kwk · November 29, 2023 16:17
diff --git a/README.md b/README.md
diff --git a/kinit-wrapper.sh b/kinit-wrapper.sh
 #!/bin/bash

 # Purpose: Get multiple kerberos tokens without having to enter passwords all the time.
 # Author: Konrad Kleine

 set +x

 LANG=en_EN

 principals=()

 # TODO: Add your Kerberos principals here:
 principals+=(kkleine@REDHAT.COM)
 principals+=(kkleine@IPA.REDHAT.COM)
 principals+=(kkleine@FEDORAPROJECT.ORG)

 # Optionally uncomment this if you want to be reminded about connecting to VPN first.
 #host ldap.corp.redhat.com >/dev/null 2>&1 || { 
 #  echo "ERROR: Must be connected to the Red Hat VPN first!" 2>&1
 #  exit 1
 #}

 for principal in ${principals[@]}; do 
  key_name=krb_$principal
  
  echo -n "Checking for password for principal \"$principal\"..."
  secret-tool search label $key_name 2>&1 | grep attribute.label >/dev/null 2>&1
  
  if [[ $? != 0 ]]; then
    echo "NO PASSWORD FOUND. Please, enter it in the next step!"
    secret-tool store --label="$key_name" \
      label $key_name \
      uuid $(uuidgen) created "$(date)"
  else
    echo "FOUND"
  fi

  echo -n "Attempting to get a Kerberos token for principal \"$principal\"..."
  secret-tool lookup label $key_name | /usr/bin/kinit $principal > /dev/null 2>&1
  if [[ $? != 0 ]]; then
    echo "ERROR"
    while true; do
        read -r -p "Shall we remove the secret for principal \"$principal\" so that you can enter it again on the next run? (Y/N): " answer
        case $answer in
            [Yy]* )
              echo "Removing password for principal \"$principal\"".
              secret-tool clear label $key_name;
              echo "Now run $(basename $0) again!"
              break;;
            [Nn]* ) 
              echo "Exiting"
              exit 1;;
            * ) echo "Please answer Y or N.";;
        esac
    done
    exit 1
  else
    echo "OK"
  fi
 done
	#!/bin/bash

	# Purpose: Get multiple kerberos tokens without having to enter passwords all the time.
	# Author: Konrad Kleine

	set +x

	LANG=en_EN

	principals=()

	# TODO: Add your Kerberos principals here:
	principals+=(kkleine@REDHAT.COM)
	principals+=(kkleine@IPA.REDHAT.COM)
	principals+=(kkleine@FEDORAPROJECT.ORG)

	# Optionally uncomment this if you want to be reminded about connecting to VPN first.
	#host ldap.corp.redhat.com >/dev/null 2>&1 \|\| {
	# echo "ERROR: Must be connected to the Red Hat VPN first!" 2>&1
	# exit 1
	#}

	for principal in ${principals[@]}; do
	key_name=krb_$principal

	echo -n "Checking for password for principal \"$principal\"..."
	secret-tool search label $key_name 2>&1 \| grep attribute.label >/dev/null 2>&1

	if [[ $? != 0 ]]; then
	echo "NO PASSWORD FOUND. Please, enter it in the next step!"
	secret-tool store --label="$key_name" \
	label $key_name \
	uuid $(uuidgen) created "$(date)"
	else
	echo "FOUND"
	fi

	echo -n "Attempting to get a Kerberos token for principal \"$principal\"..."
	secret-tool lookup label $key_name \| /usr/bin/kinit $principal > /dev/null 2>&1
	if [[ $? != 0 ]]; then
	echo "ERROR"
	while true; do
	read -r -p "Shall we remove the secret for principal \"$principal\" so that you can enter it again on the next run? (Y/N): " answer
	case $answer in
	[Yy]* )
	echo "Removing password for principal \"$principal\"".
	secret-tool clear label $key_name;
	echo "Now run $(basename $0) again!"
	break;;
	[Nn]* )
	echo "Exiting"
	exit 1;;
	* ) echo "Please answer Y or N.";;
	esac
	done
	exit 1
	else
	echo "OK"
	fi
	done