On 8/27/21 1:07 PM, Spike White wrote:
So are you completely disabling sssd's automatic machine account password renewal (by setting ad_maximum_machine_account_password_age = 0)? And then you're never changing your machine account passwords ever; your cron job is just refreshing your host's TGT ticket every 9 hrs or so for 7 days?
I just noticed we don't set ad_maximum_machine_account_password_age in /etc/sssd/sssd.conf (in fact, i didn't know this was a thing). What does it default to?
_______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
