diff --git a/doc/common/section_keystone_config_ldap.xml b/doc/common/section_keystone_config_ldap.xml
index 9e6a84cc45..2af2391a0a 100644
--- a/doc/common/section_keystone_config_ldap.xml
+++ b/doc/common/section_keystone_config_ldap.xml
@@ -24,7 +24,7 @@
             enable the <option>authlogin_nsswitch_use_ldap</option> boolean
             value for SELinux on the Openstack Identity server. To enable and
             make the option persistent across reboots:</para>
-        <screen><prompt>#</prompt> <userinput>setsebool -P authlogin_nsswitch_use_ldap</userinput></screen>
+        <screen><prompt>#</prompt> <userinput>setsebool -P authlogin_nsswitch_use_ldap on</userinput></screen>
     </important>
     <para>Identity configuration is split into two separate back ends: identity
         (back end for users and groups) and assignments (back end for domains,