[Freeipa-users] Suggestions requested for disabling an account by date

[Roderick Johnstone]

On 12/11/15 13:01, Mateusz Małek wrote:
> Hi,
>
> W dniu 12.11.2015 o 13:35, Roderick Johnstone pisze:
>> I'd like to find a way to disable an account on a date that we can set
>> in the account information. ie like the Account Availability option in
>> Solaris Management Console or the /etc/shadow "account expiration
>> date" concept on Linux.
>>
>> I couldn't obviously see in the docs or on the list how to do this in
>> freeipa.
>>
>> Does anyone have any suggestions?
>
> There is " Kerberos principal expiration" field in Web UI (or
> --principal-expiration option in CLI). When date specified there has
> passed, it's no longer possible to authenticate using such account.
>
> Best regards,
> Mateusz Małek


Mateusz

Thanks very much for the pointer. I'm not sure how I missed that in 
reading the docs.

Roderick