Skip to content

Commit

Permalink
Add prompt sign to sh-session code blocks (#776)
Browse files Browse the repository at this point in the history
  • Loading branch information
GabrielNagy authored Aug 28, 2023
2 parents d3dff2f + f99a881 commit 5722cba
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions doc/11.-Certificate-autoenrollment.md
Original file line number Diff line number Diff line change
Expand Up @@ -123,7 +123,8 @@ Resubmitting "galacticcafe-CA.Machine" to "galacticcafe-CA".
Request "galacticcafe-CA.Machine" removed.

# Remove CA
getcert remove-ca -c galacticcafe-CA
> getcert remove-ca -c galacticcafe-CA
CA "galacticcafe-CA" removed.
```

Note that tampering with certificate data outside of ADSys (e.g. manually unmonitoring using `getcert`) will render the GPO cache obsolete as it will cause a drift between the actual state and the "known" cached state. In this case, it's best to remove the cache file at `/var/lib/adsys/samba/*.tdb` together with any enrolled certificates and CAs to ensure a clean slate.
Expand All @@ -145,7 +146,7 @@ export KRB5CCNAME=/var/run/adsys/krb5cc/$(hostname)
Then, run the script passing the required arguments (the argument list is also printed in the ADSys debug logs during policy application):
```sh-session
# Un-enroll machine
./cert-autoenroll unenroll keypress galacticcafe.com --state_dir /var/lib/adsys --debug
> ./cert-autoenroll unenroll keypress galacticcafe.com --state_dir /var/lib/adsys --debug
```

### Errors communicating with the CEP/CES servers
Expand Down

0 comments on commit 5722cba

Please sign in to comment.