[Freeipa-users] Lost access after password policy change

[Tomas Babej]

Just for the record, this should be fixed since FreeIPA 3.2:

https://fedorahosted.org/freeipa/ticket/3114
https://fedorahosted.org/freeipa/ticket/3114

On 09/15/2014 04:06 PM, Jason Woods wrote:
> On 15 Sep 2014, at 14.48, Jason Woods <devel at jasonwoods.me.uk> wrote:
>
>> I wonder if anyone has any advice. We changed password policy to 20000 days a few weeks ago.
>>
>> Over the weekend, passwords expired and now we cannot login. All admin accounts are essentially unusable.
>> Seems to be this issue: https://fedorahosted.org/freeipa/ticket/3312
> Just solved it by turned the clock back to around 1975, playing around with password change, and then returning to 2014. Eventually let me get in so I could kinit and fix the policy.
>
> Phew. Sorry to bother.
>
> Jason
>

-- 
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org