setupkeytab.txt

#!/bin/sh
# from http://redsymbol.net/articles/unofficial-bash-strict-mode/
# set -e option instructs bash to immediately exit if any command [1] has a non-zero exit status
# when set -u is set, a reference to any variable you haven't previously defined - with the exceptions of $* and $@ - is an error, and causes the program to immediately exit
# set -o pipefail: If any command in a pipeline fails, that return code will be used as the return code of the whole pipeline
set -euo pipefail

#
# This script is meant for quick & easy install via:
#   curl -sSL https://raw.githubusercontent.com/HealthCatalyst/InstallScripts/master/setupkeytab.txt | sudo sh -s <username> <domain> <password> <ad hostname>
# e.g.,
#  curl -sSL https://raw.githubusercontent.com/HealthCatalyst/InstallScripts/master/setupkeytab.txt | sudo sh -s imran.qureshi hqcatalyst.local <password> hcsad1

u="$(whoami)"
echo "Running setupkeytab version 2018.04.26.01 as: $u"

username="$1"
domain="$2"
password="$3"
ad_hostname="$4"

echo "Username: $username"
echo "Domain: $domain"
echo "Domain Controller: $ad_hostname"

username_lc="${username,,}"
domain_lc="${domain,,}"
domain_uc="${domain^^}"
echo "username_lc: $username_lc"
echo "domain_lc: $domain_lc"
echo "domain_uc: $domain_uc"

echo "making sure the needed packages are installed"
yum install -y krb5-libs krb5-workstation ntp rsync; yum clean all

hcfolder="/opt/install"
hckrbconf="${hcfolder}/krb5.conf"
if [[ ! -f "$hckrbconf" ]]; then
    echo "$hckrbconf was not found so exiting"
    exit 0
fi

# find and replace values in config files with parameters
sed -i 's/$domain/'"$domain_lc"'/g' $hckrbconf
sed -i 's/$DOMAIN/'"$domain_uc"'/g' $hckrbconf
sed -i 's/$server/'"$ad_hostname"'/g' $hckrbconf

cp "$hckrbconf" /etc/krb5.conf

usernameplusdomain="$username_lc@$domain_uc"

echo "User name and domain: $usernameplusdomain"

# sync clock with domain controller
# ntpdate $domain

set -x

echo "creating keytab file in ${hcfolder}/user.keytab"
ktutil <<EOF
addent -password -p $usernameplusdomain -k 1 -e RC4-HMAC
$password
wkt ${hcfolder}/user.keytab
quit
EOF

echo "calling signintoactivedirectory to try to authenticate"
${hcfolder}/signintoactivedirectory.sh $username_lc $domain_uc

set +x