[Freeipa-users] User expiration on a certain date

[Simo Sorce]

On Mon, 2012-12-17 at 16:04 +0100, Sigbjorn Lie wrote:
> Hi,
> 
> Is it possible to lock out an user account on a set date?

You should be able to set the krbPrincipalExpiration attribute to expire
an account on a set date.

However note this: https://fedorahosted.org/freeipa/ticket/3305

It means ti will work with krb auth but not with ldap binds for now.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York