From d5bc86835dfcc0345684f81a02f157b04a9d09de Mon Sep 17 00:00:00 2001
From: Roland Gruber <post@rolandgruber.de>
Date: Mon, 3 Oct 2011 16:48:36 +0000
Subject: [PATCH] better host description

---
 lam/docs/manual-sources/howto.xml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/lam/docs/manual-sources/howto.xml b/lam/docs/manual-sources/howto.xml
index 927259f0..7818ec7c 100644
--- a/lam/docs/manual-sources/howto.xml
+++ b/lam/docs/manual-sources/howto.xml
@@ -1715,7 +1715,13 @@ Have fun!
         are prefixed with "!" (e.g. "!hr_server").</para>
 
         <para>Please note that your PAM settings need to support host
-        restrictions.</para>
+        restrictions. This feature is enabled by setting <emphasis
+        role="bold">pam_check_host_attr yes</emphasis> in your <emphasis
+        role="bold">/etc/pam_ldap.conf</emphasis>. When it is enabled then the
+        account facility of pam_ldap will perform the checks and return an
+        error when no proper host attribute is present. Please note that users
+        without host attribute cannot login to such a configured
+        server.</para>
 
         <screenshot>
           <mediaobject>