d9b259d Use host keytab to obtain credentials needed for ipa-certupdate

1 file Authored by rcritten 3 years ago, Committed by abbra 3 years ago,
    Use host keytab to obtain credentials needed for ipa-certupdate
    
    This command doesn't require any permissions that a host doesn't
    already have and it simplifies overall credential handling.
    
    It also corrects the case where the server API cache is out of
    date and there are no credentials available to refresh it which
    can lead to a confusing error message.
    
    Also switch to MEMORY-based ccache rather than file to avoid
    having to clean up the filesystem.
    
    https://pagure.io/freeipa/issue/8531
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>