diff --git a/doc/sample.config b/doc/sample.config
index 840740a5..d075f78f 100644
--- a/doc/sample.config
+++ b/doc/sample.config
@@ -568,9 +568,10 @@ no-route = 192.168.5.0/255.255.255.0
 #   }
 # This option is available if ocserv is compiled with GSSAPI support. 
 
-#kkdcp = SERVER-PATH KERBEROS-REALM PROTOCOL@SERVER:PORT
-#kkdcp = /KdcProxy EXAMPLE.COM udp@127.0.0.1:88
-#kkdcp = /KdcProxy EXAMPLE.COM tcp@127.0.0.1:88
+#kkdcp = "SERVER-PATH KERBEROS-REALM PROTOCOL@SERVER:PORT"
+#kkdcp = "/KdcProxy KERBEROS.REALM udp@127.0.0.1:88"
+#kkdcp = "/KdcProxy KERBEROS.REALM tcp@127.0.0.1:88"
+#kkdcp = "/KdcProxy KERBEROS.REALM tcp@[::1]:88"
 
 #
 # The following options are for (experimental) AnyConnect client 
diff --git a/src/ocserv-args.def b/src/ocserv-args.def
index 31253132..1ddc3e66 100644
--- a/src/ocserv-args.def
+++ b/src/ocserv-args.def
@@ -672,10 +672,10 @@ no-route = 192.168.5.0/255.255.255.0
 #   }
 # This option is available if ocserv is compiled with GSSAPI support. 
 
-#kkdcp = SERVER-PATH KERBEROS-REALM PROTOCOL@SERVER:PORT
-#kkdcp = /KdcProxy KERBEROS.REALM udp@127.0.0.1:88
-#kkdcp = /KdcProxy KERBEROS.REALM tcp@127.0.0.1:88
-#kkdcp = /KdcProxy KERBEROS.REALM tcp@[::1]:88
+#kkdcp = "SERVER-PATH KERBEROS-REALM PROTOCOL@SERVER:PORT"
+#kkdcp = "/KdcProxy KERBEROS.REALM udp@127.0.0.1:88"
+#kkdcp = "/KdcProxy KERBEROS.REALM tcp@127.0.0.1:88"
+#kkdcp = "/KdcProxy KERBEROS.REALM tcp@[::1]:88"
 
 #
 # The following options are for (experimental) AnyConnect client