• Vitaly Lipatov's avatar
    tune_sssd.sh: fix GSSAPI delegation by using full FQDN for SPN · 691c51d9
    Vitaly Lipatov authored
    - Use dnshostname=$(hostname -f) to register correct dNSHostName
      (e.g. host.office.etersoft.ru instead of host.etersoft.ru)
    - Replace deprecated -k with --use-kerberos=required
    - Add idempotency: check testjoin status before joining
    - If already joined, verify keytab has correct FQDN
    - If machine account is broken, leave and rejoin
    
    Note: requires msDS-AllowedDNSSuffixes on DC to include the DNS subdomain
    Co-Authored-By: 's avatarClaude Opus 4.5 <noreply@anthropic.com>
    691c51d9
Name
Last commit
Last update
.gear Loading commit data...
ansible/playbooks Loading commit data...
auth Loading commit data...
backup Loading commit data...
certs Loading commit data...
common Loading commit data...
cyrus Loading commit data...
dc Loading commit data...
dc-client Loading commit data...
ddos Loading commit data...
dns Loading commit data...
docker Loading commit data...
etersoft Loading commit data...
etersoft-cron Loading commit data...
fail2ban Loading commit data...
girar Loading commit data...
git Loading commit data...
gluster Loading commit data...
hdd Loading commit data...
korinf Loading commit data...
mail Loading commit data...
mysql Loading commit data...
nagios Loading commit data...
nginx Loading commit data...
research Loading commit data...
rooter Loading commit data...
router Loading commit data...
seafile Loading commit data...
tests Loading commit data...
users Loading commit data...
utils Loading commit data...
vz Loading commit data...
web Loading commit data...
.gitignore Loading commit data...
CLAUDE.md Loading commit data...
TODO Loading commit data...
etersoft-admin-essential.spec Loading commit data...