Hello Stace, Am 05.10.2017 um 14:19 schrieb Станислав Захаров:
I start using OpenXPKI 1.5 years ago.
That is very nice to hear ;=)
1) Can I fill "[% cert_info.requestor_email %]" and "[% requestor %]" (and other) variables from LDAP?Now "cert_info.requestor_email" is empty and requestor = "Unknown".I change "to:" string in "default:" section of smtp.yaml to "[% cert_subject_parts.email %]" and users start receiving emails, but first line of this emails: "Dear unknown," ;(It is possible to configure this: the user enters only the name of the device for which he needs a certificate, and his username, full name and email is taken from LDAP?
Yes this is possible with the generic connetor system.You need to setup a connector similar to your LDAP Auth connector that delivers the requested information. Then add a new activity to your workflow using the class OpenXPKI::Server::Workflow::Activity::Tools::Connector::GetValue
This can be used to load information from the Connector into the workflow context. You can then modifiy the "notify" activities to access this information and map it into the templates or even use the given variable names.
2) How can I set up automatic sending of emails to users who have certificates that expire within two weeks? I upgraded my system to 1.18.1 and see new "cert_expiry" notification settings in smtp.yaml, but I can't find any information about its usage ;(
Have a look at the notify_expiry which is provided with the sample config. You can call this e.g. from cron using the "openxpkicmd" command line tool.
3) Can I fill certificate metadata (for example: "[% requestor %]") in russian (UTF8) ? Now i get "Unknown application error" at any russian letter entered into web-interface ;(
It might work to some extend with the new 1.19 which will be released this week but in general we did not pay much attention on UTF8 as most of our (payed) customers use western charsets.
Oliver -- Protect your environment - close windows and adopt a penguin!
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
