diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
new file mode 100644
index a72f80f..fa53a0f
*** a/doc/src/sgml/client-auth.sgml
--- b/doc/src/sgml/client-auth.sgml
*************** omicron         bryanh
*** 1505,1514 ****
      <literal>negotiate</literal> mode, which will use
      <productname>Kerberos</productname> when possible and automatically
      fall back to <productname>NTLM</productname> in other cases.
!     <productname>SSPI</productname> authentication only works when both
!     server and client are running <productname>Windows</productname>,
!     or, on non-Windows platforms, when <productname>GSSAPI</productname>
!     is available.
     </para>
  
     <para>
--- 1505,1514 ----
      <literal>negotiate</literal> mode, which will use
      <productname>Kerberos</productname> when possible and automatically
      fall back to <productname>NTLM</productname> in other cases.
!     <productname>SSPI</productname> and <productname>GSSAPI</productname>
!     interoperate as clients and servers.  It is recommended to use
!     <productname>SSPI</productname> on Windows clients and servers and
!     <productname>GSSAPI</productname> on non-Windows platforms.
     </para>
  
     <para>