From 92bab10125642f648b8295aa0a69c1b485b663bc Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Thu, 11 Mar 2021 05:28:10 +0000
Subject: [PATCH] Add required service principals to mail hosts

---
 playbooks/mail.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/playbooks/mail.yml b/playbooks/mail.yml
index 24eb517..dd3cfd0 100644
--- a/playbooks/mail.yml
+++ b/playbooks/mail.yml
@@ -11,6 +11,14 @@
 
   roles:
     - base
+    - role: kerberos/keytab
+      principals:
+        - "host/{{ inventory_hostname }}@{{ kerberos_realm }}"
+        - "smtp/{{ mail_server }}@{{ kerberos_realm }}"
+    - role: kerberos/keytab
+      keytab: /etc/dovecot/dovecot.keytab
+      principals:
+        - "imap/{{ mail_server }}@{{ kerberos_realm }}"
     - nfs-client
     - sssd
     - autofs