From 55b22c6f9b0a1a8b3bc4864229d0eb48174b38d6 Mon Sep 17 00:00:00 2001 From: Bruce Momjian Date: Sat, 24 Mar 2007 21:46:25 +0000 Subject: [PATCH] Document that LDAP URLs should be double-quoted in pg_hba.conf because commas are often present in the URL. Backpatch to 8.2.X. --- doc/src/sgml/client-auth.sgml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml index ca4f0a4e81..1f3eeb9209 100644 --- a/doc/src/sgml/client-auth.sgml +++ b/doc/src/sgml/client-auth.sgml @@ -929,9 +929,13 @@ omicron bryanh guest1 ldap[s]://servername[:port]/base dn[;prefix[;suffix]] - for example: + Commas are used to specify multiple items in an ldap + component. However, because unquoted commas are treated as item + separators in pg_hba.conf, it is wise to + double-quote the ldap URL to preserve any commas present, + e.g.: -ldap://ldap.example.net/dc=example,dc=net;EXAMPLE\ +"ldap://ldap.example.net/dc=example,dc=net;EXAMPLE\" -- 2.39.5