[Freeipa-users] User expiration on a certain date

2012-12-17 Thread Sigbjorn Lie
Hi, Is it possible to lock out an user account on a set date? Regards, Siggi ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] User expiration on a certain date

2012-12-17 Thread Simo Sorce
On Mon, 2012-12-17 at 16:04 +0100, Sigbjorn Lie wrote: Hi, Is it possible to lock out an user account on a set date? You should be able to set the krbPrincipalExpiration attribute to expire an account on a set date. However note this: https://fedorahosted.org/freeipa/ticket/3305 It means ti

Re: [Freeipa-users] User expiration on a certain date

2012-12-17 Thread Sigbjorn Lie
On Mon, December 17, 2012 18:40, Simo Sorce wrote: On Mon, 2012-12-17 at 16:04 +0100, Sigbjorn Lie wrote: Hi, Is it possible to lock out an user account on a set date? You should be able to set the krbPrincipalExpiration attribute to expire an account on a set date. However note

Re: [Freeipa-users] User expiration on a certain date

2012-12-17 Thread Simo Sorce
On Mon, 2012-12-17 at 19:08 +0100, Sigbjorn Lie wrote: On Mon, December 17, 2012 18:40, Simo Sorce wrote: On Mon, 2012-12-17 at 16:04 +0100, Sigbjorn Lie wrote: Hi, Is it possible to lock out an user account on a set date? You should be able to set the krbPrincipalExpiration

Re: [Freeipa-users] User expiration on a certain date

2012-12-17 Thread Sigbjorn Lie
On Mon, December 17, 2012 19:32, Simo Sorce wrote: On Mon, 2012-12-17 at 19:08 +0100, Sigbjorn Lie wrote: On Mon, December 17, 2012 18:40, Simo Sorce wrote: On Mon, 2012-12-17 at 16:04 +0100, Sigbjorn Lie wrote: Hi, Is it possible to lock out an user account on a set date? You

Re: [Freeipa-users] User expiration on a certain date

2012-12-17 Thread Brian Cook
Is it possible to lock out an user account on a set date? You should be able to set the krbPrincipalExpiration attribute to expire an account on a set date. However note this: https://fedorahosted.org/freeipa/ticket/3305 It means ti will work with krb auth but not with ldap