msktutil
: Manages Kerberos keytabs on Linux systems in Active Directory environments.msktutil::cron
: manages msktutil keytab rotationmsktutil::install
: installs and removes msktutil packagemsktutil::keytab
: Creates the keytab.
You need to precreate the AD machine object. See README.md for how
=== Authors
Helen Griffiths, John Snowdon
=== Copyright
Copyright 2016-22 University of Newcastle
The following parameters are available in the msktutil
class:
chmodpath
configpath
cronfiles
enablecron
ensure
extraopts
group
keytabmode
keytabpath
keytabreplace
makekeytab
msktutilpath
packages
usereversedns
Data type: Optional[Stdlib::Unixpath]
Full path to chmod binary on your system.
Data type: Optional[Stdlib::Unixpath]
Full path to krb5.conf.
Data type: Optional[Hash[String, Hash]]
The list of files needed to install a daily cronjob on your system.
Data type: Optional[Variant[Enum['yes', 'no'], Boolean]]
Whether to enable the msktutil keytab rotation cronjob.
Data type: Optional[Variant[Enum['yes', 'no', 'present', 'absent'], Boolean]]
Remove (false) or install (true) everything controlled by this module.
Data type: Optional[String]
Extra options given to msktutil to cope with your AD controller and DNS, e.g. extra service principals.
Data type: Optional[String]
Group owner of the system keytab.
Data type: Optional[Stdlib::Filemode]
File mode of system keytab.
Data type: Optional[Stdlib::Unixpath]
File path of system keytab.
Data type: Optional[Integer]
How many days old the system keytab is before it is replaced.
Data type: Optional[Variant[Enum['yes', 'no'], Boolean]]
Attempt (true) or don't attempt (false) to join the domain, which makes a keytab in the process.
Data type: Optional[Stdlib::Unixpath]
Full path to msktutil binary on your system.
Data type: Optional[Array]
List of packages needed to obtain msktutil.
Data type: Optional[Variant[Enum['yes', 'no'], Boolean]]
Whether to use reverse DNS wehn rotating the keytab.
manages msktutil keytab rotation
installs and removes msktutil package
Creates the keytab.