Skip to content

Problem with using ssh connector to call local shell script to create end entity and certificate on ejbca for users #5

Description

@MKH11

Can someone explain or provide an example of the configuration for establishing a connection to the ejbca server?
I intend to use this ssh connector that will call local shell scripts through which the end entity will be created and the certificate will be assigned automatically after the user is created/imported on the midpoint?
I created a new object inside the resource, schema handling, which is kind: account. Inside it, I created an outbound mapping and created one. Source: I left it empty, expression: script and I put this code: "echo "/opt/ejbca/scripts/provision_user.sh " + givenName.toLowerCase() + " '" + givenName + " " + familyName + "' " + emailAddress + " | bash"".
To resource attribute: I created an attribute that will be a placeholder: commandArgs.
And for the resource, I put in the configuration the IP address of the ejbca server, port 22, username: root, and the password with which I access that server. My ejbca is running on a docker image.

And when I create a user, I add that created resource to him inside the assignments, and after that I automatically get an error: "2025-07-15 09:54:53,957 [PROVISIONING] [http-nio-8080-exec-9] WARN (com.evolveum.midpoint.provisioning.impl.resources.ResourceCompletionOperation): No resource schema fetched from resource:ee1ac0fc-deba-4b91-af64-0768e90dbce2(EJBCA_SSH2)
".
Basically, the script is not called. Probably the configuration is not good.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions