[Freeipa-users] How to set passwords which never expire ?

[dbischof at hrz.uni-kassel.de]

Hi,

On Tue, 12 Apr 2016, bahan w wrote:

> I am using FreeIPA 3.0 and I would like, for specific accounts, to set 
> passwords unexpirables.
>
> I tried to set a pwpolicy for this with the option maxage set to 0, but 
> it did not help and the maxage was 0 (password already expired).
>
> Is there a way, with this Ipa version, to set passwords unexpirables ?

it is possible to create a password policy (tab "Policy" in the web 
interface) for a user group of your choice and change the password max 
lifetime to (e.g.) 3650 days = 10 years. That's not exactly "never 
expiring", but it does the trick for me (I use it for LDAP bind users).


Mit freundlichen Gruessen/With best regards,

--Daniel.