Jim Kinney via FreeIPA-users wrote:
Is there a way to use a date range with the cli? Specifically trying
to
extract a list of users with password expiration between next Monday and
next Friday. The ipa user-find --password-expiration= is a literal
equals. And it's really specific down to the second. Can do this with
external scripting but if there's a way use ipa first, that's preferred.
Not with the ipa cli. You'll need to use ldapsearch.
Alternatively you may want to look at ipa-epn. It does exactly this and
will send e-mail notifications. You can use the --dry-run to get the
list of users if you're prefer.
rob