Request for enhancement

As a sysadmin, I want to be able to use the ipa-epn script to review passwords that are about to expire and passwords that have expired if the account is still active so that account management during this time of widespread teleworking is a bit easier.

Issue

/usr/sbin/ipa-epn does not accept negative integers in the --from-nbdays or --to-nbdays options.

Steps to Reproduce

1. Install ipa-client-epn.x86_64 package
2. Run "ipa-epn --from-nbdays=-1 --to-nbdays=-99 --dry-run"

Actual behavior

ipa-epn: error: --to-nbdays must be a positive integer. Input is negative.
The IPA-EPN command failed.

Expected behavior

I expect to get json output of active user accounts that have a password that has expired between 1and 99 days ago.

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server
package freeipa-server is not installed
package freeipa-client is not installed
ipa-server-4.8.7-14.module_el8.3.0+698+d6d67052.x86_64
ipa-client-4.8.7-14.module_el8.3.0+698+d6d67052.x86_64
389-ds-base-1.4.3.8-6.module_el8.3.0+604+ab7bf9cc.x86_64
pki-ca-10.9.4-1.module_el8.3.0+500+458aeb54.noarch
krb5-server-1.18.2-5.el8.x86_64

Additional info:

A possible thought although I have no idea if this would more or less difficult to implement. Provide an option for supplying a date range or comma separated list of dates instead of a count of days compared to each other.

Examples:
ipa-epn --from-range=2021-01-31 --to-range=2021-02-28
This would show any accounts with a password that expired during the months of January or February 2021.

ipa-en --dates=2021-01-03,2021-01-04,2021-01-10
This would only show accounts with a password that expired on the 3rd, 4th or 10th of January 2021.