aboutsummaryrefslogtreecommitdiff
path: root/doc/src
diff options
context:
space:
mode:
Diffstat (limited to 'doc/src')
-rw-r--r--doc/src/sgml/client-auth.sgml10
1 files changed, 6 insertions, 4 deletions
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 82bfd25fd10..73e3b39e8b4 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1505,10 +1505,12 @@ omicron bryanh guest1
<literal>negotiate</literal> mode, which will use
<productname>Kerberos</productname> when possible and automatically
fall back to <productname>NTLM</productname> in other cases.
- <productname>SSPI</productname> authentication only works when both
- server and client are running <productname>Windows</productname>,
- or, on non-Windows platforms, when <productname>GSSAPI</productname>
- is available.
+ <productname>SSPI</productname> and <productname>GSSAPI</productname>
+ interoperate as clients and servers, e.g., an
+ <productname>SSPI</productname> client can authenticate to an
+ <productname>GSSAPI</productname> server. It is recommended to use
+ <productname>SSPI</productname> on Windows clients and servers and
+ <productname>GSSAPI</productname> on non-Windows platforms.
</para>
<para>