Prashant Bapat via FreeIPA-users wrote:
Hi FreeIPA Users,
Is there a way to make the group membership have an optional expiration
date. This expiration date can be set by the admin.
No, there is no way to do this in IPA.
Any pointers to how this can be implemented would be very helpful.
It would be tricky to do especially depending on the granularity needed.
It isn't something that the IPA server would do, the clients (which may
cache) would also need to evaluate the expiration dates for them to be
really meaningful.
rob