The version of Samba in Fedora 42 has got some really weird bugs. In this case, it seems `net ads kerberos kinit -P` no longer works. It prints a vague `NT_STATUS_INTERNAL_ERROR` message, with no other indication of what went wrong. Fortunately, it's still possible to get a ticket-granting ticket for the machine account using the host keytab.
12 lines
221 B
Bash
Executable File
12 lines
221 B
Bash
Executable File
#!/bin/sh
|
|
|
|
export KRB5CCNAME=/run/certbot.krb5_ccache
|
|
klist -s || kinit -kt /etc/krb5.keytab "$(hostname -s | tr a-z A-Z)"'$' || exit
|
|
|
|
nsupdate -g <<EOF
|
|
update del _acme-challenge.${CERTBOT_DOMAIN} TXT
|
|
send
|
|
EOF
|
|
|
|
kdestroy
|