<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>It is confirmed, the password policy was changed with password expiration beyond 2038.</div><div>Question is, how can we restore the pw policy without a working admin user?</div><div> </div><div data-marker="__SIG_PRE__"><div><small style="font-size: 10pt; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 10pt; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;">Sándor Juhász<br style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"></div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;">System Administrator <big style="font-size: 10pt;" data-mce-style="font-size: 10pt;">ChemAxon</big> Ltd. </div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;">Building Hx, GraphiSoft Park, Záhony utca 7, Budapest, Hungary, H-1031</div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;">Cell: +36704258964</div></div> <hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__">From: "Martin Kosek" <mkosek@redhat.com> To: "Tamas Papp" <tompos@martos.bme.hu>, freeipa-users@redhat.com Sent: Tuesday, June 2, 2015 9:54:43 AM Subject: Re: [Freeipa-users] password expiration </div> <div data-marker="__QUOTED_TEXT__">On 06/01/2015 07:50 PM, Tamas Papp wrote: > hi All, > > I'm stuck: > > > $ kinit admin > Password for admin@CXCLIENTS: > kinit: Password incorrect while getting initial credentials > [root@ipa-clients1 ~]$ kinit admin > Password for admin@CXCLIENTS: > Password expired. You must change it now. > Enter new password: > Enter it again: > kinit: Password has expired while getting initial credentials > > > > > $ kinit admin > Password for admin@CXCLIENTS: > Password expired. You must change it now. > Enter new password: > Enter it again: > Password change rejected: Current password's minimum life has not expired > > Password not changed.. Please try again. > > Enter new password: > > > > > What can I do now? > > > Thanks, > tamas > Hi Tamas, What platform and FreeIPA version do you use? What actions did you do before this happened? Were you for example changing the (global) password policy? Setting a too high password life may case the Year 2038 problem and have password validity in the past. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project </div></div></body></html>