On Mon, December 17, 2012 18:40, Simo Sorce wrote:
> On Mon, 2012-12-17 at 16:04 +0100, Sigbjorn Lie wrote:
>
>> Hi,
>>
>>
>> Is it possible to lock out an user account on a set date?
>>
>
> You should be able to set the krbPrincipalExpiration attribute to expire
> an account on a set date.
>
> However note this: https://fedorahosted.org/freeipa/ticket/3305
>
>
> It means ti will work with krb auth but not with ldap binds for now.
>
>
Thanks! That worked like a charm!!
Is there any active ticket to have this property exposed for editing in the IPA
CLI / WEBUI?
Rgds,
Siggi
_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users
