From 989059a82fb080d42e9c3e1acbf8a6065343d101 Mon Sep 17 00:00:00 2001
From: Konrad Bucheli <konrad.bucheli@psi.ch>
Date: Mon, 22 Aug 2022 10:09:36 +0200
Subject: [PATCH] document how to rejoin the AD

---
 admin-guide/troubleshooting/deployment.rst | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/admin-guide/troubleshooting/deployment.rst b/admin-guide/troubleshooting/deployment.rst
index 79f03f31..d36d820e 100644
--- a/admin-guide/troubleshooting/deployment.rst
+++ b/admin-guide/troubleshooting/deployment.rst
@@ -89,3 +89,11 @@ reasons:
   /etc/puppetlabs -name '*.pem' -delete`` and clean up any certificates on the
   Puppet server with ``puppet cert clean $HOSTNAME``. Then restart the
   installation.
+
+Rejoin the Active Directory
+===========================
+
+If the AD join seams to be broken (failed logins, etc.), then the node can be automatically rejoined again:
+
+- remove ``/etc/krb5.keytab``
+- run puppet, e.g. with ``puppet agent --test``