[Freeipa-users] LDAP/IPA pw - not pre-expired

Martin Kosek mkosek at redhat.com
Fri Mar 27 11:48:12 UTC 2015


On 03/27/2015 06:23 AM, Janelle wrote:
> Hi again,
> 
> I can't seem to find it. Is there a way to create a new user with a non-expired
> PW?

No clean way, by design. You can check our reasoning on this page:
https://www.freeipa.org/page/New_Passwords_Expired

There is a way (setting some DN as password synchronization agent), but this is
for PassSync mainly. Using it for regular admin user would be a hack and a bad
security practice.

HTH,
Martin




More information about the Freeipa-users mailing list