On Fri, Jun 02, 2017 at 09:11:13AM +0000, Joakim Tjernlund wrote:
> Vi are seeing extra keytab entries in krb5.keytab here and there:
> klist -k 
> ....
> 11 host/gento...@infinera.com
> 12 host/gento...@infinera.com
> ...
> 
> I suspect sssd has added them, but why? and how?

If this is an AD client SSSD will try to use adcli to renew the machine
account password every 30 days as Windows clients do, see
ad_maximum_machine_account_password_age and
ad_machine_account_password_renewal_opts in man sssd-ad for details.

HTH

bye,
Sumit

> 
>  Jocke
> _______________________________________________
> sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org

Reply via email to