[SSSD-users] Re: Trouble-shooting sssd’s ‘Automatic Kerberos Host Keytab Renewal’ with AD back-end….

2021-09-06 Thread Sumit Bose
Am Thu, Sep 02, 2021 at 11:41:47AM -0500 schrieb Spike White: > OK, > > That particular candidate seems like a very unusual end corner case. Where > someone cloned an existing VM, renamed it, re-IP'd and (incorrectly) > re-joined it to AD. > > I saw "incorrectly", because they did not clear the

[SSSD-users] Re: Trouble-shooting sssd’s ‘Automatic Kerberos Host Keytab Renewal’ with AD back-end….

2021-09-06 Thread Sumit Bose
Am Thu, Sep 02, 2021 at 10:02:54AM -0500 schrieb Patrick Goetz: > > On 9/2/21 12:49 AM, Sumit Bose wrote: > > The reason is that 'kinit -k' constructs the principal by calling > > gethostname() or similar, adding the 'host/' prefix and the realm. But > > by default this principal in AD is only a s