From 5fb2c620eadce725d5830c330297e00ebfd1731b Mon Sep 17 00:00:00 2001 From: "B. Stack" Date: Wed, 27 Oct 2021 19:46:25 -0400 Subject: init commit --- README.md | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 README.md (limited to 'README.md') diff --git a/README.md b/README.md new file mode 100644 index 0000000..70cf3e4 --- /dev/null +++ b/README.md @@ -0,0 +1,32 @@ +# Readme for freeipa-cert-alert + +## Overview +Freeipa-cert-alert is a small project that lists the certificates from an IPA server that will expire soon. The idea is to pass the output to a mail or logging utility. + +## Using +You configure it with environment variables at runtime, including: + +* `FREEIPA_SERVER` +* `FREEIPA_USERNAME` +* `FREEIPA_PASSWORD` +* `DAYS` + +For some reason, domain name does not suffice as the server name. You must pick a server name. This is discoverable in a properly-functioning Kerberos domain with: + + dig +short -t srv _ldap._tcp.yourdomain.com | awk '{print $4}' + +## Upstream +[This repository](https://gitlab.com/bgstack15/freeipa-cert-alert) is the original. + +## Alternatives +Examine the output of `ipa cert-find` manually. Otherwise, I found no examples that do what I do here. + +## Dependencies + +### RPMs +* python3-freeipa + +## References + +## Differences from upstream +N/A -- cgit