On Mon, 2012-12-17 at 16:04 +0100, Sigbjorn Lie wrote: > Hi, > > Is it possible to lock out an user account on a set date?
You should be able to set the krbPrincipalExpiration attribute to expire an account on a set date. However note this: https://fedorahosted.org/freeipa/ticket/3305 It means ti will work with krb auth but not with ldap binds for now. Simo. -- Simo Sorce * Red Hat, Inc * New York _______________________________________________ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users