Add NEWS entry for the new password change queuing behavior

diff --git a/NEWS b/NEWS
index d52d9d3735c5ff48fa1cf3af0c801963ff3b159c..31094cb3ef212403f740cf564e01350b867c7ba4 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -31,6 +31,11 @@ krb5-sync 2.4 (unreleased)
     Directory cause performance issues in kadmind or kpasswdd.  kpasswd
     clients in particular are often intolerant of delays.
 
+    Any time an Active Directory password change fails, queue the change
+    instead of failing it, rather than trying to distinguish between local
+    errors that should fail the change and errors that should be queued.
+    The previous logic was very Stanford-specific.
+
     krb5-sync-backend supports a new flag, -d, which specifies the
     location of the queue directory, changing the default of
     /var/spool/krb5-sync.