Re: Trouble-shooting sssd’s ‘Automatic Kerberos Host Keytab Renewal’ with AD back-end….

[Patrick Goetz]

Todd,

On 8/27/21 9:41 AM, Mote, Todd wrote:
> We ultimately decided to deploy a cron job with the install that ran periodically (less than the renewal period) to keep the keytab fresh (kinit -R -k $($hostname -s)).  We haven't had computers falling off the domain since we implemented that.

Are you sure about this syntax?  Adding a -s flag in $( ) containing a 
bash variable doesn't do anything.

Trouble-shooting sssd’s ‘Automatic Kerberos Host Keytab Renewal’ with AD back-end….

[Mote, Todd]

I wrote that from memory.  What's needed is the shortname and a $, but thinking more about it now, that's needed at the end of the shortname not the beginning.

-----Original Message-----
From: Patrick Goetz  
Sent: Monday, August 30, 2021 11:25 AM
To: [e-mail]
Subject: [SSSD-users]Re: Trouble-shooting sssd’s ‘Automatic Kerberos Host Keytab Renewal’ with AD back-end….

Todd,

On 8/27/21 9:41 AM, Mote, Todd wrote:
> We ultimately decided to deploy a cron job with the install that ran periodically (less than the renewal period) to keep the keytab fresh (kinit -R -k $($hostname -s)).  We haven't had computers falling off the domain since we implemented that.

Are you sure about this syntax?  Adding a -s flag in $( ) containing a bash variable doesn't do anything.

_______________________________________________
sssd-users mailing list -- [e-mail] To unsubscribe send an email to [e-mail]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/[e-mail].o...
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
> > This message is from an external sender. Learn more about why this <<
> > matters at https://links.utexas.edu/rtyclf.                        <<