dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

r/minio-backups-cert: Fix nsupdate kinit for f42 

The version of Samba in Fedora 42 has got some really weird bugs.  In
this case, it seems `net ads kerberos kinit -P` no longer works.  It
prints a vague `NT_STATUS_INTERNAL_ERROR` message, with no other
indication of what went wrong.  Fortunately, it's still possible to get
a ticket-granting ticket for the machine account using the host keytab.
unifi-restore
Dustin 2025-07-08 08:39:25 -05:00
parent 87d90a617d
commit 4218137e1e
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/minio-backups-cert/files/nsupdate-auth.sh
View File

@ -1,7 +1,7 @@
#!/bin/sh #!/bin/sh
export KRB5CCNAME=/run/certbot.krb5_ccache export KRB5CCNAME=/run/certbot.krb5_ccache
klist -s || net ads kerberos kinit -P || exit klist -s || kinit -kt /etc/krb5.keytab "$(hostname -s | tr a-z A-Z)"'$' || exit
nsupdate -g <<EOF || exit nsupdate -g <<EOF || exit
zone $(dnsdomainname) zone $(dnsdomainname)
update add _acme-challenge.${CERTBOT_DOMAIN} 10 TXT ${CERTBOT_VALIDATION} update add _acme-challenge.${CERTBOT_DOMAIN} 10 TXT ${CERTBOT_VALIDATION}

2
roles/minio-backups-cert/files/nsupdate-cleanup.sh
View File

@ -1,7 +1,7 @@
#!/bin/sh #!/bin/sh
export KRB5CCNAME=/run/certbot.krb5_ccache export KRB5CCNAME=/run/certbot.krb5_ccache
klist -s || net ads kerberos kinit -P || exit klist -s || kinit -kt /etc/krb5.keytab "$(hostname -s | tr a-z A-Z)"'$' || exit
nsupdate -g <<EOF nsupdate -g <<EOF
update del _acme-challenge.${CERTBOT_DOMAIN} TXT update del _acme-challenge.${CERTBOT_DOMAIN} TXT