openSUSE admin

As per discussion in the meeting on 06/06/2024, grace period to be 4 instead of 2 weeks.

crameleon wrote:

To reduce the intrusion surface from credentials sitting with people who no longer use them, I propose to:

• contact users who did not authenticate to the Heroes VPN for >= 6 months
• if no response + login within 2 weeks, disable Heroes IDM account and revoke the corresponding VPN client certificate

This would be manifested in the infrastructure policy, and could be partially automated.

I feel this can be fully automated, if we can have proper way to extract vpn logs of users