Hey Charles,
Thanks a lot for what you just described - it gives me a lot to think
about.
If you have th etime, could you describe how the pam module is called
from the cron job, and how the TGT is fetched for the users? I mean, if
it is a cron job, how the tgt is fetched without
See clhedrick/kerberos in github. The README identifies the various things
there.
From: Francis Augusto Medeiros-Logeay
Sent: Sunday, April 24, 2022 8:35 AM
To: FreeIPA users list
Cc: Charles Hedrick
Subject: Re: [Freeipa-users] Re: Strategy to renew TGT - any
We're in the process of decomissioning our oldest IPA servers (built in 2014).
We've migrated the roles successfully and are making sure everything is ready
to switch over to the new set, and just wanted to check a few
observations/inconsistencies.
* On some of our newer clients
