diff --git a/doc/man/man5/ldap.conf.5 b/doc/man/man5/ldap.conf.5
index 1d091d01a4..af9d01923c 100644
--- a/doc/man/man5/ldap.conf.5
+++ b/doc/man/man5/ldap.conf.5
@@ -119,6 +119,7 @@ Aliases are only dereferenced when locating the base object of the search.
 .B always
 Aliases are dereferenced both in searching and in locating the base object
 of the search.
+.RE
 .SH SASL OPTIONS
 If OpenLDAP is built with Simple Authentication and Security Layer support,
 there are more options you can specify.
@@ -262,6 +263,7 @@ the session is immediately terminated.
 These keywords are equivalent. The server certificate is requested. If no
 certificate is provided, or a bad certificate is provided, the session
 is immediately terminated. This is the default setting.
+.RE
 .SH "ENVIRONMENT VARIABLES"
 .TP
 LDAPNOINIT