Tweak akeyconvert NEWS

Mention that it's run in the postinst, and talk about continued
management of krb5 keys.

Change-Id: I77a6e00f12ca7a4a6557c066625a69409ac375ad

diff --git a/debian/openafs-fileserver.NEWS b/debian/openafs-fileserver.NEWS
index 936c5f86dabe5a8b62635643189b022f265cb81a..5cf08a64b337ad516f1c9f8b4f27cf907fe43d98 100644 (file)
--- a/debian/openafs-fileserver.NEWS
+++ b/debian/openafs-fileserver.NEWS
@@ -3,7 +3,9 @@ openafs (1.8.0~pre4-1) unstable; urgency=low
   * Servers no longer use rxkad.keytab for long-term keys, which are
     now stored in KeyFileExt.  Administrators must use akeyconvert
     or similar tooling to populate the KeyFileExt.  In most cases,
-    `akeyconvert` with no arguments will suffice.
+    `akeyconvert` with no arguments will suffice, and krb5 keys
+    can still be managed (and periodically updated) in the rxkad.keytab.
+    `akeyconvert` is run automatically in the post-install script.
   * Server log handling has changed.  Logs are not truncated at
     startup by default, and are re-opened on SIGUSR1, to be compatible
     with external log rotation tools.