From 2b774ab115a2f21c2e039beb372f2dee7bf6ec8f Mon Sep 17 00:00:00 2001 From: Benjamin Kaduk Date: Wed, 3 Jan 2018 21:00:18 -0600 Subject: [PATCH] Tweak akeyconvert NEWS Mention that it's run in the postinst, and talk about continued management of krb5 keys. Change-Id: I77a6e00f12ca7a4a6557c066625a69409ac375ad --- debian/openafs-fileserver.NEWS | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/debian/openafs-fileserver.NEWS b/debian/openafs-fileserver.NEWS index 936c5f86d..5cf08a64b 100644 --- a/debian/openafs-fileserver.NEWS +++ b/debian/openafs-fileserver.NEWS @@ -3,7 +3,9 @@ openafs (1.8.0~pre4-1) unstable; urgency=low * Servers no longer use rxkad.keytab for long-term keys, which are now stored in KeyFileExt. Administrators must use akeyconvert or similar tooling to populate the KeyFileExt. In most cases, - `akeyconvert` with no arguments will suffice. + `akeyconvert` with no arguments will suffice, and krb5 keys + can still be managed (and periodically updated) in the rxkad.keytab. + `akeyconvert` is run automatically in the post-install script. * Server log handling has changed. Logs are not truncated at startup by default, and are re-opened on SIGUSR1, to be compatible with external log rotation tools. -- 2.39.5