ad-auth: add cronjob which news krb-keys every day

ad-auth/tasks/sssd.yml

@@ -73,3 +73,14 @@
     - sssd
     - service
 
+- name: ensure we have a cronjob which renews krb credenitials once a day
+  template:
+    src: templates/renew_krb5.j2
+    dest: /etc/cron.daily/renew_krb5
+    mode: 0755
+    owner: root
+    group: root
+  tags:
+    - sssd
+
+

ad-auth/templates/renew_krb5.j2

+/usr/sbin/adcli update -D {{ domain }}