[Freeipa-devel] [freeipa PR#5246][opened] Use host keytab to obtain credentials needed for ipa-certupdate

[rcritten]

   URL: https://github.com/freeipa/freeipa/pull/5246
Author: rcritten
 Title: #5246: Use host keytab to obtain credentials needed for ipa-certupdate
Action: opened

PR body:
"""
This command doesn't require any permissions that a host doesn't
already have and it simplifies overall credential handling.

It also corrects the case where the server API cache is out of
date and there are no credentials available to refresh it which
can lead to a confusing error message.

Also switch to MEMORY-based ccache rather than file to avoid
having to clean up the filesystem.

https://pagure.io/freeipa/issue/8531

Signed-off-by: Rob Crittenden <rcritten(a)redhat.com&gt;
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5246/head:pr5246
git checkout pr5246