[Freeipa-users] Change default password expiry date

[Thomas Lau]

Hi All,

FreeIPA Default is using 60days password expiry, how could I change it?

Also, for existing accounts, can I just change krbPasswordExpiration
on LDAP? anywhere else I need to change? do I need to generate keytab
on Kerberos to activate new expiry date?