On 12/11/15 13:01, Mateusz Małek wrote:
Hi,
W dniu 12.11.2015 o 13:35, Roderick Johnstone pisze:
I'd like to find a way to disable an account on a date that we can set
in the account information. ie like the Account Availability option in
Solaris Management Console or the /etc/shadow "account expiration
date" concept on Linux.
I couldn't obviously see in the docs or on the list how to do this in
freeipa.
Does anyone have any suggestions?
There is " Kerberos principal expiration" field in Web UI (or
--principal-expiration option in CLI). When date specified there has
passed, it's no longer possible to authenticate using such account.
Best regards,
Mateusz Małek
Mateusz
Thanks very much for the pointer. I'm not sure how I missed that in
reading the docs.
Roderick
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
