Ah. It's in the client package. Servers are rhel, but the clients here are sles.

On July 19, 2022 3:23:36 PM EDT, Rob Crittenden <rcritten@redhat.com> wrote:
Jim Kinney via FreeIPA-users wrote:
Is there a way to use a date range with the cli? Specifically trying to
extract a list of users with password expiration between next Monday and
next Friday. The ipa user-find --password-expiration= is a literal
equals. And it's really specific down to the second. Can do this with
external scripting but if there's a way use ipa first, that's preferred.

Not with the ipa cli. You'll need to use ldapsearch.

Alternatively you may want to look at ipa-epn. It does exactly this and
will send e-mail notifications. You can use the --dry-run to get the
list of users if you're prefer.

rob


--
Computers amplify human error
Super computers are really cool