1a09ce9 Use host keytab to obtain credentials needed for ipa-certupdate

Authored and Committed by rcritten 2 years ago
    Use host keytab to obtain credentials needed for ipa-certupdate
    
    This command doesn't require any permissions that a host doesn't
    already have and it simplifies overall credential handling.
    
    It also corrects the case where the server API cache is out of
    date and there are no credentials available to refresh it which
    can lead to a confusing error message.
    
    Also switch to MEMORY-based ccache rather than file to avoid
    having to clean up the filesystem.
    
    https://pagure.io/freeipa/issue/8531
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>