Hey all,
Just wanted to share a couple of tools I whipped up to flesh out some of the more time
consuming or lean feature areas of FreeIPA. Hopefully they help you! Pull Reuquests and
Issues are welcome.
https://github.com/noahbliss/freeipa-sam
FreeIPA-SAM is a simple menu-driven bash script for lifecycle management of system
(service) accounts in LDAP. As a refresher, these seem to be the accounts you use as
connectors to various services, but not for typical human user login. As there doesn't
seem to be a convenient way to manage these in the WebUI and consistency is key when doing
manual account management, I've found this to be a huge time-saver.
https://github.com/noahbliss/freeipa-pen
FreeIPA-PEN is a bash script designed to be installed on an IPA server and invoked by
cron. It uses a system account to check LDAP and notify users via email if their password
is going to expire soon. For accounts that do not have an email address or have already
expired, it can generate a weekly/monthly report for you as an admin.
Best regards,
Noah