Mention tls_cacertfile in the release notes

Signed-off-by: Christian Berendt <[email protected]>
osism · May 17, 2024 · 771544a · 771544a
1 parent d22fd5a
commit 771544a
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/doc/source/notes/7.rst b/doc/source/notes/7.rst
@@ -462,6 +462,15 @@ Upgrade notes
   ``/var/run/fluentd`` (check `GitHub issue #864 <https://github.com/osism/issues/issues/864>`_
   for details).  We assume that other directory names have changed similarly.
 
+* If a Keystone domain with LDAP backend is used, it is important to add the ``tls_cacertfile``
+  parameter in the ``[ldap]`` section of the corresponding domain configuration.
+
+  .. code-block:: ini
+
+     [ldap]
+     ...
+     tls_cacertfile = /etc/ssl/certs/ca-certificates.crt
+
 Known issues
 ------------