freeipa

#3687 [RFE] IPA user account expiry warning.
Closed: fixed by rcritten. Opened by dpal.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product RHEL RFE): Bug 913799

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

IPA needs a method to warn users via email that their IPA account
password is about to expire. There are users who don't regularly login to their linux servers so they need to be reminded and this is the internal policy.

Related to ticket #1985.

Metadata Update from @dpal:
- Issue assigned to someone
- Issue set to the milestone: Ticket Backlog

master:

  • 4d2272f9667d35ef88f04153c49e0621c5d56d66 IPA-EPN: Add design draft

master:

  • b8886c3e97b88739ea1d2471d692a5582234fcb9 IPA-EPN: First version.
  • 3805eff4178285f0189c355d17594b5e09dce9b0 IPA-EPN: Test suite.
  • 03caa7f965d889848675158503286cde00d635c9 Add a jinja2 e-mail template for EPN
  • 451cbae160a1e68d01eb49ceb69adac03d5e8112 Add index for krbPasswordExpiration for EPN

Metadata Update from @fcami:
- Issue close_status updated to: None

Metadata Update from @fcami:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4793 (was: 0)

ipa-4-8:

  • 98bb4e94fdc6e683bcc59bb58377c504d172800f IPA-EPN: First version.
  • 3552185c3ca740b538d1516955cae094dc29bebd IPA-EPN: Test suite.
  • 0869765536cd036221f6cd12921bac18e3e3df46 Add a jinja2 e-mail template for EPN
  • ab444db0accedeefc42264cd03c2abe4ed90ea19 Add index for krbPasswordExpiration for EPN

Metadata Update from @fcami:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4793 https://github.com/freeipa/freeipa/pull/4794 (was: https://github.com/freeipa/freeipa/pull/4793)

Metadata Update from @fcami:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4676 https://github.com/freeipa/freeipa/pull/4794 (was: https://github.com/freeipa/freeipa/pull/4793 https://github.com/freeipa/freeipa/pull/4794)

Metadata Update from @fcami:
- Custom field changelog adjusted to EPN stands for Expiring Password Notification. It is a standalone tool designed to build a list of users whose password would expire in the near future, and either display the list in a machine-readable (JSON) format, or send email notifications to these users. EPN provides command-line options to display the list of affected users. This provides data introspection and helps understand how many emails would be sent for a given day, or a given date range. The command-line options can also be used by a monitoring system to alert whenever a number of emails over the SMTP quota would be sent. EPN is meant to be launched once a day from an IPA client (preferred) or replica from a systemd timer. EPN does not keep state. The list of affected users is built at runtime but never kept.

Metadata Update from @fcami:
- Custom field changelog adjusted to EPN stands for Expiring Password Notification. It is a standalone tool designed to build a list of users whose password would expire in the near future, and either display the list in a machine-readable (JSON) format, or send email notifications to these users. EPN provides command-line options to display the list of affected users. This provides data introspection and helps understand how many emails would be sent for a given day, or a given date range. The command-line options can also be used by a monitoring system to alert whenever a number of emails over the SMTP quota would be sent. EPN is meant to be launched once a day from an IPA client (preferred) or replica from a systemd timer. EPN does not keep state: the list of affected users is built at runtime but never kept. (was: EPN stands for Expiring Password Notification. It is a standalone tool designed to build a list of users whose password would expire in the near future, and either display the list in a machine-readable (JSON) format, or send email notifications to these users. EPN provides command-line options to display the list of affected users. This provides data introspection and helps understand how many emails would be sent for a given day, or a given date range. The command-line options can also be used by a monitoring system to alert whenever a number of emails over the SMTP quota would be sent. EPN is meant to be launched once a day from an IPA client (preferred) or replica from a systemd timer. EPN does not keep state. The list of affected users is built at runtime but never kept.)

master:

  • c3cbaed9fdfa3c5501974934839cd243531a1fd5 IPA-EPN: Fixes to starttls mode, convert some log errors to exceptions
  • 1760ad48ae26e2a9ae60da0ac442b2ce9a6a4a39 IPA-EPN: Add tests for sending real mail with auth and templates
  • 7e621cf84f9498d6f6ff7c82609a50480dcaa78a IPA-EPN: Add test for starttls mode
  • 41e3d58a0b1af803926b92592cbf1d21f7e8ce14 IPA-EPN: test using SSL against port 465
  • a2728c758e83c81be4ab28e5de1a76e9cbcd4799 IPA-EPN: Add mail-test option for testing sending live email
  • 759ab3120e09672f9b9f6c400fed79b6e2820cc7 IPA-EPN: Add tests for --mail-test option
  • 3b266d39570f447db0f571a8b8085eb6c0403509 IPA-EPN: add smtp_delay to limit the velocity of e-mails sent
  • cb205cc5e4c890df5d0344682e6c958ecb087c68 IPA-EPN: add test to validate smtp_delay value
  • ba7974bfd1ae1072befcbde792d8cf4a158fc3c5 IPA-EPN: Don't treat givenname differently

ipa-4-8:

  • ca1c374ebf58ccc5ed00346876835026958fe7bd IPA-EPN: Fixes to starttls mode, convert some log errors to exceptions
  • bbe3397393c2fa7121fa05a656d682036bffbe9c IPA-EPN: Add tests for sending real mail with auth and templates
  • fc2b3aab5042a9125e74647493c0f4faecd87d20 IPA-EPN: Add test for starttls mode
  • 6587edd4b283e37da7b214fce4c3c9d013fe1118 IPA-EPN: test using SSL against port 465
  • dca3f116a41af5476a8abf860d0dda3b4c80f8b5 IPA-EPN: Add mail-test option for testing sending live email
  • 672c9f55b70a05aaa8f0baec6381a8b4ee935216 IPA-EPN: Add tests for --mail-test option
  • 37a4a79cc00a036ae11640462d880b7ea1ba7524 IPA-EPN: add smtp_delay to limit the velocity of e-mails sent
  • 4124bb6d6a665dc2fce665af577daa278e6b9f23 IPA-EPN: add test to validate smtp_delay value
  • bf28d4c8d0f085329105a4232c1a2ff3d61f067f IPA-EPN: Don't treat givenname differently

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
Normal
enhancement
IPA
https://github.com/freeipa/freeipa/pull/4676 https://github.com/freeipa/freeipa/pull/4794
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.