[SSSD-users]Re: Trouble-shooting sssd’s ‘Automatic Kerberos Host Keytab Renewal’ with AD back-end….

2021-08-26 Thread James Ralston
On Thu, Aug 26, 2021 at 8:11 PM Christian, Mark wrote: > [W]hy bother with updating the machine account password? For sites that have a lot of machine churn, where machine accounts aren't reliably purged from AD when the underlying host is decommissioned, disabling and/or purging machine

[SSSD-users]Re: Trouble-shooting sssd’s ‘Automatic Kerberos Host Keytab Renewal’ with AD back-end….

2021-08-26 Thread Christian, Mark
On Wed, 2021-08-25 at 21:00 -0700, Gordon uynt wrote: > We had similar symptoms on CentOS systems at my previous employer, > however, I'm mostly sure that they were resolved by an sssd update > sometime in the last year or two.  Are all of your systems fully > patched? At the risk of derailing

[SSSD-users] Re: [SSSD-users]Trouble-shooting sssd’s ‘Automatic Kerberos Host Keytab Renewal’ with AD back-end….

2021-08-26 Thread Sumit Bose
Am Wed, Aug 25, 2021 at 10:32:58AM -0500 schrieb Spike White: > Sssd experts, > > *Short summary: * How can we troubleshoot sssd’s ‘Automatic Kerberos Host > Keytab Renewal’ process?We have ~0.4% of our Linux servers dropping > off the AD domain monthly. > > *Longer explanation:* > > Over