Struct MachineIdentity 

pub struct MachineIdentity {
    pub principal: String,
    pub realm: String,
    pub keytab: PathBuf,
}

The machine’s AD identity, discovered from its keytab.

The keytab is the ground truth for what this device can authenticate as — more reliable than deriving HOSTNAME$ from the hostname, which drifts (renames, >15-char truncation, case).

Fields

principal: String

e.g. WORKSTATION1$@EXAMPLE.COM

realm: String

e.g. EXAMPLE.COM

keytab: PathBuf

Implementations

impl MachineIdentity

pub fn discover(tools: &Tools, keytab: impl Into<PathBuf>) -> Result<Self>

Read the keytab and pick the first machine (NAME$@REALM) principal.

Needs read access to the keytab — i.e. root for /etc/krb5.keytab. On a host joined to multiple realms, use Self::discover_in_realm to choose which one.

pub fn discover_in_realm( tools: &Tools, keytab: impl Into<PathBuf>, realm: &str, ) -> Result<Self>

Like Self::discover, but pick the machine principal whose realm matches realm (case-insensitive) — for hosts joined to more than one AD realm. Errors with Error::NoMachinePrincipalForRealm if none match.

Trait Implementations

impl Clone for MachineIdentity

fn clone(&self) -> MachineIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MachineIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for MachineIdentity

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.