expirycheck module ================== The expirycheck module validates user's expiry date attribute by showing warning to the user whose NetID is about to expire or denying access if NetID has already expired. The expirycheck module is implemented as an Authentication Processing Filter. That means it can be configured in the global config.php file or the SP remote or IdP hosted metadata. It is recommended to run the expirycheck module at the IdP, and configure the filter to run before all the other filters you may have enabled. How to setup the expirycheck module ----------------------------------- First you need to enable the expirycheck module, touch an `enable` file, in the expirycheck module: touch modules/expirycheck/enable Then you need to set filter parameters in your config.php file. Example: 10 => array( 'class' => 'expirycheck:ExpiryDate', 'netid_attr' => 'eduPersonPrincipalName', 'expirydate_attr' => 'schacExpiryDate', 'warndaysbefore' => '60', 'date_format' => 'd.m.Y', ), Parameter netid_attr represents (ldap) attribute name which has user's NetID stored in it, parameter expirydate_attr represents (ldap) attribute name which has user's expiry date (date must be formated as YYYYMMDDHHMMSSZ, e.g. 20111011235959Z) stored in it. Those two attributes needs to be part of the attribute set, which is retrived from ldap during authentication process. Parameter warndaysbefore set as a number, which represents how many days before expiry date the "about to expire" warning will show to the user. Parameter date_format defines date representation format. PHP Date() syntax is used. More info: http://php.net/manual/en/function.date.php P.S. Comments and bug reports please send to Alex Mihičinac