From 771544a6a35ad3b5d333c565e67b5e6818e7e6f5 Mon Sep 17 00:00:00 2001 From: Christian Berendt Date: Fri, 17 May 2024 17:48:15 +0200 Subject: [PATCH] Mention tls_cacertfile in the release notes Signed-off-by: Christian Berendt --- doc/source/notes/7.rst | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/doc/source/notes/7.rst b/doc/source/notes/7.rst index f19c21d7..4fa96275 100644 --- a/doc/source/notes/7.rst +++ b/doc/source/notes/7.rst @@ -462,6 +462,15 @@ Upgrade notes ``/var/run/fluentd`` (check `GitHub issue #864 `_ for details). We assume that other directory names have changed similarly. +* If a Keystone domain with LDAP backend is used, it is important to add the ``tls_cacertfile`` + parameter in the ``[ldap]`` section of the corresponding domain configuration. + + .. code-block:: ini + + [ldap] + ... + tls_cacertfile = /etc/ssl/certs/ca-certificates.crt + Known issues ------------