UserReminder is a plugin which, associated with the perl script argonaut-user-reminder allows to send emails to soon-to-expire users.
It was first used with shadowExpire attribute to set an expiration date on users and send them an email which allows to postpone this expiration.
Then it was adapted to be used with ppolicy: In this case, there is to postpone link in the email but an explanation/link how to change the password.
With ppolicy the password expires after some time and the only way to avoid this is to change it. This feature makes sure user are reminded to change it before expiration happens.
In both cases once expiration happened it’s too late and nothing is done. The email is sent before expiration, with an alert delay which can be configured.
In posix mode we look for shadowExpire and compare it with the actual date to find if its expired. If not expired (and soon to expire) we sent an alert to the user if not already sent.
In ppolicy mode we look for pwdMaxAge in the policy affecting the user and compare it with pwdChangedTime. If not expired (and soon to expire) we sent an alert to the user if not already sent.
If FD < 1.3 there is a conflict if you have shadowExpire dates, a ppolicy with a maxAge and you use user-reminder. In this case the same message will be sent for both posix and ppolicy alerts (while a different action needs to be taken by the user).
Starting with FD 1.3, you have:
Options --ppolicy, --posix and --both (default) to argonaut-user-reminder to be able to chose whether you want to check only ppolicy, posix or both.
Settings for Alert message for ppolicy that contains fields for subject, body and whether to forward those mail to the manager in the case of ppolicy expiration (meaning the settings for posix are not used anymore for ppolicy alerts)