[Freeipa-users] Error setting krbpasswordexpiration using ipa user-mod

[Karl Forner]

I forgot to say that I did a "kinit admin" before the  ipa user-mod.

On Tue, Feb 23, 2016 at 2:31 PM, Karl Forner <karl.forner at gmail.com> wrote:

> Hello,
>
> I tried to postpone a password expiration date, as indicated here:
>
> https://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/pwd-expiration.html
>
> % ipa user-mod myuser --setattr=krbpasswordexpiration=20170301121443Z
>
> ipa: ERROR: Insufficient access: Insufficient 'write' privilege to the
> 'krbPasswordExpiration' attribute of entry
> 'uid=myuser,cn=users,cn=accounts,dc=quartzbio,dc=com'.
>
> Is this expected ? What is the canonical way of doing this ?
>
>
> Thanks,
> Karl
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160223/987d5534/attachment.htm>