middleware icon indicating copy to clipboard operation
middleware copied to clipboard
verified publisher icon truenas

NAS-129123 / 24.10 / Expand error recovery in AD health checks

Open anodos325 opened this issue 1 year ago • 1 comments

This primarily adds two new features to our AD health checks

  • Check whether the secrets.tdb file exists and has a valid machine account password. If it's missing, then try to restore from backup.

  • Check whether we have a stored kerberos keytab for the AD domain. If it's missing, reconstruct it from our machine account password in the secrets.tdb file.

This commit also refactors the kerberos plugin to move many methods into general-purpose krb5 utils that can be tested more easily in isolation.

anodos325 avatar May 22 '24 20:05 anodos325

Jira URL: https://ixsystems.atlassian.net/browse/NAS-129123

bugclerk avatar May 22 '24 20:05 bugclerk

This PR has been merged and conversations have been locked. If you would like to discuss more about this issue please use our forums or raise a Jira ticket.

bugclerk avatar May 29 '24 17:05 bugclerk