... | @@ -13,18 +13,19 @@ The email is sent before expiration, with an alert delay which can be configured |
... | @@ -13,18 +13,19 @@ The email is sent before expiration, with an alert delay which can be configured |
|
|
|
|
|
### Fonctionality
|
|
### Fonctionality
|
|
|
|
|
|
1. In posix mode we look for **shadowExpire** and compare it with the actual date to find if its expired. If not expired we sent an alert to the user if not already send.
|
|
1. In posix mode we look for **shadowExpire** and compare it with the actual date to find if its expired. If not expired (and soon to expire) we sent an alert to the user if not already sent.
|
|
|
|
|
|
2. In ppolicy mode we can only update pwdMaxAge in the policy, but if the policy is global it will change for all users.
|
|
2. In ppolicy mode we look for **pwdMaxAge** in the policy affecting the user and compare it with **pwdChangedTime**. If not expired (and soon to expire) we sent an alert to the user if not already sent.
|
|
|
|
|
|
If we need different pwdMaxAge values in the policies, we need to look at the **pwdPolicySubentry** attribute for the user(s) who are going to be expired.
|
|
### Problem
|
|
|
|
|
|
### problems
|
|
If FD < 1.3 there is a conflict if you have shadowExpire dates, a ppolicy with a maxAge and you use user-reminder.
|
|
|
|
In this case the same message will be sent for both posix and ppolicy alerts (while a different action needs to be taken by the user).
|
|
There may be some kind of conflict when people are using both shadowExpire, ppolicy and user-reminder.
|
|
|
|
|
|
|
|
### Solution
|
|
### Solution
|
|
|
|
|
|
* Add options --ppolicy, --posix and --both (default) to argonaut-user-reminder to be able to chose whether we want to check only ppolicy or posix.
|
|
Starting with FD 1.3, you have:
|
|
|
|
|
|
|
|
* Options --ppolicy, --posix and --both (default) to argonaut-user-reminder to be able to chose whether you want to check only ppolicy, posix or both.
|
|
|
|
|
|
* Add a box for **Alert message for ppolicy** that will contains fields for subject, body and whether to forward those mail to the manager. |
|
* Settings for **Alert message for ppolicy** that contains fields for subject, body and whether to forward those mail to the manager in the case of ppolicy expiration (meaning the settings for posix are not used anymore for ppolicy alerts) |
|
\ No newline at end of file |
|
\ No newline at end of file |