From 27924f6989bbebb5454559ffb13abead7b9409c6 Mon Sep 17 00:00:00 2001
From: Malthe Borch <mborch@gmail.com>
Date: Fri, 9 Sep 2016 15:20:16 +0200
Subject: [PATCH] Recommend adjusting the 'http-header-max-length' ZServer
 instance option

---
 README.rst | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/README.rst b/README.rst
index 09d5b98..f22d761 100644
--- a/README.rst
+++ b/README.rst
@@ -43,6 +43,16 @@ Integrated Windows Authentication, IE will attempt to construct a SPN
 based upon resolving the hostname to an A record. Hence to avoid
 problems, do not use CNAMEs for your DNS records.
 
+Request Header Limitations
+--------------------------
+
+Some web server components including Zope's own ZServer impose
+limitations on the request and response header lengths.
+
+When using SSO it's recommended to increase ``http-header-max-length``
+to 16384.
+
+
 Service Principal Names (SPNs) and Keytabs
 ------------------------------------------