Re: [Freeipa-users] disable inactive accounts and delete old accounts

I should add that I do not have the "disable last success" option enabled for the IPA server Justean From: Justean Giger > Date: Friday, January 6, 2017 at 9:10 AM To: "freeipa-users@redhat.com"

[Freeipa-users] disable inactive accounts and delete old accounts

I am trying to use the krblastsuccessfulauth attribute to detect accounts that have been inactive for >90 days as per this post: https://www.redhat.com/archives/freeipa-users/2015-March/msg00052.html I need to be able to disable these accounts at 90 days then delete them after 180 days.