---
name: "epn.conf"
section: "5"
platform: "linux"
package: "freeipa-client-epn"
version: "4.12.4-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/epn.conf"
---

# epn.conf(5)

Expiring Password Notification configuration file

## NAME

epn.conf - Expiring Password Notification configuration file

## SYNOPSIS

/etc/ipa/epn.conf

## DESCRIPTION

The *epn.conf* configuration file is used to set the options for the ipa-epn tool to notify users of upcoming password expiration.

## SYNTAX

The configuration options are not case sensitive. The values may be case sensitive, depending on the option.

Blank lines are ignored. Lines beginning with # are comments and are ignored.

Valid lines consist of an option name, an equals sign and a value. Spaces surrounding equals sign are ignored. An option terminates at the end of a line.

Values should not be quoted, the quotes will not be stripped.

    \# Wrong - don't include quotes\
     verbose = "True"

    \# Right - Properly formatted options\
     verbose = True\
     verbose=True

Options must appear in the section named \[global\]. There are no other sections defined or used currently.

Options may be defined that are not used by IPA. Be careful of misspellings, they will not be rejected.

## OPTIONS

- **smtp\_server \<fqdn\>**

  Specifies the SMTP server to use. The default is localhost.

- **smtp\_port \<port\>**

  Specifies the SMTP port. The default is 25.

- **smtp\_user \<user\>**

  Specifies the id of the user to authenticate with the SMTP server. Default None.

- **smtp\_password \<password\>**

  Specifies the password for the authorized user. Default None.

- **smtp\_client\_cert \<certificate\>**

  Specifies the path to a single file in PEM format containing the certificate. Default None.

- **smtp\_client\_key \<private key\>**

  Specifies the path to a file containing the private key in. Otherwise the private key will be taken from certfile as well. Default None.

- **smtp\_client\_key\_pass \<private key password\>**

  Specifies the password for decrypting the private key. Default None.

- **smtp\_timeout \<seconds\>**

  Specifies the number of seconds to wait for SMTP to respond. Default 60.

- **smtp\_security \<security\>**

  Specifies the type of secure connection to make. Options are: none, starttls and ssl. The default is none.

- **smtp\_admin \<address\>**

  Specifies the From e-mail address value in the e-mails sent. The default is root@localhost. Bounces will be sent here.

- **smtp\_delay \<milliseconds\>**

  Time to wait, in milliseconds, between each e-mail sent to try to avoid overloading the mail queue. The default is 0.

- **mail\_from \<address\>**

  Specifies the From: e-mail address value in the e-mails sent. The default is noreply@ipadefaultemaildomain. This value can be found by running *ipa config-show*

- **mail\_from\_name \<name\>**

  Specifies the From: name value in the e-mails sent. The default is IPA-EPN.

- **notify\_ttls \<list of days\>**

  This is the list of days before a password expiration when ipa-epn should notify a user that their password will soon require a reset. If this value is not specified then the default list will be used: 28, 14, 7, 3, 1.

- **msg\_subject \<subject\>**

  Specifies the subject of the e-mails sent. The default is "Your password will expire soon."

- **msg\_charset \<type\>**

  Set the character set of the message. The default is utf8. This will result in he body of the message being base64-encoded.

- **msg\_subtype \<type\>**

  Set the message's MIME sub-content type. The default is plain.

## FILES

- */etc/ipa/epn.conf*

  Configuration file

## SEE ALSO

[**ipa-epn**(1)](/ipa-epn/1.md)