Action "krb5.ticket"

const {$status} = await nikita.krb5.ticket({
  principal: 'myservice/my.fqdn@MY.REALM',
  keytab: '/etc/security/keytabs/my.service.keytab',
})
console.info(`ticket was renewed: ${$status}`)

definitions =
  config:
    type: 'object'
    properties:
      'gid':
        $ref: 'module://@nikitajs/file/lib/index#/definitions/config/properties/gid'
      'principal':
        type: 'string'
        description: '''
        The principal the ticket to be renewed.
        '''
      'password':
        type: 'string'
        description: '''
        Password associated to this principal.
        '''
      'keytab':
        type: 'string'
        description: '''
        Path to the file storing key entries.
        '''
      'uid':
        $ref: 'module://@nikitajs/file/lib/index#/definitions/config/properties/uid'
    oneOf: [
      {required: ['keytab']}
      {required: ['password']}
    ]

handler = ({config}) ->
  await @execute
    command: """
    if #{utils.krb5.su config, 'klist -s'}; then exit 3; fi
    #{utils.krb5.kinit config}
    """
    code: [0, 3]
  return unless (config.uid? or config.gid?) and config.keytab?
  await @fs.chown
    uid: config.uid
    gid: config.gid
    target: config.keytab

module.exports =
  handler: handler
  metadata:
    global: 'krb5'
    definitions: definitions

utils = require '@nikitajs/krb5/lib/utils'
{mutate} = require 'mixme'