--- a/mod_auth_ldap.wiki	Tue Apr 15 16:04:30 2014 +0000
+++ b/mod_auth_ldap.wiki	Sun Apr 27 03:39:13 2014 +0200
@@ -21,11 +21,11 @@
 || ldap_server   || space-separated list of hostnames or IPs           || "localhost"      ||
 || ldap_rootdn   || the distinguished name to auth against             || "" (anonymous)   ||
 || ldap_password || the password                                       || ""               ||
-|| ldap_filter   || search filter, with $user substituded for username || "(uid=$user)"    ||
+|| ldap_filter   || search filter, with $user and $host substituded for user- and hostname || "(uid=$user)"    ||
 || ldap_scope    || search scope. other values: "base" and "subtree"   || "onelevel"       ||
 || ldap_tls      || Use TLS to connect to LDAP? (can be true or false) || false            ||
-|| ldap_base     || LDAP base directory which stores user accounts     || this is required ||
-|| ldap_mode     || How to validate passwords.  Other option is "bind" || "getpasswd"      ||
+|| ldap_base     || LDAP base directory which stores user accounts     || This is required ||
+|| ldap_mode     || How passwords are validated.                       || "getpasswd" if ldap_rootdn is set, "bind" otherwise ||
 
 = Modes =