Hi Rob, thanks for your feedback.
Unfortunately, ipa user-mod user1 --setattr givenname=phili ipa: ERROR: Insufficient access: Insufficient 'write' privilege to the 'givenName' attribute of entry 'uid=...'. >> In general we strongly encourage you to upgrade to a supported release I wish I could. I'll report it to my manager. ----- Mail original ----- De: "Rob Crittenden" <rcrit...@redhat.com> À: "FreeIPA users list" <freeipa-users@lists.fedorahosted.org> Cc: phi...@free.fr Envoyé: Mardi 7 Février 2023 17:51:20 Objet: Re: [Freeipa-users] Re: password-expiration When using --setattr you have to use the LDAP attribute name. So in this case givenname. 4.5.4 is getting along to 6 years old now. In general we strongly encourage you to upgrade to a supported release, one release at a time (there is no going from 4.5 to 4.10 directly). rob None via FreeIPA-users wrote: > > > Hi Florence, > > I've tried the --setattr option with 'first', > > > ipa user-mod user1 --setattr first=phil > > ... but to no avail > > ipa: ERROR: Insufficient access: Insufficient 'write' privilege to the > 'first' attribute of > entry 'uid=...'. > > > > ----- Mail original ----- > De: "Florence Blanc-Renaud via FreeIPA-users" > <freeipa-users@lists.fedorahosted.org> > À: phi...@free.fr > Cc: freeipa-users@lists.fedorahosted.org, "Florence Blanc-Renaud" > <f...@redhat.com> > Envoyé: Mardi 7 Février 2023 17:37:19 > Objet: [Freeipa-users] Re: password-expiration > > > > > > Hi, > > > > On Tue, Feb 7, 2023 at 5:23 PM < phi...@free.fr > wrote: > > > Hi Florence, > alas, same issue > > ipa: error: no such option: --password-expiration > > > > Ok, the functionality was added in 4.6.0 (see Release notes ) so you need to > use directly ipa user-mod LOGIN --setattr krbpasswordexpiration =VALUE > flo > > > > > > > ----- Mail original ----- > De: "Florence Blanc-Renaud" < f...@redhat.com > > À: phi...@free.fr > Cc: freeipa-users@lists.fedorahosted.org > Envoyé: Mardi 7 Février 2023 17:12:32 > Objet: Re: [Freeipa-users] password-expiration > > > > > Hi, > > > > On Tue, Feb 7, 2023 at 4:49 PM < phi...@free.fr > wrote: > > > Hi Florence, > unfortunately, > > ipa user-mod user1 --krbpasswordexpiration='2024-06-28 07:49:37Z' > Usage: ipa [global-options] user-mod LOGIN [options] > > ipa: error: no such option: --krbpasswordexpiration > > > My bad, I copied the attribute name instead of the CLI option name. Can you > try with > ipa user-mod LOGIN --password-expiration =DATETIME > > > Note: if you type ipa user-mod --help you can see all the available options. > flo > > _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
