[Freeipa-users] Error setting krbpasswordexpiration using ipa user-mod

[Karl Forner]

Hello,

I tried to postpone a password expiration date, as indicated here:
https://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/pwd-expiration.html

% ipa user-mod myuser --setattr=krbpasswordexpiration=20170301121443Z

ipa: ERROR: Insufficient access: Insufficient 'write' privilege to the
'krbPasswordExpiration' attribute of entry
'uid=myuser,cn=users,cn=accounts,dc=quartzbio,dc=com'.

Is this expected ? What is the canonical way of doing this ?


Thanks,
Karl
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160223/e09657b5/attachment.htm>