Clarify 'cert' authentication documention.

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 2fb171094a8e32cd1909457063920ebe3f4e178a..de787f8c63312cc35959f60cd100808b3d0591bc 100644 (file)
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -1245,9 +1245,9 @@ ldapserver=ldap.example.net prefix="cn=" suffix="dc=example, dc=net"
     When using this authentication method, the server will require that
     the client provide a certificate. No password prompt will be sent
     to the client. The <literal>cn</literal> attribute of the certificate
-    will be matched with the username the user is trying to log in as,
-    and if they match the login will be allowed. Username mapping can be
-    used if the usernames don't match.
+    will be matched with the login username, and if they match the
+    login will be allowed. Username mapping can be used if the usernames
+    don't match.
    </para>
   </sect2>