Skip to content

check_kerberos_principal_name: report name we got from LDAP

Duncan Macleod requested to merge duncanmmacleod/igwn-monitoring-plugins:kerberos-principal-canonical into main

This MR patches check_kerberos_principal_name to report using the krbPrincipalName received from LDAP, not the input argument received from the user.

This means that instead of reporting something like this:

$ python3 -m igwn_monitor.plugins.check_kerberos_principal_expiry -H ldap.ligo.org -p dashboard2-dev*@LIGO.ORG
dashboard2-dev*@LIGO.ORG will expire on Thu 06 Jun 2024 | 'timeleft'=129d;14;7

we will get

$ python3 -m igwn_monitor.plugins.check_kerberos_principal_expiry -H ldap.ligo.org -p dashboard2-dev*@LIGO.ORG
dashboard2-dev/robot/dashboard2.igwn.org@LIGO.ORG will expire on Thu 06 Jun 2024 | 'timeleft'=129d;14;7

Merge request reports