freeipa

#7069 Feature Request: Expire Password from Web Interface
Opened by dirtyworks. Modified

Open
Close Issue

While the web interface is good and getting better, I'm requesting a new, conditional option, "expire password."

Currently, the user with appropriate role and access can change the password under the Actions drop-down box.

Once the user has been given permission and role to expire the password, the Actions drop-down menu should populate with the "expire user password" From there, a gui should open to set the year, month, day, hour, minute, second values.

Currently, I perform this on the command line.

ipa user-mod myUser --setattr=krbpasswordexpiration=yyyMMDDhhmmssZ

Here is how I enabled it on the command line.
ipa permission-add 'Set User Password Expiration' --bindtype='permission' --right='write' -- type='user' --attrs='krbpasswordexpiration'

ipa privilege-add-permission 'User Administrators' --permission='Set User Password Expiratio n'

Metadata Update from @pvoborni:
- Issue private status set to: False (was: True)

@pvomacka could it be a one liner? See:

                     {
                            $type: 'datetime',
                            name: 'krbpasswordexpiration',
                            label: '@i18n:objects.user.krbpasswordexpiration',
                            read_only: true
                        },

Then there is related: https://github.com/freeipa/freeipa/pull/621#pullrequestreview-30274708

Metadata Update from @pvoborni:
- Issue set to the milestone: FreeIPA 4.7
- Issue tagged with: webui

Metadata Update from @rcritten:
- Issue set to the milestone: FreeIPA 4.7.1 (was: FreeIPA 4.7)

FreeIPA 4.7 has been released, moving to FreeIPA 4.7.1 milestone
Metadata
None

webui

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.