Julian Gethmann via FreeIPA-users wrote: > Hello Anthony, > > I don't know if there is an official tool for that, but since I once > wrote a similar script, you might be happy with that. It requires that > your Python 3 installation has got the IPA libraries installed and you > have got a valid Kerberos ticket. I have tested it only on Fedora so far. > > I hope it's useful for you and you can modify it to your needs.
It is probably easier to just do an ldapsearch for this. % kinit someuser % ldapsearch -LLL -Y GSSAPI -b cn=users,cn=accounts,dc=example,dc=com uid krbpasswordexpiration Note that IPA imposes a set of search and time limits on searches which is lower than the 389-ds default limits. If you have a lot of users you'll bump into this. rob > > Regards, > Julian > > On 09/03/2019 05.03, freeipa-users-requ...@lists.fedorahosted.org wrote: >> Date: Fri, 8 Mar 2019 11:50:55 -0500 >> From: Anthony Jarvis-Clark<anthonyclar...@gmail.com> >> Subject: [Freeipa-users] list all users and their password expiration >> date? >> To: FreeIPA users list<freeipa-users@lists.fedorahosted.org> >> Message-ID: >> <cajgykdmpg5ovffloa8w0vqsnd1a__awvzbqe3kftf1w+my8...@mail.gmail.com> >> Content-Type: multipart/alternative; >> boundary="0000000000006d0281058398074b" >> >> --0000000000006d0281058398074b >> Content-Type: text/plain; charset="UTF-8" >> >> Hello Everyone, >> >> Is there a command line method to get a list of users and their password >> expiration date? >> >> Thanks! >> >> -Anthony >> >> --0000000000006d0281058398074b >> Content-Type: text/html; charset="UTF-8" >> >> <div dir="ltr">Hello Everyone,<div><br></div><div>Is there a command >> line method to get a list of users and their password expiration >> date?</div><div><br></div><div>Thanks!</div><div><br></div><div>-Anthony</div></div> >> >> >> --0000000000006d0281058398074b-- > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
