DOKK / manpages / debian 12 / freeipa-client-epn / epn.conf.5.en
EPN.CONF(5) IPA Manual Pages EPN.CONF(5)

epn.conf - Expiring Password Notification configuration file


The epn.conf configuration file is used to set the options for the ipa-epn tool to notify users of upcoming password expiration.

The configuration options are not case sensitive. The values may be case sensitive, depending on the option.

Blank lines are ignored. Lines beginning with # are comments and are ignored.

Valid lines consist of an option name, an equals sign and a value. Spaces surrounding equals sign are ignored. An option terminates at the end of a line.

Values should not be quoted, the quotes will not be stripped.

# Wrong - don't include quotes
verbose = "True"

# Right - Properly formatted options
verbose = True

Options must appear in the section named [global]. There are no other sections defined or used currently.

Options may be defined that are not used by IPA. Be careful of misspellings, they will not be rejected.

Specifies the SMTP server to use. The default is localhost.
Specifies the SMTP port. The default is 25.
Specifies the id of the user to authenticate with the SMTP server. Default None.
Specifies the password for the authorized user. Default None.
Specifies the path to a single file in PEM format containing the certificate. Default None.
Specifies the path to a file containing the private key in. Otherwise the private key will be taken from certfile as well. Default None.
Specifies the password for decrypting the private key. Default None.
Specifies the number of seconds to wait for SMTP to respond. Default 60.
Specifies the type of secure connection to make. Options are: none, starttls and ssl. The default is none.
Specifies the From e-mail address value in the e-mails sent. The default is root@localhost. Bounces will be sent here.
Time to wait, in milliseconds, between each e-mail sent to try to avoid overloading the mail queue. The default is 0.
Specifies the From: e-mail address value in the e-mails sent. The default is noreply@ipadefaultemaildomain. This value can be found by running ipa config-show
This is the list of days before a password expiration when ipa-epn should notify a user that their password will soon require a reset. If this value is not specified then the default list will be used: 28, 14, 7, 3, 1.
Specifies the subject of the e-mails sent. The default is "Your password will expire soon."
Set the character set of the message. The default is utf8. This will result in he body of the message being base64-encoded.
Set the message's MIME sub-content type. The default is plain.

Configuration file


April 28, 2020 IPA