diff --git a/extensions/guacamole-auth-ldap/src/main/java/org/glyptodon/guacamole/auth/ldap/LDAPGuacamoleProperties.java b/extensions/guacamole-auth-ldap/src/main/java/org/glyptodon/guacamole/auth/ldap/LDAPGuacamoleProperties.java
index 2efa85f85..39e884861 100644
--- a/extensions/guacamole-auth-ldap/src/main/java/org/glyptodon/guacamole/auth/ldap/LDAPGuacamoleProperties.java
+++ b/extensions/guacamole-auth-ldap/src/main/java/org/glyptodon/guacamole/auth/ldap/LDAPGuacamoleProperties.java
@@ -64,8 +64,9 @@ public class LDAPGuacamoleProperties {
     };
 
     /**
-     * The base DN of role based access control (RBAC) groups. All groups
-     * should be under this DN.
+     * The base DN of role based access control (RBAC) groups. All groups which
+     * will be used for RBAC must be contained somewhere within the subtree of
+     * this DN.
      */
     public static final StringGuacamoleProperty LDAP_GROUP_BASE_DN = new StringGuacamoleProperty() {