<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">1a) has come up before:</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">https://www.redhat.com/archives/freeipa-users/2014-February/msg00313.html</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">1b) We handled this by setting the expire lifetime to a very large value (20 years) for members of a certain group.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">2) I’m not sure.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div> <div id="bloop_sign_1409236800342906880" class="bloop_sign"><div style="font-family:helvetica,arial;font-size:13px"><br></div><div style="font-family:helvetica,arial;font-size:13px">Kind regards,</div><div style="font-family:helvetica,arial;font-size:13px"><br>Will Sheldon<br></div><div style="font-family:helvetica,arial;font-size:13px">+1.778-689-1244</div></div> <br><p style="color:#000;">On August 28, 2014 at 7:26:03 AM, Zip Ly (<a href="mailto:ziplyx@gmail.com">ziplyx@gmail.com</a>) wrote:</p> <blockquote type="cite" class="clean_bq"><span><div><div></div><div>
<title></title>
<div dir="ltr">
<div>Hi,</div>
<div> </div>
<div> </div>
<div><span>I'm trying to change a user password without
reset.</span></div>
<div><span>If I use the (primary) admin to change the password then
it doesn't need a password reset, because the expire lifetime
is 90 days.</span></div>
<div> </div>
<div><span>But if I create a second admin, then every password
change made by the second admin needs a password reset, because the
password is expired immediately.</span></div>
<div> </div>
<div><span><span>1a) Does anyone knows how I can change the
policy/privilege of the second admin so every password change
doesn't require a reset? 1b) and is it
possible to set a different expire lifetime like
zero for unlimited lifetime?</span></span></div>
<div> </div>
<div>
<div><span>It's almost the same bugreport as <a href="https://fedorahosted.org/freeipa/ticket/2795">https://fedorahosted.org/freeipa/ticket/2795</a>
but the difference is there should be 2 policies: one for changing
your own password and another for resetting other users
password.</span></div>
</div>
<div> </div>
<div>2) Are there more differences in policies between the
first (primary) admin and the second admin you just
created?</div>
<div> </div>
<div> </div>
<div>Kind regards,</div>
<div> </div>
<div>Zip</div>
<div> </div>
<p> </p>
</div>
--
<br>Manage your subscription for the Freeipa-users mailing list:
<br>https://www.redhat.com/mailman/listinfo/freeipa-users
<br>Go To http://freeipa.org for more info on the project</div></div></span></blockquote></body></html>