subject: [PATCH] Document that LDAP URLs should be double-quoted in pg_hba.conf because commas are often present in the URL. Backpatch to 8.2.X. --- doc/src/sgml/client-auth.sgml | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml index 8ea76a0bd0..8b3954df74 100644 --- a/doc/src/sgml/client-auth.sgml +++ b/doc/src/sgml/client-auth.sgml @@ -1,4 +1,4 @@ - + Client Authentication @@ -929,9 +929,13 @@ omicron bryanh guest1 ldap[s]://servername[:port]/base dn[;prefix[;suffix]] - for example: + Commas are used to specify multiple items in an ldap + component. However, because unquoted commas are treated as item + separators in pg_hba.conf, it is wise to + double-quote the ldap URL to preserve any commas present, + e.g.: -ldap://ldap.example.net/dc=example,dc=net;EXAMPLE\ +"ldap://ldap.example.net/dc=example,dc=net;EXAMPLE\" -- 2.40.0