Re: [Freeipa-users] Suggestions requested for disabling an account by date

2015-11-12 Thread Mateusz Małek

Hi,

W dniu 12.11.2015 o 13:35, Roderick Johnstone pisze:
I'd like to find a way to disable an account on a date that we can set 
in the account information. ie like the Account Availability option in 
Solaris Management Console or the /etc/shadow "account expiration 
date" concept on Linux.


I couldn't obviously see in the docs or on the list how to do this in 
freeipa.


Does anyone have any suggestions?


There is " Kerberos principal expiration" field in Web UI (or 
--principal-expiration option in CLI). When date specified there has 
passed, it's no longer possible to authenticate using such account.


Best regards,
Mateusz Małek
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Suggestions requested for disabling an account by date

2015-11-12 Thread Roderick Johnstone

On 12/11/15 13:01, Mateusz Małek wrote:

Hi,

W dniu 12.11.2015 o 13:35, Roderick Johnstone pisze:

I'd like to find a way to disable an account on a date that we can set
in the account information. ie like the Account Availability option in
Solaris Management Console or the /etc/shadow "account expiration
date" concept on Linux.

I couldn't obviously see in the docs or on the list how to do this in
freeipa.

Does anyone have any suggestions?


There is " Kerberos principal expiration" field in Web UI (or
--principal-expiration option in CLI). When date specified there has
passed, it's no longer possible to authenticate using such account.

Best regards,
Mateusz Małek



Mateusz

Thanks very much for the pointer. I'm not sure how I missed that in 
reading the docs.


Roderick

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project