EPN.CONF(5)

📦
version 4.13.4 · 4 versions
, in centos-stream 10, centos-stream 9, fedora 43, fedora 44, nixpkgs unstable, ubuntu resolute, ubuntu stonking

💅 EPN.CONF 💅

okay bestie, gather round, we're reading the manual for epn.conf — that's the Expiring Password Notification config file, and yes it lives in the IPA Manual Pages, and yes it's lowkey iconic.

✨ NAME ✨

epn.conf — the Expiring Password Notification configuration file. that's it, that's the name, slay 🎀

🌸 SYNOPSIS 🌸

/etc/ipa/epn.conf

🦋 DESCRIPTION 🦋

so epn.conf is the config file that sets all the options for the ipa-epn tool — which is the little guy that goes around telling users "hey your password is about to expire, maybe do something about that bestie." 💖

that's literally its whole job. it's giving helpful. it's giving considerate. periodt.

💜 SYNTAX 💜

okay so here's the vibe check on how to actually write this file:

  • the option names are not case sensitive. the values, though? those might be case sensitive depending on which option it is. iykyk 🙈
  • blank lines? ignored. not even looked at. they're just vibing. ✨
  • lines that start with # are comments and get ignored too. say whatever you want in there, nobody's reading it. 💀
  • a valid line is: an option name, an equals sign, and a value. that's the whole recipe. 🍓
  • spaces around the equals sign get ignored. an option terminates at the end of a line. no drama, no continuation.
  • values should NOT be quoted — the quotes will not be stripped. this is the #1 thing that trips people up, no cap. 😭

here's the glow-up in code form:

# Wrong - don't include quotes
verbose = "True"

# Right - Properly formatted options
verbose = True
verbose=True
  • options must appear in the section named [global]. that's the only section defined or used right now, there are no other sections. just the one. 👑
  • you can define options that IPA doesn't use. but be careful with misspellings, because they will not be rejected. the parser will just shrug and move on. so like, spell check yourself fr fr. 🫶

🔥 OPTIONS 🔥

here we go, the main event, the whole roster, no skips:

  • smtp_server <fqdn> — which SMTP server to use. default is localhost. 🏠
  • smtp_port <port> — which SMTP port to use. default is 25.
  • smtp_user <user> — the id of the user to authenticate with the SMTP server. default None.
  • smtp_password <password> — the password for that authorized user. default None.
  • smtp_client_cert <certificate> — path to a single file in PEM format containing the certificate. default None.
  • smtp_client_key <private key> — path to a file containing the private key in. otherwise the private key will be taken from certfile as well. default None.
  • smtp_client_key_pass <private key password> — the password for decrypting the private key. default None.
  • smtp_timeout <seconds> — how many seconds to wait for SMTP to respond. default 60. ⏳
  • smtp_security <security> — the type of secure connection to make. options are: none, starttls and ssl. default is none. 🔒
  • smtp_admin <address> — the From e-mail address value in the e-mails sent. default is root@localhost. bounces will be sent here, so heads up. 📬
  • smtp_delay <milliseconds> — time to wait, in milliseconds, between each e-mail sent, to try to avoid overloading the mail queue. default is 0.
  • mail_from <address> — the From: e-mail address value in the e-mails sent. default is noreply@ipadefaultemaildomain. you can find this value by running ipa config-show. 💌
  • mail_from_name <name> — the From: name value in the e-mails sent. default is IPA-EPN.
  • notify_ttls <list of days> — the list of days before a password expiration when ipa-epn should notify a user that their password will soon require a reset. if this value is not specified then the default list will be used: 28, 14, 7, 3, 1. ⏰
  • msg_subject <subject> — the subject of the e-mails sent. default is "Your password will expire soon."
  • msg_charset <type> — set the character set of the message. default is utf8. this will result in the body of the message being base64-encoded. 🎀
  • msg_subtype <type> — set the message's MIME sub-content type. default is plain.

🧚 FILES 🧚

  • /etc/ipa/epn.conf — configuration file 💖

⭐ SEE ALSO ⭐

  • ipa-epn(1) — go read it, bestie, it's the whole reason this file exists 🫶

and that's the tea! 🍵

this lil beauty comes to you from the IPA Manual Pages, dated April 28, 2020. take care of your config, hydrate, and don't forget your quotes... wait, no. DO forget your quotes. 💅✨

📦 where this page comes from