Hi,
this patch adds a task to the AD provider which calls adcli on a regular
basis to update the machine account password if needed. adcli supports
this functionality since version 0.8.0. Adding support other utilities like
msktutil shouldn't be hard.
Since adcli (and other external tools) does not understand the SSSD
default options like --debug_level a change in exec_child_ex() was
needed which is covered in the first patch.
bye,
Sumit