[Freeipa-users] User passwords expired

[Simo Sorce]

On Fri, 2009-07-10 at 17:16 -0500, David Christensen wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Every user I add is indicated as their password being expired, assuming
> this is normal and this forces users to create their own password when
> they first log in (not sure) I tried logging in as a test user.

See: http://freeipa.org/page/NewPasswordsExpired

> I was prompted with the expired password update now and attempted to do
> so.  When I tried to change the password I got an error:  kinit(v5)
> password change failed while getting initial credentials.
> 
> What is this error telling me?

Is ipa-kpasswd running on your IPA Server ?
Do you see errors in /var/log/krb5kdc.log on the server ?

> I tried changing the password for the user via the UI but the account is
> still indicated as password expired.

Expected, see the doc above.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York