1 #Update a keytab for the external DNS server to use
2 dn: samAccountName=dns-${HOSTNAME},CN=Principals
5 objectClass: kerberosSecret
7 servicePrincipalName: DNS/${DNSNAME}
8 msDS-KeyVersionNumber: 1
9 privateKeytab: ${DNS_KEYTAB}
10 secret:: ${DNSPASS_B64}
11 samAccountName: dns-${HOSTNAME}