> FreeIPA has an user attribute "krbPasswordExpiration" which is the time > when the password expires. > > How to use this attribute for redirecting the user to the password expiration > page ? If you want to base it on an attribute, there's an intercept flow checked into the trunk for 3.3 that does that. -- Scott