[Freeipa-users] Lost access after password policy change

[Tomas Babej]

Sorry, second ticket should have been

https://fedorahosted.org/freeipa/ticket/3312

On 09/15/2014 05:36 PM, Tomas Babej wrote:
> Just for the record, this should be fixed since FreeIPA 3.2:
>
> https://fedorahosted.org/freeipa/ticket/3114
> https://fedorahosted.org/freeipa/ticket/3114
>
> On 09/15/2014 04:06 PM, Jason Woods wrote:
>> On 15 Sep 2014, at 14.48, Jason Woods <devel at jasonwoods.me.uk> wrote:
>>
>>> I wonder if anyone has any advice. We changed password policy to 20000 days a few weeks ago.
>>>
>>> Over the weekend, passwords expired and now we cannot login. All admin accounts are essentially unusable.
>>> Seems to be this issue: https://fedorahosted.org/freeipa/ticket/3312
>> Just solved it by turned the clock back to around 1975, playing around with password change, and then returning to 2014. Eventually let me get in so I could kinit and fix the policy.
>>
>> Phew. Sorry to bother.
>>
>> Jason
>>

-- 
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org