Re: [Freeipa-users] Account Expiration

2013-03-25 Thread Petr Vobornik
On 03/24/2013 05:50 PM, Dmitri Pal wrote: On 03/23/2013 03:58 AM, James James wrote: Hi Petr Can you (or somebody else ) give me some hints to use a calendar widget in the UI ? In the past we said that there is no calendar widget mature enough to meet our requirements. Has this changed? Is

Re: [Freeipa-users] Account Expiration

2013-03-25 Thread Dmitri Pal
On 03/25/2013 08:27 AM, Simo Sorce wrote: On Mon, 2013-03-25 at 10:42 +0100, Petr Vobornik wrote: On 03/24/2013 05:50 PM, Dmitri Pal wrote: On 03/23/2013 03:58 AM, James James wrote: Hi Petr Can you (or somebody else ) give me some hints to use a calendar widget in the UI ? In the past we

Re: [Freeipa-users] Account Expiration

2013-03-24 Thread Dmitri Pal
On 03/23/2013 03:58 AM, James James wrote: Hi Petr Can you (or somebody else ) give me some hints to use a calendar widget in the UI ? In the past we said that there is no calendar widget mature enough to meet our requirements. Has this changed? Is there a good widget to use now? Thanks.

Re: [Freeipa-users] Account Expiration

2013-03-23 Thread James James
Hi Petr Can you (or somebody else ) give me some hints to use a calendar widget in the UI ? Thanks. 2013/2/7 Petr Vobornik pvobo...@redhat.com On 02/07/2013 08:45 AM, Martin Kosek wrote: On 02/07/2013 08:31 AM, James James wrote: Thanks Rob. I have one more question. Is it possible to add

Re: [Freeipa-users] Account Expiration

2013-02-13 Thread Petr Spacek
On 12.2.2013 20:21, John Dennis wrote: On 02/12/2013 01:40 PM, Rob Crittenden wrote: Is it possible to ipa to send a email to user when his account is about to expire (the current date is near krbprincipalexpiration date) ? Not currently. In 3.0+ we will provide a notice when one logs into

Re: [Freeipa-users] Account Expiration

2013-02-13 Thread James James
It's a good idea. I will try that. 2013/2/13 Petr Spacek pspa...@redhat.com On 12.2.2013 20:21, John Dennis wrote: On 02/12/2013 01:40 PM, Rob Crittenden wrote: Is it possible to ipa to send a email to user when his account is about to expire (the current date is near

Re: [Freeipa-users] Account Expiration

2013-02-13 Thread Rob Crittenden
Petr Spacek wrote: On 12.2.2013 20:21, John Dennis wrote: On 02/12/2013 01:40 PM, Rob Crittenden wrote: Is it possible to ipa to send a email to user when his account is about to expire (the current date is near krbprincipalexpiration date) ? Not currently. In 3.0+ we will provide a notice

Re: [Freeipa-users] Account Expiration

2013-02-13 Thread Steven Jones
6272 From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Rob Crittenden [rcrit...@redhat.com] Sent: Thursday, 14 February 2013 2:56 a.m. To: Petr Spacek Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Account

Re: [Freeipa-users] Account Expiration

2013-02-13 Thread James James
What is the IIRC docs ? 2013/2/13 Rob Crittenden rcrit...@redhat.com Petr Spacek wrote: On 12.2.2013 20:21, John Dennis wrote: On 02/12/2013 01:40 PM, Rob Crittenden wrote: Is it possible to ipa to send a email to user when his account is about to expire (the current date is near

Re: [Freeipa-users] Account Expiration

2013-02-13 Thread James James
thanks for your code. :) 2013/2/13 Jan-Frode Myklebust janfr...@tanso.net On Wed, Feb 13, 2013 at 09:29:42AM +0100, Petr Spacek wrote: Yeah, I don't think we want to be in the business of installing and configuring an MTA. However, we should be able to detect if one is available and

Re: [Freeipa-users] Account Expiration

2013-02-13 Thread Rob Crittenden
James James wrote: What is the IIRC docs ? IIRC == If I Recall Correctly. https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6-Beta/html-single/Identity_Management_Guide/index.html#pwd-expiration rob 2013/2/13 Rob Crittenden rcrit...@redhat.com

Re: [Freeipa-users] Account Expiration

2013-02-12 Thread James James
Can you tell me how update my ipa's files once when ticket https://fedorahosted.org/freeipa/ticket/3306 will be fixed ? Should I have to do 'yum update ipa*' ? Is it possible to ipa to send a email to user when his account is about to expire (the current date is near krbprincipalexpiration

Re: [Freeipa-users] Account Expiration

2013-02-12 Thread Rob Crittenden
James James wrote: Can you tell me how update my ipa's files once when ticket https://fedorahosted.org/freeipa/ticket/3306 will be fixed ? Should I have to do 'yum update ipa*' ? Once it gets fixed upstream and packaged into a release, yes, that is what you would do. Is it possible to

Re: [Freeipa-users] Account Expiration

2013-02-12 Thread John Dennis
On 02/12/2013 01:40 PM, Rob Crittenden wrote: Is it possible to ipa to send a email to user when his account is about to expire (the current date is near krbprincipalexpiration date) ? Not currently. In 3.0+ we will provide a notice when one logs into the WebUI but that's it. We can't be sure

Re: [Freeipa-users] Account Expiration

2013-02-12 Thread James James
Thanks guys for your answers. 2013/2/12 John Dennis jden...@redhat.com On 02/12/2013 01:40 PM, Rob Crittenden wrote: Is it possible to ipa to send a email to user when his account is about to expire (the current date is near krbprincipalexpiration date) ? Not currently. In 3.0+ we will

Re: [Freeipa-users] Account Expiration

2013-02-07 Thread Simo Sorce
On Thu, 2013-02-07 at 08:31 +0100, James James wrote: Thanks Rob. I have one more question. Is it possible to add a field in the ui, and get the field's value in a custom add user hook script ? It wouldn't be useful as you would not have permission to change it anyways. If you want to

Re: [Freeipa-users] Account Expiration

2013-02-07 Thread Petr Vobornik
On 02/07/2013 08:45 AM, Martin Kosek wrote: On 02/07/2013 08:31 AM, James James wrote: Thanks Rob. I have one more question. Is it possible to add a field in the ui, and get the field's value in a custom add user hook script ? James Theoretically it's possible but it requires quite good

Re: [Freeipa-users] Account Expiration

2013-02-06 Thread James James
Can somebody gives me some help to set krbPrincipalExpiration from the freeipa ui ? Many thanks 2013/1/28 James James jre...@gmail.com Hi Martin, thanks a lot for your answer. The krbPrincipalExpiration should do the job. Regards. 2013/1/28 Martin Kosek mko...@redhat.com On 01/28/2013

Re: [Freeipa-users] Account Expiration

2013-02-06 Thread Rob Crittenden
James James wrote: Can somebody gives me some help to set krbPrincipalExpiration from the freeipa ui ? You can't set this in the web UI. You can do it from the command line using ldapmodify with: $ ldapmodify -x -D 'cn=Directory Manager' -W Enter LDAP Password: dn:

Re: [Freeipa-users] Account Expiration

2013-02-06 Thread Martin Kosek
On 02/07/2013 08:31 AM, James James wrote: Thanks Rob. I have one more question. Is it possible to add a field in the ui, and get the field's value in a custom add user hook script ? James I know that Petr Vobornik is already working in better extensibility of the UI, but that would be

[Freeipa-users] Account Expiration

2013-01-28 Thread James James
Hi, in 389-ds there is a nice plugin I love, it's account policy. You can set account expiration date and the account will be inactive at this day. http://directory.fedoraproject.org/wiki/Account_Policy_Design#Detailed_Design_of_Account_Expiration Is there a way to have this feature with

Re: [Freeipa-users] Account Expiration

2013-01-28 Thread Martin Kosek
On 01/28/2013 12:14 PM, James James wrote: Hi, in 389-ds there is a nice plugin I love, it's account policy. You can set account expiration date and the account will be inactive at this day. http://directory.fedoraproject.org/wiki/Account_Policy_Design#Detailed_Design_of_Account_Expiration

Re: [Freeipa-users] Account Expiration

2013-01-28 Thread James James
Hi Martin, thanks a lot for your answer. The krbPrincipalExpiration should do the job. Regards. 2013/1/28 Martin Kosek mko...@redhat.com On 01/28/2013 12:14 PM, James James wrote: Hi, in 389-ds there is a nice plugin I love, it's account policy. You can set account expiration date and