Fix idp authentication on a (LXC?) Debian-like host on a freeipa/idm domain

fix_idp.sh

#!/bin/bash
if [[ $EUID -ne 0 ]]; then
   echo "This script must be run as root or sudo" 
   exit 1
fi
echo "Caution : this script expect a freeipa/idm joined host."
echo "⚠️  Would you want to continue? (y/n)"
read -r answer

case "$answer" in
    y|Y )
        ;;
    n|N )
        echo "🛑 Aborted by user."
        exit 1
        ;;
    * )
        echo "❌ Invalid input. Please answer 'y' or 'n'."
        exit 2
        ;;
esac
echo "Install sssd-ipa and krb5-pkinit"
apt install krb5-pkinit sssd-idp -y
ln -s /usr/lib/x86_64-linux-gnu/sssd
echo "You can try now with "
echo "KRB5_TRACE=/dev/stdout kinit -n -c ./fast.ccache"
echo "KRB5_TRACE=/dev/stdout kinit -T ./fast.ccache <user>"