On Wed, Jan 25, 2017 at 10:48:32PM -0000, smfrench(a)gmail.com wrote:
I noticed that on one of our test systems running sssd we have about
150 /tmp/adcli-krb5-* files (they already take up about 600K after a few days) and have
contents similar to a krb5.conf file snippet
SSSD calls adcli in a regular basis to check if the host key in AD
should be renewed and renew it if needed. I guess that adcli fails for
some reason and does not clean up temporary files to allow debugging
later. Please check the SSSD domain log if there are any messages about
failed attempts to renew the key, maybe you have to increase the
debug_level.
If you do not have a strict requirement to renew the host key on a
regular basis in your environment you can disable the renewal completely
by setting 'ad_maximum_machine_account_password_age = 0', see man
sssd-ad for more details.
HTH
bye,
Sumit
>
> # cat /tmp/adcli-krb5-a1klQy/krb5.d/adcli-krb5-conf-sM7Ia1
> [realms]
> VWQA.LOCAL = {
> kdc = vwqadc02.vwqa.local:88
> master_kdc = vwqadc02.vwqa.local:88
> kpasswd_server = vwqadc02.vwqa.local
> }
> [domain_realm]
> vwqadc02.vwqa.local = VWQA.LOCAL
> vwqadc02.vwqa.local = VWQA.LOCAL
>
> Any idea why there are so many of them - and what keeps creating them?
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org