<html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi, <div class="moz-cite-prefix">W dniu 12.11.2015 o 13:35, Roderick Johnstone pisze: </div> <blockquote cite="mid:56448780.1080004@ast.cam.ac.uk" type="cite"> I'd like to find a way to disable an account on a date that we can set in the account information. ie like the Account Availability option in Solaris Management Console or the /etc/shadow "account expiration date" concept on Linux. I couldn't obviously see in the docs or on the list how to do this in freeipa. Does anyone have any suggestions? </blockquote> There is " <meta http-equiv="content-type" content="text/html; charset=UTF-8"> Kerberos principal expiration" field in Web UI (or --principal-expiration option in CLI). When date specified there has passed, it's no longer possible to authenticate using such account. Best regards, Mateusz Małek </body> </html>