Mention that PAM requires the user already exist in the database, per

Dick Davies.

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 28ff28af5ce684607f7f16e8220b11e330ebdb6d..0ecfdd64e5b059a89e6ba5d4a46f1e5e0c18b960 100644 (file)
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -883,8 +883,10 @@ omicron       bryanh            guest1
     default PAM service name is <literal>postgresql</literal>. You can
     optionally supply your own service name after the <literal>pam</>
     key word in the file <filename>pg_hba.conf</filename>.
-    For more information about PAM, please read the
-    <ulink url="http://www.kernel.org/pub/linux/libs/pam/">
+    PAM is used only to validate username/password pairs.
+    The user must already exist in the database before PAM
+    can be used for authentication.  For more information about 
+    PAM, please read the <ulink url="http://www.kernel.org/pub/linux/libs/pam/">
     <productname>Linux-PAM</> Page</ulink>
     and the <ulink url="http://www.sun.com/software/solaris/pam/">
     <systemitem class="osname">Solaris</> PAM Page</ulink>.