[Freeipa-users] Authentication failure when a reset the password

[Joe Linoff]

Thanks. It sounds like I should have been running kinit right off the
bat. I expected su-l to do the same thing but it wouldn't accept the
initial password.

Regards,

Joe

-----Original Message-----
From: Stephen Ingram [mailto:sbingram at gmail.com] 
Sent: Friday, June 29, 2012 6:23 PM
To: Joe Linoff
Cc: freeipa-users at redhat.com
Subject: Re: [Freeipa-users] Authentication failure when a reset the
password

On Fri, Jun 29, 2012 at 6:11 PM, Joe Linoff <jlinoff at tabula.com> wrote:
> Hi Everybody.
>
>
>
> I ran into a strange problem today: I reset a user password in the GUI

> to "Test1234" for testing but when I tried to login as that user and 
> enter the password, I got an authentication error. Does anyone know 
> why this might be occurring or how I can debug it?

...snip...

When you reset the user password in the GUI it is set to expire
immediately, thus the user must change it the next time they login
(klinit). See the documentation at
https://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/changi
ng-pwds.html
for more detail.

Steve