From: Benjamin Kaduk <kaduk@mit.edu>
Date: Thu, 4 Jan 2018 03:00:18 +0000 (-0600)
Subject: Tweak akeyconvert NEWS
X-Git-Tag: debian/1.8.0_pre5-1~6^2~5
X-Git-Url: https://git.michaelhowe.org/gitweb/?a=commitdiff_plain;h=2b774ab115a2f21c2e039beb372f2dee7bf6ec8f;p=packages%2Fo%2Fopenafs.git

Tweak akeyconvert NEWS

Mention that it's run in the postinst, and talk about continued
management of krb5 keys.

Change-Id: I77a6e00f12ca7a4a6557c066625a69409ac375ad
---

diff --git a/debian/openafs-fileserver.NEWS b/debian/openafs-fileserver.NEWS
index 936c5f86d..5cf08a64b 100644
--- a/debian/openafs-fileserver.NEWS
+++ b/debian/openafs-fileserver.NEWS
@@ -3,7 +3,9 @@ openafs (1.8.0~pre4-1) unstable; urgency=low
   * Servers no longer use rxkad.keytab for long-term keys, which are
     now stored in KeyFileExt.  Administrators must use akeyconvert
     or similar tooling to populate the KeyFileExt.  In most cases,
-    `akeyconvert` with no arguments will suffice.
+    `akeyconvert` with no arguments will suffice, and krb5 keys
+    can still be managed (and periodically updated) in the rxkad.keytab.
+    `akeyconvert` is run automatically in the post-install script.
   * Server log handling has changed.  Logs are not truncated at
     startup by default, and are re-opened on SIGUSR1, to be compatible
     with external log rotation tools.