Re: Automatic Account Deactivation?

"Aharon Verno" averno@berklee.edu writes:

I was wondering if there was a way to automatically disable an account that hasn’t been logged into for a period of time? We use OpenLDAP to give entitlements for our email system and we would love a way to automatically shutdown accounts that haven’t been authenticated to in X days. Thanks for any help with this.

Depending on the number of entries in question and the time to live of this objects you may want to have a look at slapo-dds(5). You could probably create a dynamic object as soon as a user logs in, and allow a given ttl or some similar strategy,

-Dieter