WHATSNEW: Add TLS cert reload feature

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Jul 25 21:02:35 UTC 2023 on atb-devel-224

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 17067eb7e27a616aaacf12b65cc531dcaad89506..4619a5009c4bb3947a289ae118413e0611f37ce2 100644 (file)
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -210,6 +210,16 @@ administrator to use an encrypted connection in the future.
 NOTE WELL: If Samba is accessed via a TLS frontend or load balancer,
 the LDAP request will be regarded as plaintext.
 
+Samba AD TLS Certificates can be reloaded
+-----------------------------------------
+
+The TLS certificates used for Samba's AD DC LDAP server were
+previously only read on startup, and this meant that when then expired
+it was required to restart Samba, disrupting service to other users.
+
+ smbcontrol ldap_server reload-certs
+
+This will now allow these certificates to be reloaded 'on the fly'
 
 ================
 REMOVED FEATURES