Date range

[Jim Kinney]

Is there a way to use a date range with the cli? Specifically trying to extract a list of users with password expiration between next Monday and next Friday. The ipa user-find --password-expiration= is a literal equals. And it's really specific down to the second. Can do this with external scripting but if there's a way use ipa first, that's preferred.

[Rob Crittenden]

Jim Kinney via FreeIPA-users wrote:
> Is there a way to use a date range with the cli? Specifically trying to
> extract a list of users with password expiration between next Monday and
> next Friday. The ipa user-find --password-expiration= is a literal
> equals. And it's really specific down to the second. Can do this with
> external scripting but if there's a way use ipa first, that's preferred.

Not with the ipa cli. You'll need to use ldapsearch.

Alternatively you may want to look at ipa-epn. It does exactly this and
will send e-mail notifications. You can use the --dry-run to get the
list of users if you're prefer.

rob

[Jim Kinney]

ipa-epn doesn't ship with IdM I don't think?

On July 19, 2022 3:23:36 PM EDT, Rob Crittenden  wrote:
> Jim Kinney via FreeIPA-users wrote:
> > Is there a way to use a date range with the cli? Specifically trying
>
> to
> > extract a list of users with password expiration between next Monday
>
> and
> > next Friday. The ipa user-find --password-expiration= is a literal
> > equals. And it's really specific down to the second. Can do this with
> > external scripting but if there's a way use ipa first, that's
>
> preferred.
>
> Not with the ipa cli. You'll need to use ldapsearch.
>
> Alternatively you may want to look at ipa-epn. It does exactly this and
> will send e-mail notifications. You can use the --dry-run to get the
> list of users if you're prefer.
>
> rob

[Jim Kinney]

Ah. It's in the client package. Servers are rhel, but the clients here are sles.

On July 19, 2022 3:23:36 PM EDT, Rob Crittenden  wrote:
> Jim Kinney via FreeIPA-users wrote:
> > Is there a way to use a date range with the cli? Specifically trying
>
> to
> > extract a list of users with password expiration between next Monday
>
> and
> > next Friday. The ipa user-find --password-expiration= is a literal
> > equals. And it's really specific down to the second. Can do this with
> > external scripting but if there's a way use ipa first, that's
>
> preferred.
>
> Not with the ipa cli. You'll need to use ldapsearch.
>
> Alternatively you may want to look at ipa-epn. It does exactly this and
> will send e-mail notifications. You can use the --dry-run to get the
> list of users if you're prefer.
>
> rob

[Ivars Strazdins]

Hi,
ipa-epn is a bonus after upgrade from IPA 4.6 ! It will eventually replace my clumsy scripts.
But - is is possible to get email variable in the ipa-epn template?
Do I need to hack /usr/lib/python3.9/site-packages/ipaclient/install/ipa_epn.py for that?

With kind regards,
Ivars
> On 19 Jul 2022, at 22:23, Rob Crittenden via FreeIPA-users  wrote:
>
> Jim Kinney via FreeIPA-users wrote:
> > Is there a way to use a date range with the cli? Specifically trying to
> > extract a list of users with password expiration between next Monday and
> > next Friday. The ipa user-find --password-expiration= is a literal
> > equals. And it's really specific down to the second. Can do this with
> > external scripting but if there's a way use ipa first, that's preferred.
>
> Not with the ipa cli. You'll need to use ldapsearch.
>
> Alternatively you may want to look at ipa-epn. It does exactly this and
> will send e-mail notifications. You can use the --dry-run to get the
> list of users if you're prefer.
>
> rob
> _______________________________________________
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[Rob Crittenden]

Ivars Strazdins via FreeIPA-users wrote:
> Hi,
> ipa-epn is a bonus after upgrade from IPA 4.6 ! It will eventually
> replace my clumsy scripts.
> But - is is possible to get email variable in the ipa-epn template?
> Do I need to
> hack /usr/lib/python3.9/site-packages/ipaclient/install/ipa_epn.py for that?

You'd need to hack the script and potentially the template.

If you want this available by default please open a ticket at
https://pagure.io/freeipa/new_issue

If you are going to make the change yourself anyway and want to
contribute it you can create a PR at https://github.com/freeipa/freeipa

thanks

rob
> With kind regards,
> Ivars
> > On 19 Jul 2022, at 22:23, Rob Crittenden via FreeIPA-users
> > <[e-mail]
> > > wrote:
> >
> > Jim Kinney via FreeIPA-users wrote:
> > > Is there a way to use a date range with the cli? Specifically trying to
> > > extract a list of users with password expiration between next Monday and
> > > next Friday. The ipa user-find --password-expiration= is a literal
> > > equals. And it's really specific down to the second. Can do this with
> > > external scripting but if there's a way use ipa first, that's preferred.
> >
> > Not with the ipa cli. You'll need to use ldapsearch.
> >
> > Alternatively you may want to look at ipa-epn. It does exactly this and
> > will send e-mail notifications. You can use the --dry-run to get the
> > list of users if you're prefer.
> >
> > rob
> > _______________________________________________
> > FreeIPA-users mailing list -- [e-mail]
> >
> > To unsubscribe send an email to
> > [e-mail]
> >
> > Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedorahosted.org/archives/list/[e-mail]...
> > Do not reply to spam on the list, report it:
> > https://pagure.io/fedora-infrastructure
>
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure