From 3dc63f12be2773a8a3371f826dd710642e1a05c6 Mon Sep 17 00:00:00 2001 From: Nessdoor Date: Sat, 24 Aug 2024 23:48:56 +0200 Subject: [PATCH] doc: add release notes for the openafsServer.authentication options --- nixos/doc/manual/release-notes/rl-2505.section.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/doc/manual/release-notes/rl-2505.section.md b/nixos/doc/manual/release-notes/rl-2505.section.md index 4d204f92a792ba..897aba962612d7 100644 --- a/nixos/doc/manual/release-notes/rl-2505.section.md +++ b/nixos/doc/manual/release-notes/rl-2505.section.md @@ -31,6 +31,6 @@ -- Create the first release note entry in this section! +- The OpenAFS server module now supports the automatic extraction of service authentication keys from a Kerberos 5 keytab. Just specify the runtime path of the keytab and (optionally) the principal representing the AFS cell as the values of `services.openafsServer.authentication.keytab` and `services.openafsServer.authentication.principal`, respectively. The old behavior of using a pre-existing `/etc/openafs/server/KeyFileExt` managed by the `asetkey` command is retained by default.