einar/scripts
1
0
Fork 0
Code Releases Activity

Add paths to the 389-ds commands

Browse source
This commit is contained in:
Luca Beltrame 2021-07-13 06:35:14 +02:00
parent 5d7adf4b8b
commit 9eaa6ccaef
Signed by: einar
GPG key ID: 4707F46E9EC72DEC
1 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
sysadmin/le_lan_reload_services.sh
View file

@ -5,25 +5,25 @@ LDAP_SHORTNAME="HOSTNAME"
UPDATE_MIKROTIK=0
MIKROTIK_HOST="mikrotik"
# Reload services
systemctl reload nginx
systemctl restart sssd
# Re-add the private key in LDAP *IMPORTANT*
dsctl "${LDAP_SHORTNAME}" tls import-server-key-cert /etc/letsencrypt/live/"${LE_DOMAIN}"/fullchain.pem \
/usr/sbin/dsctl "${LDAP_SHORTNAME}" tls import-server-key-cert /etc/letsencrypt/live/"${LE_DOMAIN}"/fullchain.pem \
/etc/letsencrypt/live/"${LE_DOMAIN}"/privkey.pem
# Re-import the certificate in the LDAP store
dsconf -v -D "cn=Directory Manager" "${LDAP_SHORTNAME}" security certificate add \
/usr/sbin/dsconf -v -D "cn=Directory Manager" "${LDAP_SHORTNAME}" security certificate add \
--file /etc/letsencrypt/live/"${LE_DOMAIN}"/cert.pem \
--primary-cert \
--name "LE"
systemctl restart dirsrv@${LDAP_SHORTNAME}
# Reload services
systemctl reload nginx
systemctl restart sssd
# Push the certificates to a Mikrotik AP
#NOTE: This assumes you have set up SSH for a user with public key auth