#3687 [RFE] IPA user account expiry warning.
Closed: fixed 3 years ago by rcritten. Opened 10 years ago by dpal.

Ticket was cloned from Red Hat Bugzilla (product RHEL RFE): Bug 913799

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

IPA needs a method to warn users via email that their IPA account
password is about to expire. There are users who don't regularly login to their linux servers so they need to be reminded and this is the internal policy.


Metadata Update from @dpal:
- Issue assigned to someone
- Issue set to the milestone: Ticket Backlog

7 years ago

master:

  • 4d2272f IPA-EPN: Add design draft

master:

  • b8886c3 IPA-EPN: First version.
  • 3805eff IPA-EPN: Test suite.
  • 03caa7f Add a jinja2 e-mail template for EPN
  • 451cbae Add index for krbPasswordExpiration for EPN

Metadata Update from @fcami:
- Issue close_status updated to: None

3 years ago

Metadata Update from @fcami:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4793 (was: 0)

3 years ago

ipa-4-8:

  • 98bb4e9 IPA-EPN: First version.
  • 3552185 IPA-EPN: Test suite.
  • 0869765 Add a jinja2 e-mail template for EPN
  • ab444db Add index for krbPasswordExpiration for EPN

Metadata Update from @fcami:
- Custom field changelog adjusted to EPN stands for Expiring Password Notification. It is a standalone tool designed to build a list of users whose password would expire in the near future, and either display the list in a machine-readable (JSON) format, or send email notifications to these users. EPN provides command-line options to display the list of affected users. This provides data introspection and helps understand how many emails would be sent for a given day, or a given date range. The command-line options can also be used by a monitoring system to alert whenever a number of emails over the SMTP quota would be sent. EPN is meant to be launched once a day from an IPA client (preferred) or replica from a systemd timer. EPN does not keep state. The list of affected users is built at runtime but never kept.

3 years ago

Metadata Update from @fcami:
- Custom field changelog adjusted to EPN stands for Expiring Password Notification. It is a standalone tool designed to build a list of users whose password would expire in the near future, and either display the list in a machine-readable (JSON) format, or send email notifications to these users. EPN provides command-line options to display the list of affected users. This provides data introspection and helps understand how many emails would be sent for a given day, or a given date range. The command-line options can also be used by a monitoring system to alert whenever a number of emails over the SMTP quota would be sent. EPN is meant to be launched once a day from an IPA client (preferred) or replica from a systemd timer. EPN does not keep state: the list of affected users is built at runtime but never kept. (was: EPN stands for Expiring Password Notification. It is a standalone tool designed to build a list of users whose password would expire in the near future, and either display the list in a machine-readable (JSON) format, or send email notifications to these users. EPN provides command-line options to display the list of affected users. This provides data introspection and helps understand how many emails would be sent for a given day, or a given date range. The command-line options can also be used by a monitoring system to alert whenever a number of emails over the SMTP quota would be sent. EPN is meant to be launched once a day from an IPA client (preferred) or replica from a systemd timer. EPN does not keep state. The list of affected users is built at runtime but never kept.)

3 years ago

master:

  • c3cbaed IPA-EPN: Fixes to starttls mode, convert some log errors to exceptions
  • 1760ad4 IPA-EPN: Add tests for sending real mail with auth and templates
  • 7e621cf IPA-EPN: Add test for starttls mode
  • 41e3d58 IPA-EPN: test using SSL against port 465
  • a2728c7 IPA-EPN: Add mail-test option for testing sending live email
  • 759ab31 IPA-EPN: Add tests for --mail-test option
  • 3b266d3 IPA-EPN: add smtp_delay to limit the velocity of e-mails sent
  • cb205cc IPA-EPN: add test to validate smtp_delay value
  • ba7974b IPA-EPN: Don't treat givenname differently

ipa-4-8:

  • ca1c374 IPA-EPN: Fixes to starttls mode, convert some log errors to exceptions
  • bbe3397 IPA-EPN: Add tests for sending real mail with auth and templates
  • fc2b3aa IPA-EPN: Add test for starttls mode
  • 6587edd IPA-EPN: test using SSL against port 465
  • dca3f11 IPA-EPN: Add mail-test option for testing sending live email
  • 672c9f5 IPA-EPN: Add tests for --mail-test option
  • 37a4a79 IPA-EPN: add smtp_delay to limit the velocity of e-mails sent
  • 4124bb6 IPA-EPN: add test to validate smtp_delay value
  • bf28d4c IPA-EPN: Don't treat givenname differently

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata