Thanks everyone... Between what you guys said and some research i ended up
doing this
http://serverfault.com/questions/594443/how-can-i-force-a-mac-mobile-account-user-to-be-logged-out-or-locked-out-when-th/594773#594773
On Mon, May 12, 2014 at 4:31 PM, Michael ORourke
I am working on my mac setups and am wanting to ping the server every so often and check to see if their user is enabled or disabled. If Disabled then I will show them the login screen, log them out or something else.. What I need is how to check to see if they are enabled or not through bash...
Chris Whittle wrote:
I am working on my mac setups and am wanting to ping the server every so
often and check to see if their user is enabled or disabled. If
Disabled then I will show them the login screen, log them out or
something else.. What I need is how to check to see if they are enabled
I wrote a script to query IPA for accounts with passwords that are about to expire (so I can nag them with an email to reset their password), and I also added logic in my script to ignore accounts that are disabled. So I needed a way to query my IPA server for this info. I came up with 2 solutions