Hi,
Is there a way to search for users by krbPrincipalExpiration date
without resorting to direct LDAP queries? We currently use this
attribute to set the end date of employees with fixed-term contracts. We
would like to fire off some offboarding procedures based on the attribute.
The IPA API/CLI currently does not return any users for searches by that
attribute:
$> ipa --version
VERSION: 4.9.11, API_VERSION: 2.251
$> ipa user-show xredactedx
User login: xredactedx
First name: REDACTED
Last name: REDACTED
Home directory: /home/REDACTED
Login shell: /bin/bash
Principal name: [email protected]
Principal alias: [email protected]
Kerberos principal expiration: 20250801000000Z
[...]
$> ipa user-find --pkey-only --principal-expiration=20250801000000Z
---------------
0 users matched
---------------
----------------------------
Number of entries returned 0
----------------------------
ldapsearch with filter krbprincipalexpiration=20250801000000Z returns
the user as expected.
Cheers
Sebastian
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
