[Freeipa-users] password expiration

[Martin Kosek]

On 06/01/2015 07:50 PM, Tamas Papp wrote:
> hi All,
>
> I'm stuck:
>
>
> $ kinit admin
> Password for admin at CXCLIENTS:
> kinit: Password incorrect while getting initial credentials
> [root at ipa-clients1 ~]$ kinit admin
> Password for admin at CXCLIENTS:
> Password expired.  You must change it now.
> Enter new password:
> Enter it again:
> kinit: Password has expired while getting initial credentials
>
>
>
>
> $ kinit admin
> Password for admin at CXCLIENTS:
> Password expired.  You must change it now.
> Enter new password:
> Enter it again:
> Password change rejected: Current password's minimum life has not expired
>
> Password not changed..  Please try again.
>
> Enter new password:
>
>
>
>
> What can I do now?
>
>
> Thanks,
> tamas
>

Hi Tamas,

What platform and FreeIPA version do you use? What actions did you do before 
this happened? Were you for example changing the (global) password policy? 
Setting a too high password life may case the Year 2038 problem and have 
password validity in the past.