Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Administration Manual

Page: 461 / 554

Chapter 19.
439
Automated Jobs
The Certificate System provides a customizable Job Scheduler that supports various mechanisms for
scheduling
cron
jobs. This chapter explains how to configure Certificate System to use specific job
plug-in modules for accomplishing jobs.
19.1. About Automated Jobs
The Certificate Manager Console includes a
Job Scheduler
option that can execute specific jobs at
specified times. The Job Scheduler is similar to a traditional Unix
cron
daemon; it takes registered
cron
jobs and executes them at a preconfigured date and time. If configured, the scheduler checks
at specified intervals for jobs waiting to be executed; if the specified execution time has arrived, the
scheduler initiates the job automatically.
Jobs are implemented as Java
™
classes, which are then registered with Certificate System as plug-
in modules. One implementation of a job module can be used to configure multiple instances of the
job. Each instance must have a unique name (an alphanumeric string with no spaces) and can contain
different input parameter values to apply to different jobs.
19.1.1. Setting up Automated Jobs
The automated jobs feature is set up by doing the following:
• Enabling and configuring the Job Scheduler; see
Section 19.2, “Setting up the Job Scheduler”
for
more information.
• Enabling and configuring the job modules and setting preferences for those job modules; see
Section 19.3, “Setting up Specific Jobs”
for more information.
• Customizing the email notification messages sent with these jobs by changing the templates
associated with the types of notification. The message contents are composed of both plain text
messages and HTML messages; the appearance is modified by changing the HTML templates. See
Section 18.3.1, “Notification Message Templates”
for more information.
19.1.2. Types of Automated Jobs
The types of automated jobs are
requestInQueueNotifier
,
publishCerts
, and
unpublishExpiredCerts
.
19.1.2.1. requestInQueueNotifier
The
requestInQueueNotifier
module checks the status of the request queue at preconfigured
time intervals. If any deferred enrollment requests are waiting in the queue, the job constructs an email
message summarizing its findings and sends it to the specified agents.
19.1.2.2. publishCerts
The
publishCerts
module checks for any new certificates that have been added to the publishing
directory. When these new certificates are added, they are automatically published to an LDAP
directory or file.