move/delete expired accounts

lam/HISTORY

@@ -2,6 +2,7 @@ September 2016
   - Windows: allow to show effective members of a group
   - LAM Pro:
    -> Group of names/members + roles: allow to show effective members of a group
+   -> Cron jobs: Move or delete expired accounts (Shadow)
 
 
 21.06.2016 5.4

lam/docs/manual-sources/howto.xml

@@ -2230,6 +2230,56 @@ mysql> GRANT ALL PRIVILEGES ON lam_cron.* TO 'lam_cron'@'localhost';
           "2016-12-31".</para>
         </section>
 
+        <section>
+          <title>Shadow: Delete or move expired accounts</title>
+
+          <para>You can automatically delete or move expired accounts. The job
+          checks Shadow account expiration dates (not password expiration
+          dates).</para>
+
+          <screenshot>
+            <mediaobject>
+              <imageobject>
+                <imagedata fileref="images/jobs_shadow2.png" />
+              </imageobject>
+            </mediaobject>
+          </screenshot>
+
+          <table>
+            <title>Options</title>
+
+            <tgroup cols="2">
+              <tbody>
+                <row>
+                  <entry><emphasis role="bold">Option</emphasis></entry>
+
+                  <entry><emphasis role="bold">Description</emphasis></entry>
+                </row>
+
+                <row>
+                  <entry>Delay</entry>
+
+                  <entry>Number of days to wait after the account is
+                  expired.</entry>
+                </row>
+
+                <row>
+                  <entry>Action</entry>
+
+                  <entry>Delete or move accounts</entry>
+                </row>
+
+                <row>
+                  <entry>Target DN</entry>
+
+                  <entry>Move only: specifies the DN where accounts are
+                  moved</entry>
+                </row>
+              </tbody>
+            </tgroup>
+          </table>
+        </section>
+
         <section>
           <title>Windows: Notify users about password expiration</title>