EPN.CONF(5) IPA Manual Pages EPN.CONF(5)

# [NAME](#NAME)

epn.conf - Expiring Password Notification configuration file

# [SYNOPSIS](#SYNOPSIS)

/etc/ipa/epn.conf

# [DESCRIPTION](#DESCRIPTION)

The *epn.conf* configuration file is used to set the options for the ipa-epn tool to notify users of upcoming password expiration.

# [SYNTAX](#SYNTAX)

The configuration options are not case sensitive. The values may be case sensitive, depending on the option.

Blank lines are ignored. Lines beginning with # are comments and are ignored.

Valid lines consist of an option name, an equals sign and a value. Spaces surrounding equals sign are ignored. An option terminates at the end of a line.

Values should not be quoted, the quotes will not be stripped.

\# Wrong - don't include quotes  
verbose = "True"

\# Right - Properly formatted options  
verbose = True  
verbose=True

Options must appear in the section named \[global]. There are no other sections defined or used currently.

Options may be defined that are not used by IPA. Be careful of misspellings, they will not be rejected.

# [OPTIONS](#OPTIONS)

[**smtp\_server <fqdn>**](#smtp_server)

Specifies the SMTP server to use. The default is localhost.

[**smtp\_port <port>**](#smtp_port)

Specifies the SMTP port. The default is 25.

[**smtp\_user <user>**](#smtp_user)

Specifies the id of the user to authenticate with the SMTP server. Default None.

[**smtp\_password <password>**](#smtp_password)

Specifies the password for the authorized user. Default None.

[**smtp\_client\_cert <certificate>**](#smtp_client_cert)

Specifies the path to a single file in PEM format containing the certificate. Default None.

[**smtp\_client\_key <private key>**](#smtp_client_key)

Specifies the path to a file containing the private key in. Otherwise the private key will be taken from certfile as well. Default None.

[**smtp\_client\_key\_pass <private key password>**](#smtp_client_key_pass)

Specifies the password for decrypting the private key. Default None.

[**smtp\_timeout <seconds>**](#smtp_timeout)

Specifies the number of seconds to wait for SMTP to respond. Default 60.

[**smtp\_security <security>**](#smtp_security)

Specifies the type of secure connection to make. Options are: none, starttls and ssl. The default is none.

[**smtp\_admin <address>**](#smtp_admin)

Specifies the From e-mail address value in the e-mails sent. The default is root@localhost. Bounces will be sent here.

[**smtp\_delay <milliseconds>**](#smtp_delay)

Time to wait, in milliseconds, between each e-mail sent to try to avoid overloading the mail queue. The default is 0.

[**mail\_from <address>**](#mail_from)

Specifies the From: e-mail address value in the e-mails sent. The default is noreply@ipadefaultemaildomain. This value can be found by running *ipa config-show*

[**mail\_from\_name <name>**](#mail_from_name)

Specifies the From: name value in the e-mails sent. The default is IPA-EPN.

[**notify\_ttls <list of days>**](#notify_ttls)

This is the list of days before a password expiration when ipa-epn should notify a user that their password will soon require a reset. If this value is not specified then the default list will be used: 28, 14, 7, 3, 1.

[**msg\_subject <subject>**](#msg_subject)

Specifies the subject of the e-mails sent. The default is "Your password will expire soon."

[**msg\_charset <type>**](#msg_charset)

Set the character set of the message. The default is utf8. This will result in he body of the message being base64-encoded.

[**msg\_subtype <type>**](#msg_subtype)

Set the message's MIME sub-content type. The default is plain.

# [FILES](#FILES)

*/etc/ipa/epn.conf*

Configuration file

# [SEE ALSO](#SEE_ALSO)

[**ipa-epn**(1)](/man/enterprise-packages/freeipa/ipa-epn.1)

April 28, 2020 IPA

---

Document: epn.conf(5) from freeipa 4.13.4-r3 (Chainguard OS)
Source: https://pagure.io/freeipa.git