diff --git a/ChangeLog b/ChangeLog
index a7082b412..f0d7dbc9d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+20031017
+ - (dtucker) [INSTALL] Note that --with-md5 is now required on platforms with
+   MD5 passwords even if PAM support is enabled.  From steev at detritus.net.
+
 20031015
  - (dtucker) OpenBSD CVS Sync
    - jmc@cvs.openbsd.org 2003/10/08 08:27:36
@@ -1361,4 +1365,4 @@
  - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
    Report from murple@murple.net, diagnosis from dtucker@zip.com.au
 
-$Id: ChangeLog,v 1.3082 2003/10/15 16:22:39 tim Exp $
+$Id: ChangeLog,v 1.3083 2003/10/17 06:32:11 dtucker Exp $
diff --git a/INSTALL b/INSTALL
index 86447f30a..849781dd4 100644
--- a/INSTALL
+++ b/INSTALL
@@ -130,7 +130,8 @@ need the S/Key libraries and header files installed for this to work.
 support. You will need libwrap.a and tcpd.h installed.
 
 --with-md5-passwords will enable the use of MD5 passwords. Enable this
-if your operating system uses MD5 passwords without using PAM.
+if your operating system uses MD5 passwords.  The resulting binary will
+support both MD5 and traditional crypt type passwords.
 
 --with-utmpx enables utmpx support. utmpx support is automatic for 
 some platforms.
@@ -198,4 +199,4 @@ Please refer to the "reporting bugs" section of the webpage at
 http://www.openssh.com/
 
 
-$Id: INSTALL,v 1.60 2003/09/23 12:12:38 djm Exp $
+$Id: INSTALL,v 1.61 2003/10/17 06:32:11 dtucker Exp $