[Freeipa-users] strange password error..

[Janelle]

On 7/6/15 10:44 AM, Simo Sorce wrote:
> On Mon, 2015-07-06 at 10:11 -0700, Janelle wrote:
>> Hello all,
>>
>> Is there any known bug that would cause:
>>
>> Password change failed. Server message: Current password's minimum life
>> has not expired
>>
>> Here is the environment/process (7.1 with IPA 4.1.4) --
>> 1. reset a user's PW so they are forced to change it.
>> 2. they login and get the "Your password has expired..." message
>> 3. They are then asked to change it and enter a new PW (twice)
>> 4. This error message pops up, BUT -- the password is still changed.
> If they get this using kpasswd it may happen if a re-transmission
> occurs, as kpasswd uses UDP, so the second request ends up with that
> error, I think, not 100% sure.
>
> Simo.
>
This is very consistent - happening to all my users, and yet the IPA 
server load is nothing. And since it does reset the PW successfully, why 
would it still send this message?

Still confused,
~Janelle