diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 77c541b6cb0ea21e48b732a5041dbae6b5a6ae31..575eb3be448b6ebe2f16d18c04c613fdda39b966 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -231,7 +231,7 @@ hostnossl  <replaceable>database</replaceable>  <replaceable>user</replaceable>
        An IP address is specified in standard dotted decimal
        notation with a <acronym>CIDR</> mask length.  The mask
        length indicates the number of high-order bits of the client
-       IP address that must match.  Bits to the right of this must
+       IP address that must match.  Bits to the right of this should
        be zero in the given IP address.
        There must not be any white space between the IP address, the
        <literal>/</literal>, and the CIDR mask length.