From 575d7d03306f100d100e69953eadcdcc9e5095df Mon Sep 17 00:00:00 2001
From: Bruce Momjian <bruce@momjian.us>
Date: Tue, 26 Apr 2005 03:01:22 +0000
Subject: [PATCH] Mention that PAM requires the user already exist in the
 database, per Dick Davies.

---
 doc/src/sgml/client-auth.sgml | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 062fa371b8..02f1eae3ec 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1,5 +1,5 @@
 <!--
-$PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.70.4.4 2005/04/22 04:19:02 momjian Exp $
+$PostgreSQL: pgsql/doc/src/sgml/client-auth.sgml,v 1.70.4.5 2005/04/26 03:01:22 momjian Exp $
 -->
 
 <chapter id="client-authentication">
@@ -882,11 +882,13 @@ omicron       bryanh            guest1
     default PAM service name is <literal>postgresql</literal>. You can
     optionally supply your own service name after the <literal>pam</>
     key word in the file <filename>pg_hba.conf</filename>.
-    For more information about PAM, please read the <ulink
-    url="http://www.kernel.org/pub/linux/libs/pam/"><productname>Linux-PAM</>
-    Page</ulink> and the <ulink
-    url="http://www.sun.com/software/solaris/pam/"><systemitem
-    class="osname">Solaris</> PAM Page</ulink>.
+    PAM is used only to validate username/password pairs.
+    The user must already exist in the database before PAM
+    can be used for authentication.  For more information about 
+    PAM, please read the <ulink url="http://www.kernel.org/pub/linux/libs/pam/">
+    <productname>Linux-PAM</> Page</ulink>
+    and the <ulink url="http://www.sun.com/software/solaris/pam/">
+    <systemitem class="osname">Solaris</> PAM Page</ulink>.
    </para>
   </sect2>
  </sect1>
-- 
2.50.1