aboutsummaryrefslogtreecommitdiff
path: root/README.md
blob: 70cf3e48e8a1f33b15e14c2c4b16b8a12cb8b8d7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
# Readme for freeipa-cert-alert

## Overview
Freeipa-cert-alert is a small project that lists the certificates from an IPA server that will expire soon. The idea is to pass the output to a mail or logging utility.

## Using
You configure it with environment variables at runtime, including:

* `FREEIPA_SERVER`
* `FREEIPA_USERNAME`
* `FREEIPA_PASSWORD`
* `DAYS`

For some reason, domain name does not suffice as the server name. You must pick a server name. This is discoverable in a properly-functioning Kerberos domain with:

    dig +short -t srv _ldap._tcp.yourdomain.com | awk '{print $4}'

## Upstream
[This repository](https://gitlab.com/bgstack15/freeipa-cert-alert) is the original.

## Alternatives
Examine the output of `ipa cert-find` manually. Otherwise, I found no examples that do what I do here.

## Dependencies

### RPMs
* python3-freeipa

## References

## Differences from upstream
N/A
bgstack15