ad-auth: add cronjob which news krb-keys every day

a65a7abf · Hinrikus Wolf · 09234c70 · a65a7abf · a65a7abf
Commit a65a7abf authored Aug 20, 2018 by Hinrikus Wolf
--- a/ad-auth/tasks/sssd.yml
+++ b/ad-auth/tasks/sssd.yml
@@ -73,3 +73,14 @@
    - sssd
    - service

+- name: ensure we have a cronjob which renews krb credenitials once a day
+  template:
+    src: templates/renew_krb5.j2
+    dest: /etc/cron.daily/renew_krb5
+    mode: 0755
+    owner: root
+    group: root
+  tags:
+    - sssd
+
+
--- a/ad-auth/templates/renew_krb5.j2
+++ b/ad-auth/templates/renew_krb5.j2
+/usr/sbin/adcli update -D {{ domain }}