gmsad

gmsad manages Active Directory group Managed Service Account on Linux

Given the keytab of an account which has the ability to retrieve the secret of a gMSA, gmsad creates a keytab for the service account and renew it when necessary. It can execute an arbitrary command just after renewing the keytab.

https://github.com/cea-sec/gmsad